FFmpeg thanks Google for the bug reporting, now asks where the funding is
Volunteer maintainers are struggling to keep pace with AI-generated bug reports
Vulnerability articles
Europe fears Chinese EV buses on its roads could be shut down remotely
Officials warn OTA systems could be a potential vulnerability for remote shutdowns
Critical vulnerability in AMD Zen 5 CPUs could make encryption keys predictable
AMD is rolling out patches for some affected CPUs
OpenAI's ChatGPT Atlas is vulnerable to prompt injection attacks within the omnibox
No strict boundaries for untrusted user inputs mean a massive security flaw for agentic browsers
Which tech company launched the world's first bug bounty program?
Was is Mozilla, Google, Microsoft?
Seduction is the new spyware: US tech startups are now the target of "sex warfare"
The spy who shagged me?
Mail-order spies: Tech companies employ some of the most robust network security to protect against IP theft. However, no amount of network security protects against theft from within. While corporate espionage is largely digital these days, good old-fashioned infiltration is still in use. China and Russia increasingly use sexual honeypots to compromise employees and gain access to sensitive technology.
Microsoft blocks one-click IE Mode launch in Edge after browser exploits emerge
Researchers have already tracked malicious usage in the wild
Pixnapping attack lets malicious apps steal sensitive data from Android devices
The attack works, but requires a lot of "ifs" to properly achieve its goal
Two critical flaws put 7-Zip users at risk of remote code execution
Updated versions are available, but users need to manually install the latest release ASAP
Apple doubles its top bug bounty to $2 million – payouts can now exceed $5 million
But Apple says only a rare few earn the top rewards
Unity patches 8-year-old security flaw affecting thousands of games
Games have to be "rebuilt" on the patched engine rather than just pushing a fix out to end users
Trusted enclaves from Intel and AMD shown vulnerable to physical attacks
Academic teams bypass chip-level enclave protections with low-cost hardware
Supermicro servers hit by critical vulnerabilities that allow undetectable malware attacks
Supermicro is already testing a fix
New Faceplant attack exposes serious flaw in Windows Hello at Black Hat
Biometric data injection attack lets hackers instantly unlock victim accounts
Copeland refrigeration controllers hit by critical flaws threatening supermarkets and cold storage
Researchers warn flaws could disrupt global food supply chain
Claude for Chrome arrives despite 11% prompt injection success rate
Pilot program only exposes 1,000 premium users to security risk
Microsoft ends support for Office 2016 and 2019, leaving third-party patches as the only option
Don't throw your old Office installations away just yet, says 0patch
Dell patches critical "ReVault" vulnerabilities affecting millions of business PCs
A collection of five hardware-based vulnerabilities
ChatGPT vulnerability allows hidden prompts to steal Google Drive cloud data
A single "poisonous" document can cause massive damage
Nvidia workstation GPUs fall to first-ever GDDR6 Rowhammer bit-flip attack
Rowhammer jumps from CPU to GPU memory
Meet the 17-year-old who helped change Microsoft's bug bounty program
High school student helps strengthen Microsoft's digital defenses
Editor's take: At an age when most teenagers are just beginning to explore the possibilities of technology, one high school junior has already made a name for himself in the world of cybersecurity. Dylan, now 17, first caught the attention of Microsoft's Security Response Center at just 13, when he reported a critical vulnerability in Microsoft Teams. The discovery ultimately reshaped the company's bug bounty program and set Dylan on a unique professional path.
Critical flaw in AMI's MegaRAC firmware puts thousands of servers at risk
The bug is already being exploited by unknown state-sponsored hackers
Brother printer hack puts thousands of users at risk of remote takeover
Hackers can regenerate default administrator passwords after learning a device's serial number
Two exploits are threatening Secure Boot, but Microsoft is only patching one of them
The security standard keeps on failing, spectacularly