Tag: vulnerability management
685 articles
AI-Discovered Vulnerabilities See Similar Exploitation Rates as Traditional Ones
New research reveals that vulnerabilities discovered using AI tools are being exploited at almost the same rate as those found through traditional methods, with a 1.3% exploitation rate for AI-discovered vulnerabilities. This challenges alarmist predictions of an impending AI-driven security crisis.
AI-Assisted Tools Discover More Vulnerabilities, But Exploitation Rate Remains Steady
AI-assisted tools are supercharging vulnerability discovery, uncovering over 1,000 new defects in just six months, yet the rate of exploitation remains surprisingly steady, with only 1.3% of AI-discovered vulnerabilities being exploited in the wild. This finding challenges the notion that AI-discovered vulnerabilities are inherently more attractive to attackers.
AI-Assisted Bug Discovery Falls Short of Expected Exploit Wave
The hype around AI-assisted bug discovery may have been overstated, as a recent analysis found that only 1.3% of vulnerabilities identified with AI have been confirmed as exploited in the wild. This surprisingly low rate suggests that AI-assisted discovery may not be the silver bullet for uncovering easily exploitable vulnerabilities.
IPMI Vulnerability Exposes 24,650 Server Management Interfaces
A recent security researcher found that over 30% of server management interface passwords can be easily cracked using common wordlists and factory default patterns, exposing a massive 24,650 interfaces to potential threats. This startling vulnerability, CVE-2013-4786, allows hackers to gain unauthorized access to sensitive server management hardware.
CAF Bank Halts Online Services Over Third-Party Software Vulnerability
CAF Bank has temporarily halted its online banking service due to a third-party software vulnerability, and customers are being supported while the issue is resolved with the help of external experts. The bank's CEO, Alison Taylor, has apologized for the disruption, assuring customers that access will be restored once the connection is secure.
Flaws in Hugging Face Diffusers Bypass Code Safeguards
Researchers uncovered a disturbing vulnerability in Hugging Face's diffusers library, where three high-severity flaws allowed hackers to secretly execute malicious code through model repositories, bypassing built-in safeguards designed to prevent such threats. This alarming exploit highlights the urgent need for enhanced security measures in AI repositories.
Arista Disrupts Actively Exploited VeloCloud Bug
Arista warns of a critical vulnerability in VeloCloud Orchestrator On-Prem, which is being actively exploited by hackers, putting the confidentiality, integrity, and availability of sensitive data at risk. This severe OS command injection flaw, scoring a perfect 10.0 on the CVSS scale, allows unauthorized access to internal functionality, compromising entire networks.
TeamCity Flaw Enables Unauthenticated Remote Code Execution
A critical TeamCity vulnerability, CVE-2026-63077, with a near-perfect CVSS score of 9.8, leaves all on-premise servers open to unauthenticated remote code execution - allowing attackers to run malicious commands with ease. Update your TeamCity server immediately to prevent exploitation.
Legacy Technology Exposes Nations to Growing Cyber Risk
The clock is ticking: with legacy technology, organisations know the risks, but lack a mechanism to spark change, leaving nations vulnerable to growing cyber threats. As exploits and AI evolve at breakneck speed, the window for protection is shrinking fast.
Arista Disrupts Zero-Day Attacks on VeloCloud Orchestrator
Arista has patched a critical zero-day vulnerability in its VeloCloud Orchestrator that allowed attackers to launch devastating, maximum-severity attacks with just network access - no login credentials required. The flaw, rated 10.0 in severity, could compromise the confidentiality, integrity, and availability of sensitive data managed by the orchestrator.
Microsoft Unveils AI-Powered Security Model to Outperform Rivals
Microsoft just unveiled a game-changing AI-powered security model that has achieved a remarkable 95.95 percent success rate in identifying vulnerabilities, leaving the competition in the dust. This innovative model, combined with the MDASH harness, is poised to revolutionize bug hunting and cybersecurity.
GitHub Targets Supply Chain Attacks with Dependabot Cooldown
GitHub's new Dependabot cooldown feature gives you a security boost by waiting at least three days after a release is published before updating dependencies, helping to prevent rapid adoption of malicious package releases. This brief pause allows time to catch poisoned or trojanized packages, keeping your projects safer.
