AI could accelerate vulnerability discovery, shrinking the pool of exploits governments rely on while speeding up the race ...

OpenAI limits GPT-6 Astra to code review and patching after tests showed exploit development capabilities, including two zero ...

OpenAI Astra cybersecurity model discovered two unpatched zero-day vulnerabilities in Chrome's V8 engine while taking a ...

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with ...

When Ivanti disclosed critical flaws in its Connect Secure VPN gateway in January 2024, attackers had working exploits circulating within roughly 24 hours. By the time most IT teams scheduled a patch ...

A vulnerability on an isolated asset with no route from the Internet and no meaningful access beyond it poses a different ...

Organizations are advised to immediately patch a fresh authentication bypass vulnerability affecting the file transfer ...

Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely ...

Public-facing instances of ProjectSend, an open-source file-sharing web application, have been exploited by attackers, according to vulnerability intelligence provider VulnCheck. ProjectSend was ...

In a new proof-of-concept, endpoint security provider Morphisec showed that the Exploit Prediction Scoring System (EPSS), one of the most widely used frameworks for assessing vulnerability exploits, ...

Surge in vulnerabilities and exploits leaving overloaded security teams with little recourse but to embrace risk-based approaches to patching what they can. Enterprise attack surfaces continue to ...

The $10.7 million THORChain exploit was caused by a GG20 vulnerability, which allowed a malicious node to reconstruct a full private key to one of its vaults. THORChain said a malicious node operator ...