Published on: 2025-06-11 05:00:44
Hey HN! We're Brandon, Sam, and Akul from MindFort ( https://mindfort.ai ). We're building autonomous AI agents that continuously find, validate, and patch security vulnerabilities in web applications—essentially creating an AI red team that runs 24/7. Here's a demo: https://www.loom.com/share/e56faa07d90b417db09bb4454dce8d5a Security testing today is increasingly challenging. Traditional scanners generate 30-50% false positives, drowning engineering teams in noise. Manual penetration testing
Keywords: agents ai security testing vulnerabilities
Find related items on AmazonPublished on: 2025-06-28 11:18:49
Threat actors, likely supported by the Russian government, hacked multiple high-value mail servers around the world by exploiting XSS vulnerabilities, a class of bug that was among the most commonly exploited in decades past. XSS is short for cross-site scripting. Vulnerabilities result from programming errors found in webserver software that, when exploited, allow attackers to execute malicious code in the browsers of people visiting an affected website. XSS first got attention in 2005, with t
Keywords: eset mdaemon sednit vulnerabilities xss
Find related items on AmazonPublished on: 2025-07-06 11:58:25
The European Vulnerability Database (EUVD) is now fully operational, offering a streamlined platform to monitor critical and actively exploited security flaws amid the US struggles with budget cuts, delayed disclosures, and confusion around the future of its own tracking systems. As of Tuesday, the full-fledged version of the website is up and running. "The EU is now equipped with an essential tool designed to substantially improve the management of vulnerabilities and the risks associated wit
Keywords: cve euvd program vulnerabilities vulnerability
Find related items on AmazonPublished on: 2025-07-29 09:12:20
Security vulnerabilities discovered in Apple’s AirPlay SDK mean that millions of devices could be hacked by attackers. The flaw has been dubbed AirBorne. Related vulnerabilities would also have allowed hackers to attack Apple devices too, but the iPhone maker says it has issued fixes for these in the past few months. CarPlay devices are also vulnerable, though the real-life risks there are very low … AirPlay is the Wi-Fi-based protocol that allows Apple devices like iPhones, iPads, and Macs to
Keywords: airplay apple devices security vulnerabilities
Find related items on AmazonPublished on: 2025-08-04 17:06:59
Microsoft announced an increase in bug bounty payouts to $30,000 for AI vulnerabilities found in Dynamics 365 and Power Platform services and products. Power Platform includes applications designed to help companies analyze data and automate processes, while Dynamics 365 is a set of business apps that connect customers, products, people, and operations. Eligible AI vulnerability types include inference manipulation, model manipulation, and inferential information disclosure of critical or impo
Keywords: ai bounty microsoft severity vulnerabilities
Find related items on AmazonPublished on: 2025-08-17 20:54:17
Assumed Audience: Programmers and others in the cybersecurity industry. Epistemic Status: Confident. tl;dr: The industry needs professional certifications and liabilities for not reporting vulnerabilities. Introduction I don’t know if you have seen the news, but MITRE’s government contract for CVE was about to expire today (until they got a reprieve). As techies are wont to do, and since the current administration is behated by most techies, they are up in arms about it. Let me say upfront:
Keywords: attributes pswe pswes think vulnerabilities
Find related items on AmazonPublished on: 2025-08-19 04:46:17
Robert Triggs / Android Authority TL;DR The US government has stopped funding the Common Vulnerabilities and Exposures (CVE) database, a standardized global system for identifying and tracking software vulnerabilities across platforms and devices, including Android. Without CVEs, Google’s monthly Android security bulletins may face delays, confusion, or reduced transparency. It’s unclear who, if anyone, will step in to maintain or replace the CVE system. The United States government has abru
Keywords: android cve program security vulnerabilities
Find related items on AmazonPublished on: 2025-08-19 06:57:27
In a stunning development that demolishes a cornerstone of cybersecurity defense, nonprofit R&D organization MITRE said that its contract with the Department of Homeland Security (DHS) to maintain the Common Vulnerabilities and Exposures (CVE) database, which organizes computer vulnerabilities, will expire at midnight on April 16. Yosry Barsoum, vice president and director of the Center for Securing the Homeland at MITRE, wrote in a missive to the CVE board, “On Wednesday, April 16, 2025, fundi
Keywords: common cve mitre program vulnerabilities
Find related items on AmazonPublished on: 2025-08-19 21:41:52
is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO. Funding is about to run out for the Common Vulnerabilities and Exposures (CVE) program – a system used by major companies like Microsoft, Google, Apple, Intel, and AMD to identify and track publicly disclosed cybersecurity vulnerabilities. The program helps engineers identify how bad an exploit is and how to prioritize applying patches or other miti
Keywords: cve cybersecurity mitre program vulnerabilities
Find related items on AmazonPublished on: 2025-08-31 17:50:45
Today is Microsoft's April 2025 Patch Tuesday, which includes security updates for 134 flaws, including one actively exploited zero-day vulnerability. This Patch Tuesday also fixes eleven "Critical" vulnerabilities, all remote code execution vulnerabilities. The number of bugs in each vulnerability category is listed below: 49 Elevation of Privilege Vulnerabilities 9 Security Feature Bypass Vulnerabilities 31 Remote Code Execution Vulnerabilities 17 Information Disclosure Vulnerabilities
Keywords: exploited microsoft updates vulnerabilities windows
Find related items on AmazonPublished on: 2025-09-02 23:25:35
