New Vulnerability in n8n
January 15 2026This isn’t good: We discovered a critical vulnerability (CVE-2026-21858, CVSS 10.0) in n8n that enables attackers to take over locally deployed instances, impacting an estimated 100,000 servers globally. No official...
Read moreLegal Restrictions on Vulnerability Disclosure
November 19 2025Kendra Albert gave an excellent talk at USENIX Security this year, pointing out that the legal agreements surrounding vulnerability disclosure muzzle researchers while allowing companies to not fix...
Read moreSerious F5 Breach
October 23 2025This is bad:
F5, a Seattle-based maker of networking software, disclosed the breach on Wednesday. F5 said a “sophisticated” threat group working for an undisclosed nation-state government had...
Read more
Apple’s Bug Bounty Program
October 15 2025Apple is now offering a $2M bounty for a zero-click exploit. According to the Apple website:
Today we’re announcing the next major chapter for Apple Security Bounty,...
Read more
Autonomous AI Hacking and the Future of Cybersecurity
October 10 2025AI agents are now hacking computers. They’re getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber...
Read moreApple’s New Memory Integrity Enforcement
September 23 2025Apple has introduced a new hardware/software security feature in the iPhone 17: “Memory Integrity Enforcement,” targeting the memory safety vulnerabilities that spyware products like Pegasus tend to use...
Read moreTime-of-Check Time-of-Use Attacks Against LLMs
September 18 2025This is a nice piece of research: “Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents“.:
Abstract: Large Language Model (LLM)-enabled agents are rapidly emerging across a wide...
Read more
Hacking Electronic Safes
September 17 2025Vulnerabilities in electronic safes that use Securam Prologic locks:
While both their techniques represent glaring security vulnerabilities, Omo says it’s the one that exploits a feature intended as a...
Read more
Recent Comments