56+ min ago   (452+ words) University of Toronto researchers showed a free AI model compromising 62% of a 33-host network in seven days, with no attacker server needed A free AI model running on your own hardware is all the attacker needs to map your device…...

51+ min ago   (203+ words) AMD engineers today sent out patches on the Linux kernel mailing list for beginning to enable Enhanced SMT Protection "ESMTP" for better security with virtual machines running atop EPYC server processors with SEV-SNP... - Categories Computers Display Drivers Graphics Cards Linux…...

11+ hour, 17+ min ago   (367+ words) Rescana Technical Analysis of Malware/TTPs The attack chain began with the automated mass-download of 1.8 million Android APKs from multiple app stores using a distributed pipeline orchestrated on ten AWS EC2 instances. The APKs were decompiled and scanned for hardcoded secrets…...

13+ hour, 19+ min ago   (571+ words) In the tool box that political reporters drag to work each day, the most important one is the chance to ask politicians questions, on behalf of you, especially at election time. So what’s the worst thing that has happened to…...

15+ hour, 44+ min ago   (997+ words) This week’s roundup covers a massive Microsoft Patch Tuesday with two exploited zero-days, active FortiGate exploitation, a critical PAN-OS root-level RCE flaw, the Revolut KYC data breach, and more than 20 other stories spanning AI-driven cyberattacks, browser and firewall zero-days, and…...

16+ hour, 59+ min ago   (556+ words) LTM, the Business Creativity partner to the world's largest enterprises, has announced a collaboration with IBM and Red Hat on Lightwell to help organisations strengthen open-source software supply chains through AI-driven vulnerability remediation. The collaboration is aimed at helping enterprises…...

17+ hour, 6+ min ago   (110+ words) TYPE: Servers - Other Servers Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, remote code execution, cross-site scripting, denial of service condition and security restriction bypass on the targeted…...

1+ day, 2+ hour ago   (333+ words) Lightning Development Kit, a toolkit for building Bitcoin Lightning applications, released v0.2.6 on Sept. 9 with fixes for bugs that could divert small amounts of a node’s funds or prevent saved channel state from loading. LDK packages a Lightning implementation as a…...

1+ day, 2+ hour ago   (346+ words) Petra Valkenburg has spent over a decade navigating the world of online gambling, from classic casino table games to the rapidly evolving space of crypto betting and blockchain-based wagering platforms. She approaches the subject with a sharp eye for odds,…...

16+ hour, 56+ min ago   (483+ words) A field note from a penetration tester on discovering — and responsibly disclosing — a reflected XSS vulnerability on a live job-search platform. Every once in a while, you stumble onto a vulnerability while doing absolutely nothing sophisticated. No custom tooling, no…...