Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation Now

Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
Morning Overview on MSN

Exploits now arrive 10 hours after a vulnerability is published — down from days just two years ago

When Ivanti disclosed critical flaws in its Connect Secure VPN gateway in January 2024, attackers had working exploits ...

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day ...

Calif team details how Anthropic Mythos helped build a working macOS exploit in five days

The team behind the first public macOS kernel memory corruption exploit on M5 silicon has shared fresh details on how Mythos Preview helped bypass a five-year Apple security effort in five days.
Cryptopolitan on MSN

Adshares hacker returns 86% of $628K loot as analysts expose post-hack vulnerabilities

The attacker behind the Adshares bridge exploit has returned 256 ETH to the project's deployer address, covering about 86% of ...

Microsoft Authenticator: Critical vulnerability allows token theft

Microsoft warns of a security vulnerability in Authenticator. Attackers can intercept sign-in tokens and gain access.

Google Says Hackers Used AI to Build Zero-Day Exploit

Google says hackers used AI to help build a zero-day exploit targeting 2FA, raising concerns about AI-assisted hacking.

Two Unpatched Windows Exploits Target BitLocker, SYSTEM Access

Two unpatched Windows exploit PoCs target BitLocker protections and privilege controls after Microsoft’s May Patch Tuesday ...
CIO Dive

Frontier AI models reap rapid discovery of security vulnerabilities

AI models are helping discover software vulnerabilities even faster than previously expected.  Lee Klarich, the chief product ...
Security Boulevard

Whack-a-Mole on Steroids” AI Vulnerability Hunting, Autonomous Remediation, and the Coming Cybersecurity Liability Crisis

AI-enhanced vulnerability discovery is transforming cybersecurity into an industrialized process that outpaces human remediation capacity, raising severe legal, liability, and operational risks as ...
SecurityWeek

Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere

Mythos outperformed rival models in vulnerability discovery, particularly in live-plus-source testing, but showed limitations ...
VentureBeat

Mythos autonomously exploited vulnerabilities that survived 27 years of human review. Security teams need a new detection playbook

A 27-year-old bug sat inside OpenBSD’s TCP stack while auditors reviewed the code, fuzzers ran against it, and the operating system earned its reputation as one of the most security-hardened platforms ...