By leveraging Microsoft Security Copilot to expedite the vulnerability discovery process, Microsoft Threat Intelligence uncovered several vulnerabilities in multiple open-source bootloaders, impacting all operating systems relying on Unified Extensible Firmware Interface (UEFI) Secure Boot as well as IoT devices. The vulnerabilities found in the GRUB2 bootloader (commonly used as a Linux bootloader) and U-boot and Barebox bootloaders (commonly used for embedded systems), could allow threat actor
Keywords: boot grub2 overflow security vulnerabilities
Find related items on AmazonPublished on: 2025-09-10 01:20:00
The fediverse, also known as the open social web that includes Mastodon, Meta’s Threads, Pixelfed, and other apps, is ramping up its security. On Wednesday, a nonprofit focused on bringing governance to open source projects, the Nivenly Foundation, announced the launch of a new security fund that will pay those who responsibly disclose security vulnerabilities that affect fediverse apps and services. While all software can have security issues, Mastodon — an open source and decentralized altern
Keywords: fediverse issue security vulnerabilities vulnerability
Find related items on AmazonPublished on: 2025-09-19 13:00:05
Dozens of vulnerabilities in products from three leading makers of solar inverters, Sungrow, Growatt, and SMA, could be exploited to control devices or execute code remotely on the vendor’s cloud platform. The potential impact of the security problems has been assessed as severe because they could be used in attacks that could at least influence grid stability, and affect user privacy. In a grimmer scenario, the vulnerabilities could be exploited to disrupt or damage power grids by creating an
Keywords: control cve inverters power vulnerabilities
Find related items on AmazonPublished on: 2025-09-30 00:04:18
Hackers are ramping up their attempts to exploit a trio of year-old ServiceNow vulnerabilities to break into unpatched company instances, security researchers warned this week. Threat intelligence startup GreyNoise said in a blog post on Tuesday that it had observed a “notable resurgence of in-the-wild activity” targeting the three ServiceNow vulnerabilities, tracked as CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217. The vulnerabilities were first disclosed by researchers at Assetnote in May
Keywords: 2024 attempts said servicenow vulnerabilities
Find related items on AmazonPublished on: 2025-09-30 08:02:12
If your organization is like many, annual penetration testing may be a regular part of your security protocols. After completing the yearly assessment, you receive and review your report and then check off your compliance requirements. Once you wrap up the paperwork, you’re good to go for another year, right? The way things are moving these days, it might be time to reconsider if this approach is the best use of time and resources! Consider this common scenario: Your development team deploys n
Keywords: development security testing time vulnerabilities
Find related items on AmazonPublished on: 2025-10-16 12:01:04
CISA warned U.S. federal agencies to secure their networks against attacks exploiting three critical vulnerabilities affecting Ivanti Endpoint Manager (EPM) appliances. The three flaws (CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161) are due to absolute path traversal weaknesses that can let remote unauthenticated attackers fully compromise vulnerable servers. They were reported in October by Horizon3.ai vulnerability researcher Zach Hanley and patched by Ivanti on January 13. Just over a
Keywords: appliances attacks cisa ivanti vulnerabilities
Find related items on AmazonPublished on: 2025-10-25 23:53:26
U.S. technology giant Broadcom is warning that a trio of VMware vulnerabilities are being actively exploited by malicious hackers to compromise the networks of its corporate customers. The three vulnerabilities — collectively dubbed “ESXicape” by one security researcher — affect VMware ESXi, Workstation, and Fusion, which are widely-used software hypervisor products that allow multiple virtual machines to be managed on a single server. Hypervisors are commonly used to reduce the need to take up
Keywords: broadcom hypervisor ransomware vmware vulnerabilities
Find related items on AmazonPublished on: 2025-10-27 05:33:36
Three critical vulnerabilities in multiple virtual-machine products from VMware can give hackers unusually broad access to some of the most sensitive environments inside multiple customers’ networks, the company and outside researchers warned Tuesday. The class of attack made possible by exploiting the vulnerabilities is known under several names, including hyperjacking, hypervisor attack, or virtual machine escape. Virtual machines often run inside hosting environments to prevent one customer
Keywords: access hypervisor multiple vmware vulnerabilities
Find related items on AmazonPublished on: 2025-10-30 10:51:14
CISA has warned US federal agencies to secure their systems against attacks exploiting vulnerabilities in Cisco and Windows systems. While the cybersecurity agency has tagged these flaws as actively exploited in the wild, it has yet to provide specific details regarding this malicious activity and who is behind it. The first flaw (tracked as CVE-2023-20118) enables attackers to execute arbitrary commands on RV016, RV042, RV042G, RV082, RV320, and RV325 VPN routers. While it requires valid admi
Keywords: cisa cve exploited security vulnerabilities
Find related items on AmazonGo K’awiil is a project by nerdhub.co that curates technology news from a variety of trusted sources. We built this site because, although news aggregation is incredibly useful, many platforms are cluttered with intrusive ads and heavy JavaScript that can make mobile browsing a hassle. By hand-selecting our favorite tech news outlets, we’ve created a cleaner, more mobile-friendly experience.
Your privacy is important to us. Go K’awiil does not use analytics tools such as Facebook Pixel or Google Analytics. The only tracking occurs through affiliate links to amazon.com, which are tagged with our Amazon affiliate code, helping us earn a small commission.
We are not currently offering ad space. However, if you’re interested in advertising with us, please get in touch at [email protected] and we’ll be happy to review your submission.