Information security
fromDeveloper Tech News
11 hours agoAI code scanners halt Internet Bug Bounty payouts
The Internet Bug Bounty program has paused new submissions due to AI-driven vulnerability discovery outpacing human researchers' rewards.
#internet-bug-bounty
#internet-bug-bounty
[ follow ]
#cybersecurity #vulnerabilities #malware #north-korea #vulnerability #remote-code-execution #ai-security
#cybersecurity
Information security
fromSilicon Canals
1 day agoOne maintainer, one compromised laptop: How North Korean hackers hijacked the Axios open source project - Silicon Canals
North Korean hackers compromised the Axios HTTP library by socially engineering its maintainer, publishing malicious versions that exposed sensitive data.
Information security
fromSilicon Canals
1 day agoOne maintainer, one compromised laptop: How North Korean hackers hijacked the Axios open source project - Silicon Canals
North Korean hackers compromised the Axios HTTP library by socially engineering its maintainer, publishing malicious versions that exposed sensitive data.
#open-source
Information security
fromSilicon Canals
1 day agoA single maintainer, a fake company, and a three-hour window: inside the Axios supply chain hijack - Silicon Canals
A single maintainer's vulnerability led to a significant security breach in a widely used JavaScript library, exposing thousands of systems to potential credential theft.
Information security
fromSilicon Canals
1 day agoA single maintainer, a fake company, and a three-hour window: inside the Axios supply chain hijack - Silicon Canals
A single maintainer's vulnerability led to a significant security breach in a widely used JavaScript library, exposing thousands of systems to potential credential theft.
#ai
Information security
fromTheregister
3 hours agoAnthropic Mythos model can find and exploit 0-days
AI model Mythos can generate zero-day vulnerabilities, surpassing human capabilities, but Anthropic chose not to release it to prevent widespread exploitation.
fromDevOps.com
1 day agoIs Your AI Agent Secure? The DevOps Case for Adversarial QA Testing - DevOps.com
The most dangerous assumption in quality engineering right now is that you can validate an autonomous testing agent the same way you validated a deterministic application. When your systems can reason, adapt, and make decisions on their own, that linear validation model collapses.
Information security
fromThe Hacker News
6 days agoNew Chrome Zero-Day CVE-2026-5281 Under Active Exploitation - Patch Released
"Use-after-free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page."
Information security
#iphone-security
Information security
fromArs Technica
2 weeks agoHundreds of millions of iPhones can be hacked with a new tool found in the wild
DarkSword, a sophisticated iPhone hacking technique discovered in use by Russian hackers, can silently compromise hundreds of millions of iOS devices running older operating system versions through infected websites.
Information security
fromWIRED
2 weeks agoHundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild
A sophisticated iPhone hacking technique called DarkSword enables attackers to silently compromise iOS devices through infected websites, affecting hundreds of millions of users running older iOS versions.
fromBleepingComputer
2 months agoCritical n8n flaws disclosed along with public exploits
Multiple critical vulnerabilities in the popular n8n open-source workflow automation platform allow escaping the confines of the environment and taking complete control of the host server. Collectively tracked as CVE-2026-25049, the issues can be exploited by any authenticated user who can create or edit workflows on the platform to perform unrestricted remote code execution on the n8n server. Researchers at several cybersecurity companies reported the problems, which stem from n8n's sanitization mechanism and bypass the patch for CVE-2025-68613, another critical flaw addressed on December 20.
Information security
[ Load more ]