Search: [vulnerabilities]

How CVSS v4.0 works: characterizing and scoring vulnerabilities | Malwarebytes

510 · models · vulnerabilities

December 1, 2025 at 3:26:17 PM UTC · permalink

·

https://www.malwarebytes.com/blog/news/2025/11/how-cvss-v4-0-works-characterizing-and-scoring-vulnerabilities

You can poison AI with just 250 dodgy documents | Malwarebytes

510 · ai · vulnerabilities · poisoning

October 21, 2025 at 1:22:16 PM UTC · permalink

·

https://www.malwarebytes.com/blog/ai/2025/10/you-can-poison-ai-with-just-250-dodgy-documents

Why your boss isn't worried about AI

351 · 601 · 644 · ai · programming · debugging · vulnerabilities

October 15, 2025 at 1:15:50 PM UTC · permalink

·

https://boydkane.com/essays/boss

Package Hallucinations: How LLMs Can Invent Vulnerabilities | USENIX

510 · ai · programming · vulnerabilities

September 22, 2025 at 6:47:47 PM UTC · permalink

·

https://www.usenix.org/publications/loginonline/we-have-package-you-comprehensive-analysis-package-hallucinations-code

Kerberoasting – A Few Thoughts on Cryptographic Engineering

510 · authorization · authentication · microsoft · vulnerabilities

September 10, 2025 at 1:18:05 PM UTC · permalink

·

https://blog.cryptographyengineering.com/2025/09/10/kerberoasting/

They know where you are: Cybersecurity and the shadow world of geolocation

510 · vulnerabilities · gis

September 4, 2025 at 1:37:33 PM UTC · permalink

·

https://www.bleepingcomputer.com/news/security/they-know-where-you-are-cybersecurity-and-the-shadow-world-of-geolocation/

These psychological tricks can get LLMs to respond to “forbidden” prompts - Ars Technica

ai · 351 · 510 · vulnerabilities · ethics

September 4, 2025 at 1:33:56 PM UTC · permalink

·

https://arstechnica.com/science/2025/09/these-psychological-tricks-can-get-llms-to-respond-to-forbidden-prompts/

Wrap Up: The Month of AI Bugs · Embrace The Red

510 · ai · vulnerabilities

September 4, 2025 at 12:19:51 PM UTC · permalink

·

https://embracethered.com/blog/posts/2025/wrapping-up-month-of-ai-bugs/

"Scamlexity": When Agentic AI Browsers Get Scammed

510 · ai · vulnerabilities

August 25, 2025 at 2:20:04 PM UTC · permalink

·

https://guard.io/labs/scamlexity-we-put-agentic-ai-browsers-to-the-test-they-clicked-they-paid-they-failed

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories – Kudelski Security Research

tl;dr: find a dependency (in this case, a third-party tool made available to end-users) that's exploitable, exploit it!

510 · vulnerabilities · dependencies

August 19, 2025 at 8:07:52 PM UTC · permalink

·

https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/

Majority of Organizations Ship Vulnerable Code, Study Finds - Infosecurity Magazine

This is why the absence of software-liability law is a Bad Thing!

510 · ai · programming · vulnerabilities

August 19, 2025 at 3:43:30 PM UTC · permalink

·

https://www.infosecurity-magazine.com/news/majority-of-orgs-ship-vulnerable/

My Lethal Trifecta talk at the Bay Area AI Security Meetup

510 · ai · vulnerabilities · injectionattack

August 9, 2025 at 7:12:56 PM UTC · permalink

·

https://simonwillison.net/2025/Aug/9/bay-area-ai/

Insights from 2025 GenAI Code Security Report

510 · ai · programming · vulnerabilities · ai

August 1, 2025 at 7:41:17 PM UTC · permalink

·

https://www.veracode.com/blog/genai-code-security-report/

Libxml2's "no security embargoes" policy [LWN.net]

510 · opensource · sustainability · bugreporting · vulnerabilities

June 26, 2025 at 12:41:11 AM UTC · permalink

·

https://lwn.net/SubscriberLink/1025971/73f269ad3695186d/

Moving CVEs past one-nation control – Sophos News

510 · sustainability · vulnerabilities

April 18, 2025 at 2:09:14 PM UTC · permalink

·

https://news.sophos.com/en-us/2025/04/17/moving-cves-past-one-nation-control/

MITRE warns that funding for critical CVE program expires today

510 · vulnerabilities

April 16, 2025 at 2:54:56 PM UTC · permalink

·

https://www.bleepingcomputer.com/news/security/mitre-warns-that-funding-for-critical-cve-program-expires-today/

How We Hacked a Software Supply Chain for $50K - Lupin & Holmes

Docker has remanence! Who knew?

510 · digitalforensics · storage · docker · vulnerabilities · threathunting

April 4, 2025 at 7:52:56 PM UTC · permalink

·

https://www.landh.tech/blog/20250211-hack-supply-chain-for-50k/

CVE ID Assignment and CVE Record Publication for AI-Related Vulnerabilities | by CVE Program Blog | Feb, 2025 | Medium

510 · ai · vulnerabilities

March 31, 2025 at 6:16:54 PM UTC · permalink

·

https://medium.com/@cve_program/cve-id-assignment-and-cve-record-publication-for-ai-related-vulnerabilities-78a649bda815

Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel

510 · internetofthings · horrorstories · vulnerabilities

January 24, 2025 at 6:38:33 PM UTC · permalink

·

https://samcurry.net/hacking-subaru

Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS – Sophos News

510 · vulnerabilities · riskmgmt

January 6, 2025 at 6:18:51 PM UTC · permalink

·

https://news.sophos.com/en-us/2024/12/27/prioritizing-patching-a-deep-dive-into-frameworks-and-tools-part-1-cvss/