Information security
fromSecurityWeek
12 hours agoData Leakage Vulnerability Patched in OpenSSL
Seven vulnerabilities in OpenSSL have been patched, including a moderate severity flaw that can lead to sensitive data leakage.
#firefox-security-vulnerabilities
#firefox-security-vulnerabilities
[ follow ]
#cybersecurity #vulnerabilities #malware #vulnerability #apt28 #phishing #supply-chain-attack #social-engineering
Cryptocurrency
fromFortune
2 days agoA quantum threat to Bitcoin has some asking the unthinkable: Is it time to freeze old wallets belonging to Satoshi Nakamoto? | Fortune
Quantum computing poses a significant threat to Bitcoin wallets, particularly those of Satoshi Nakamoto, potentially allowing hackers to access them by 2029.
#phishing
Information security
fromTheregister
1 day agoHundreds compromised daily in Microsoft device code phishes
A Microsoft device-code phishing campaign is compromising hundreds of organizations daily, utilizing AI and automation to steal financial data.
Privacy technologies
fromTechzine Global
1 month agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
Privacy technologies
fromTechzine Global
1 month agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
fromSecurityWeek
2 weeks agoChrome 146 Update Patches High-Severity Vulnerabilities
The first vulnerability, CVE-2026-4673, is a heap buffer overflow issue in WebAudio that earned the reporting researcher a $7,000 bug bounty reward. Google has yet to determine the bounty amount for CVE-2026-4677, another bug reported by the same researcher.
Information security
#ai-security-research
Information security
fromInfoQ
3 weeks agoAI Model Discovers 22 Firefox Vulnerabilities in Two Weeks
Claude Opus 4.6 discovered 22 security vulnerabilities in Firefox within two weeks, with 14 classified as high-severity, demonstrating AI's capability to identify security flaws in established codebases faster than human researchers.
Information security
fromThe Hacker News
1 month agoAnthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model
Anthropic's Claude AI discovered 22 Firefox vulnerabilities including 14 high-severity issues, demonstrating AI's capability in security research while showing limitations in exploit development.
#chrome-zero-day-vulnerabilities
Information security
fromThe Hacker News
3 weeks agoWeekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More
Active Chrome zero-day exploits, Instagram E2EE discontinuation, and SocksEscort proxy service disruption highlight escalating security threats and privacy rollbacks across major platforms.
fromTheregister
3 weeks agoGoogle rushes Chrome update to fix zero-days under attack
CVE-2026-3909 is an out-of-bounds write flaw in Skia, the graphics library Chrome uses to render web content and parts of its user interface. Memory corruption bugs like this can sometimes be abused by attackers to crash applications or run their own code if successfully exploited.
Information security
fromComputerworld
1 month agoExploit available for new Chrome zero-day vulnerability, says Google
Gene Moody, field CTO at Action1, explained that, in this vulnerability, a browser frees an object, but later continues to use the stale reference memory location. Any attacker who can shape heap layout with controlled content can potentially replace the contents of that freed memory with data they control. Because this lives in the renderer, and is reachable through normal page content, he said, the trigger surface is almost absolute.
Information security
[ Load more ]