Schneier on Security (1 hour ago)
In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of this from Germany: Legal systems encode the foundations of social order in natural language.
Read the full story on Schneier on Security.
Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing ‘tech on the cheap’
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.
Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward for high-impact architectural security flaws.
From solar-powered convenience to 24MP panoramic monitoring, the award-winning OMVI Series delivers intelligent protection without monthly fees.
Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attackers may never exploit, while higher-risk exposures sit, waiting in the queue.
A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes.
Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.
Researchers set up a fake start-up company to study fraudulent North Korean IT workers.
69 active sources
24 Turkish · 45 English
All sources
