Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).
The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on Secu… Continue reading Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports→

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWe… Continue reading Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier→

AI Agents Aimed SQL Injection at US and Canadian Government Sites

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.
The post AI Agents Aimed SQL Injection at US and Canadian Government Sites appeared first on SecurityWeek.
Continue reading AI Agents Aimed SQL Injection at US and Canadian Government Sites→

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders

The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide.
The post Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders appeared first on SecurityWeek.
Continue reading Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders→

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.
The post Google: AI Is Changing the Pace and Profile of Vulnerability Discovery appeared first on SecurityWeek.
Continue reading Google: AI Is Changing the Pace and Profile of Vulnerability Discovery→