Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications […]
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage […]
The days of assuming another company’s breach is someone else’s problem are over
The median blast radius of data breaches has increased year-on-year at the same time cybercriminals have […]
OpenAI’s August fix for theft of reasoning traces was quickly bypassed
Cybersecurity research firm Xint on Monday published details of a bug in the OpenAI API that […]
OpenAI, Anthropic disclosures spotlight growing AI containment challenge
Two leading AI developers have released fresh evidence of a problem that researchers have long anticipated: […]
Malicious downloads can trick AI coding agents into compromising themselves
Malicious instruction files planted in a computer’s Downloads folder can trick AI coding agents into executing […]
What EvilTokens teaches us about defending against AI-assisted attacks
Cybercriminals don’t need AI to compromise an organization, but AI is making its way into classic […]
10 most powerful cybersecurity companies today
The number of cybersecurity startups attempting to cash in on the AI boom is staggering. But […]
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, […]
Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0
Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them […]