Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have built A2, an AI-powered agent that automates discovery and validation of vulnerabilities…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have developed A2, an AI-powered agent that automates discovery and validation of vulnerabilities…
Summary Two independent Israeli security researchers built an AI-driven pipeline, dubbed Auto Exploit, that uses LLM prompts (they used Anthropic’s Claude-sonnet-4.0), CVE advisories and open-source patches to generate vulnerable test…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have built A2, an AI-driven agent that mimics human vulnerability discovery for Android…
JSON Config File Leaks Azure ActiveDirectory Credentials Summary A publicly accessible appsettings.json for an ASP.NET Core application exposed Azure Active Directory credentials (ClientId and ClientSecret), researchers from Resecurity’s HUNTER team…
ICE Has Spyware Now Summary The Trump administration has rescinded a Biden-era restriction that curtailed US agencies’ access to commercial spyware. As a result, Immigration and Customs Enforcement (ICE) —…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline built by two independent Israeli researchers — dubbed Auto Exploit — uses prompts to large language models…
Federal Cuts Put Local, State Agencies at Cyber-Risk Summary Federal budget and staffing reductions at key cybersecurity organisations have coincided with a wave of high-impact attacks on state and local…
UltraViolet Expands AppSec Capabilities With Black Duck’s Testing Business Summary UltraViolet Cyber has acquired the Application Security Testing (AST) services business from Black Duck to broaden its unified security operations.…
Scammers Are Using Grok to Spread Malicious Links on X Summary Bad actors on X (formerly Twitter) are abusing the platform’s native AI assistant, Grok, to amplify and make clickable…
