Blog
AI-found bugs aren’t proving any easier to exploit despite the hype
VulnCheck says fewer than 2% of AI-assisted vulnerability discoveries have been weaponized, casting doubt on claims frontier models are handing attackers a major advantage
Bank for charities pulls online services over security fears
Customer funds safe, but 14,000 organizations may have to phone in time-sensitive payments
Uncle Sam needs you to fight for 6G leadership and security, lest Beijing get there first
Washington rallies allies to shape next-generation networks after spending 18 months rattling them
Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock
Unauthenticated command injection scores perfect 10 and may expose managed Edge devices
Tech giants link hands to praise open AI models after OpenAI – Hugging Face attack
The Open Security AI Alliance says the Hugging Face/OpenAI mess proves frontier labs can't be trusted to properly secure sensitive systems
Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update
One bug disabled the security service on restart, another blocked installation on hardened RHEL systems
Google goes it alone with a new cybercrime crew taxonomy
So much for Microsoft and CrowdStrike’s plans for consistent names across the industry
Pope’s official prayer app commits cardinal sin, leaks 700K+ users’ info
(Security) hole-ier than thou
Europol flags 4,340 ‘horrific’ URLs linked to The Com
Stop the spread (of online recruiting and propaganda)
Uncle Sam tells overseas cybercrooks their visas are canceled
Policy targets online scammers, sextortionists, and potentially their immediate families