Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article from Unit 42 introduces the NOVA system, which uses frontier AI to autonomously find vulnerabilities in open-source software. The system discovered over 14,000 unknown vulnerabilities, demonstrating a new capability for industrial-scale zero-day discovery.
This article from Unit 42 introduces the NOVA system, which uses frontier AI to autonomously find vulnerabilities in open-source software. The system discovered over 14,000 unknown vulnerabilities, demonstrating a new capability for industrial-scale zero-day discovery.
An actively exploited authentication bypass vulnerability in N-able N-central allows remote unauthenticated attackers to obtain administrative access to vulnerable servers. Attackers then use the Take Control functionality to connect to managed Windows endpoints and register Cloudflare tunnels for persistent access.
Apple is reportedly launching a new legal challenge to British demands for ways around its Advanced Data Protection feature. The company seeks to protect user iCloud accounts from government access, continuing a privacy dispute.
A misconfiguration in Google Firebase allowed users of the AI meeting tool tl;dv to query other users' meeting information and potentially join calls. This vulnerability puts government and corporate video call security at risk.
FortiGuard Labs analyzed a QuickFox supply chain attack that distributed trojanized Windows installers to deploy the FDMTP implant with selective targeting. The implant evolved to avoid detection, highlighting the sophistication of modern supply chain threats.