YouTube video by Hank Green

As attackers ramp up their AI exploit development, the search for software vulnerabilities is changing rapidly.

China's Cyberspace Administration, Ministry of Public Security, and Ministry of Industry and Information Technology introduced.

#Anthropic CEO #DarioAmodei #warned that #AI has exposed tens of thousands of #softwarevulnerabilities, creating a narrow window for tech firms, governments, and banks to fix them before adversaries exploit them. Amodei and JPMorgan Chase CEO Jamie Dimon expressed optimism that, with proper response, this “moment of danger” could lead to a better world. https://www.cnbc.com/2026/05/05/anthropic-ceo-cyber-moment-of-danger-mythos-vulnerabilities.html?eicker.news #tech #media #news

Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.

Unresolved security debt is leaving organizations at greater risk of security breaches as fix times grow longer and the software ecosystem increasingly complexifies.

Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.

A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software, but the issues extend beyond ATMs to affect critical systems across industries. Matt Burch's research on CryptoPro Secure Disk, used in ATMs and other embedded devices, revealed flaws that could bypass integrity checks and grant full access to encrypted devices. CryptWare patched the vulnerabilities in two phases, but the broader challenge lies in the software supply chain. Developers must release patches, companies must implement tailored fixes, and customers must install updates, which is difficult for deployed systems. The case underscores the risks of relying on 'security through obscurity' and the need for transparency as AI tools make vulnerability detection easier. While some industries have improved patch adoption, niche security products remain under scrutiny. The incident highlights the complexity of addressing software flaws in a globally distributed supply chain, where delayed updates can leave systems vulnerable to exploitation.

Researchers from A Security uncovered a critical vulnerability in Zoom's screen-sharing protocol that could allow attackers to hijack devices during video calls. The flaw, discovered using publicly available AI models, required fewer than 20 prompts to exploit, enabling silent attacks without user interaction. Zoom issued patches for all supported operating systems (Windows, macOS, Linux, iOS, Android) after the vulnerability was disclosed. The issue stemmed from real-time annotation features in screen sharing, which AI systems identified as a common source of overlooked vulnerabilities in proprietary software. A Security cofounders warned that the democratization of AI hacking tools lowers the barrier to entry for malicious actors, emphasizing Zoom's trust-based usage model as an attractive target. Attackers could potentially take control of enterprise networks by joining a call and exploiting the flaw, raising concerns about the security of widely used video conferencing platforms. The incident highlights the growing role of AI in both discovering and exploiting software vulnerabilities, intensifying the 'cat and mouse game' between security researchers and hackers.

JetBrains vulnerabilities expose IntelliJ IDEA and TeamCity users. Experts debate the necessity and urgency of immediate software updates.

Critical software vulnerabilities exploited, impacting Microsoft and open-source tools; urgent patching needed. #Cybersecurity #SoftwareVulnerabilities #PatchManagement

Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio Code (VS Code) extensions that, if successfully exploited, could allow threat actors to steal local files and execute code remotely. The extensions, which have been collectively installed more than 125 million times, are Live Server, Code Runner, Markdown Preview Enhanced, and

Meta has warned users about the critical CVE-2025-27363 vulnerability in FreeType and has emphasized the need for swift patching to prevent exploitation.

Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.

Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.

Tool proliferation has created a data volume challenge, making it harder to secure the software development and deployment lifecycle. Fortunately, AI now offers a solution.

Researchers discover large supply-chain attack targeting Chrome extension developersDozens have been compromised, resulting in possibly millions of victim usersResearchers urge users to patch or uninstall...

#Anthropic’s #Mythos model, unveiled in April, has significantly improved the ability to detect #softwarevulnerabilities. While AI tools are not yet capable of fixing these bugs, they are proving invaluable in identifying them, potentially shifting the balance of power in cybersecurity towards defenders. https://techcrunch.com/2026/05/07/how-anthropics-mythos-has-rewritten-firefoxs-approach-to-cybersecurity/?eicker.news #tech #media #news

Veracode found a 47% increase in the average time taken to patch software vulnerabilities, driven by growing reliance on third-party code

The Pentagon bans foreign citizens from accessing highly sensitive data, but Microsoft bypasses this by using engineers in China and elsewhere to remotely instruct American “escorts” who may lack expe...

T3 Talks · Episode

T3 Talks · Episode