Collaborate Disseminate
PARTNER CONTENT: Learn what the flaws are, how far exploitation has gone, and how to get to full coverage fast with Tanium Continue reading PHP2Shell: No login, no app code, no warning. What next?
PLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers Continue reading Work to protect DNS from quantum decryption attacks is speeding up
Designed to carry out 100,000 steps without human approval Continue reading Autonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deeds
Bad things (and software bugs?) come in threes Continue reading There’s a third PHP2Shell bug, but it won’t get an emergency fix
Monitoring was only partial and was easily bypassed Continue reading Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
Kernel maintainers stop asking who used AI, as long as the code is good Continue reading Torvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patches
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm Continue reading UK threatens subsea cable saboteurs with 14 years behind bars
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says. Continue reading PHP2Shell exploit bypasses protections designed to stop remote code execution
Vendor ‘strongly recommends’ upgrading to a fixed version ‘as soon as possible’ Continue reading Max-severity GitLab bug allows remote code execution over 12 years of releases
We didn’t want to issue SSL/TLS certs anyway, eMudhra suggests after one private key turns out to be the number 4 Continue reading Disgraced Indian cert issuer leaves the cert issuing business