Serious F5 Breach
October 23 2025This is bad:
F5, a Seattle-based maker of networking software, disclosed the breach on Wednesday. F5 said a “sophisticated” threat group working for an undisclosed nation-state government had...
Read more
Apple’s Bug Bounty Program
October 15 2025Apple is now offering a $2M bounty for a zero-click exploit. According to the Apple website:
Today we’re announcing the next major chapter for Apple Security Bounty,...
Read more
Autonomous AI Hacking and the Future of Cybersecurity
October 10 2025AI agents are now hacking computers. They’re getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber...
Read moreApple’s New Memory Integrity Enforcement
September 23 2025Apple has introduced a new hardware/software security feature in the iPhone 17: “Memory Integrity Enforcement,” targeting the memory safety vulnerabilities that spyware products like Pegasus tend to use...
Read moreTime-of-Check Time-of-Use Attacks Against LLMs
September 18 2025This is a nice piece of research: “Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents“.:
Abstract: Large Language Model (LLM)-enabled agents are rapidly emerging across a wide...
Read more
Hacking Electronic Safes
September 17 2025Vulnerabilities in electronic safes that use Securam Prologic locks:
While both their techniques represent glaring security vulnerabilities, Omo says it’s the one that exploits a feature intended as a...
Read more
Lawsuit About WhatsApp Security
September 15 2025Attaullah Baig, WhatsApp’s former head of security, has filed a whistleblower lawsuit alleging that Facebook deliberately failed to fix a bunch of security flaws, in violation of its...
Read moreIn a rare squid/security combined post, a new vulnerability was discovered in the Squid HTTP proxy server.
Read moreGoogle Project Zero Changes Its Disclosure Policy
August 8 2025Google’s vulnerability finding team is again pushing the envelope of responsible disclosure:
Google’s Project Zero team will retain its existing 90+30 policy regarding vulnerability disclosures, in which it provides...
Read more
Airportr is a service that allows passengers to have their luggage picked up, checked, and delivered to their destinations. As you might expect, it’s used by wealthy or...
Read more
Recent Comments