GitHub, PyPI Fortify Defenses Against Supply Chain Attacks
GitHub and PyPI are stepping up their game to shield against supply chain attacks, introducing time-based gates to slow down the release of potentially risky package updates. GitHub's Dependabot now delays updates for 72 hours, while PyPI will reject new files added to releases over 14 days old.
Redis Exposes Zero-Days, RCE Exploit in Latest Security Releases
Redis just released seven security updates to fix major vulnerabilities that could let attackers run malicious code remotely, thanks to newly published proof-of-concept exploits targeting several Redis versions. The fixes cover multiple branches, including 6.x, 7.x, and 8.x, and patch memory-corruption flaws that can be triggered using the RESTORE command and other requirements.
NodeBB Fixes Flaws Exposing Admin Access, Private Chats
NodeBB has patched eight high-severity security flaws that left its forum platform vulnerable to admin access and private chat exposure, affecting all versions prior to 4.14.0. Admins should install the fixes immediately to safeguard their sites.
Malware Exploits Trust In Ordinary Systems
This week's ThreatsDay bulletin revealed a disturbing trend: hackers are disguising malware as ordinary tools and features, using familiar names and routine functions to infiltrate code repositories, desktop systems, mobile apps, and more. Even trusted platforms like GitHub and PyPI are being exploited, with GitHub announcing a security update to block vulnerable support bundle uploads.
Oracle Releases 1,449 Security Patches Amid AI-Driven Vulnerability Surge
Oracle's recent release of 1,449 security patches may seem alarming, but experts say it's largely a reflection of the company's massive software ecosystem and its cutting-edge use of AI to supercharge vulnerability detection. This huge number is also a testament to Oracle's proactive approach to staying on top of security threats.
Check Point Disrupts Exploited SmartConsole Flaw Granting Admin Access
A critical flaw in Check Point's SmartConsole has been exploited, allowing hackers to gain admin access with a CVSS score of 9.3, and Check Point has released updates to address the vulnerability. This authentication-bypass flaw lets attackers modify security policies and configurations with full administrative rights.
Linux Kernel Team Floods with 432 CVEs in Two Days
A staggering 432 Linux kernel CVEs were published over just two days, sending shockwaves through the Linux community and leaving system administrators scrambling to keep up with the sudden workload. This unprecedented flood of vulnerability notices has sparked heated debate over prioritization and practical solutions.
InfraTrust Report Flags Urgent Infrastructure Vulnerabilities
In a wake-up call for infrastructure security, Eclypsium's inaugural InfraTrust Pulse report reveals a staggering 61 vulnerabilities, including six critical ones, threatening the very foundation of our digital world. The monthly report aims to help organizations focus on the most pressing threats, prioritizing vulnerabilities that pose a real-world risk.
CISA Targets Langflow Flaw in Urgent Patch Directive
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent patch directive for a vulnerability in the Langflow visual framework, used to build AI agents, after recording over 220 exploitation attempts in just one day. This critical flaw, tracked as CVE-2026-0770, has already been exploited by multiple attackers, prompting immediate action.
Ubuntu Vulnerability Exposes Local Users to Root Access Risk
A newly discovered vulnerability, CVE-2026-8933, puts users of Ubuntu Desktop 24.04, 25.10, and 26.04 at risk of full root access, allowing any local user to gain unrestricted control on default installs. This high-severity flaw can be easily exploited by a local, unprivileged user, making immediate attention crucial.
Google Unveils Gemini 3.5 Flash Cyber to Accelerate Vulnerability Detection
Meet Gemini 3.5 Flash Cyber, a game-changing AI model that supercharges vulnerability detection with lightning-fast speed and pinpoint accuracy. This lightweight powerhouse helps you discover, validate, and patch vulnerabilities quickly and efficiently, without breaking the bank.
AWS Kiro Flaw Enables Remote Code Execution Through Poisoned Web Pages
Researchers just uncovered a major flaw in AWS Kiro that lets hackers execute remote code through manipulated web pages, putting developers' machines at risk. A simple request to summarize a webpage was all it took to expose this vulnerability.