AI Bug Reports Broke Linux’s Security List, Says Torvalds
AI bug reports have made Linux's security mailing list nearly unusable, Torvalds says. New kernel 7.1-rc4 policy reroutes AI finds to public channels.
AI Broke CTF Competitions in 2026. Hiring Is Next.
At BSidesSF 2026, an AI agent built in a weekend solved all 52 CTF challenges. ...
CVE-2026-42897: Microsoft Exchange Zero-Day Is Being Exploited Right Now
Microsoft confirmed active exploitation of CVE-2026-42897, an Exchange OWA zero-day with no patch. Here is ...
Pwn2Own Berlin 2026: Cursor, LiteLLM, and Codex Hacked
Cursor IDE was hacked twice at Pwn2Own Berlin 2026. LiteLLM fell to a full-chain SSRF ...
BitLocker Zero-Day YellowKey Breaks Windows Encryption
YellowKey defeats BitLocker on Windows 11 and Server 2022/2025 using WinRE. The default enterprise config ...
node-ipc npm Credential Stealer Hits 822K Downloads
Three node-ipc npm versions carry a stealer targeting 90+ secret categories. Here's how the attacker got in, what was taken, and what to ...
Vercel Deepsec: AI Agents Scan Your Code for Flaws
Vercel open-sourced deepsec, an AI security scanner using Claude Opus 4.7 and GPT-5.5 to find ...
Project Zero’s Pixel 10 Zero-Click Exploit Explained
Google Project Zero chained a Dolby audio flaw and a VPU kernel driver bug to ...
Pwn2Own Berlin 2026: AI Coding Tools Were Hacked
Pwn2Own Berlin 2026 exploited Claude Code, Cursor, OpenAI Codex, and LiteLLM. Here's what fell, what ...
MCP Has 1,800 Unauthenticated Servers in Production. Here’s Your Exposure.
MCP's explosive growth has a security gap: 1,800 public servers with no auth, 200,000 exposed ...