GoKawiil - Tech News

1.

Rails patches critical Active Storage flaw with RCE potential (bleepingcomputer.com)

2026-08-01 | tags: rails, activestorage, libvips

2.

A Fundamental Flaw Leaves LLMs Strikingly Vulnerable To Attack (slashdot.org)

2026-07-30 | tags: llms, vulnerability, attack

3.

Chrome Needs Twice-a-Week Patching Thanks to AI Bug Hunting (wired.com)

2026-07-30 | by Lily Hay Newman | tags: chrome, ai vulnerability, google

4.

CosmosEscape: Taking over Every Database in Azure Cosmos DB (news.ycombinator.com)

2026-07-30 | tags: azure cosmos db, cosmosescape, gremlin api

5.

AI-Found Bugs Aren't Proving Any Easier to Exploit Despite the Hype (slashdot.org)

2026-07-28 | tags: anthropic, project glasswing, vulncheck

6.

'Certighost' Flaw Haunts Microsoft Active Directory Certificates (darkreading.com)

2026-07-28 | tags: microsoft, active directory, certighost

7.

OpenAI admits its models hacked Hugging Face on their own (engadget.com)

2026-07-22 | by Mariella Moon | tags: openai, hugging face, gpt-5.6 sol

8.

OpenAI says its AI models hacked Hugging Face during testing (bleepingcomputer.com)

2026-07-22 | tags: openai, gpt‑5.6 sol, hugging face

9.

OpenAI Models Escaped Containment and Hacked HuggingFace (wired.com)

2026-07-21 | by Lily Hay Newman | tags: openai, huggingface, gpt-5.6 sol

10.

Deepsec (news.ycombinator.com)

2026-07-19 | tags: deepsec, vulnerability scanner, code review

11.

TP-Link Kasa cameras leaked home GPS via unauthenticated UDP for 6 years (news.ycombinator.com)

2026-07-17 | tags: kasa spot, tp-link, gps leak

12.

Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do (venturebeat.com)

2026-07-17 | tags: capital one, vulnhunter, github

13.

Gold Eagle Clearinghouse Targets Security Gap, but How Is Unclear (darkreading.com)

2026-07-17 | tags: white house, gold eagle, vulnerability response

14.

Gold Eagle Clearinghouse Targets Security Gap, But How Is Unclear (darkreading.com)

2026-07-17 | tags: white house, gold eagle, vulnerability response

15.

VulnHunter: Capital One's agentic AI code security tool (news.ycombinator.com)

2026-07-17 | by Capital One Tech | tags: capital one, vulnhunter, ai security

16.

New Lawsuit Filed Against Apple for ‘Hide My Email’ Privacy Vulnerability (cnet.com)

2026-07-17 | by See Full Bio | tags: apple, icloud, hide my email

17.

New Lawsuit Filed Against Apple for 'Hide My Email' Privacy Vulnerability (cnet.com)

2026-07-16 | by See Full Bio | tags: apple, icloud, hide my email

18.

Cursor 0day: When Full Disclosure Becomes the Only Protection Left (news.ycombinator.com)

2026-07-14 | by Aaron Portnoy | tags: cursor, disclosure, repository

19.

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days (bleepingcomputer.com)

2026-07-14 | tags: cve windows, important windows, microsoft

20.

Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure (darkreading.com)

2026-07-09 | tags: company internet, defense, defense company

21.

Microsoft Reins in RoguePlanet Zero-Day Threat (darkreading.com)

2026-07-09 | tags: concept, concept poc, days

22.

Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] (news.ycombinator.com)

2026-07-06 | tags: guest, host, januscape

23.

MSI Center – How to gain SYSTEM privileges in seconds (news.ycombinator.com)

2026-07-04 | tags: center, msi center, named

24.

A Microsoft Defender flaw is now being linked to ransomware attacks (techspot.com)

2026-07-02 | tags: microsoft defender, bluehammer, chaotic eclipse

25.

Major Apple Bug Appears to Disclose All Real Emails for 'Hide My Email' Users (cnet.com)

2026-07-01 | by See Full Bio | get Apple Hide My Email Privacy Kit → | tags: apple, hide my email, icloud plus

26.

Apple's Hide My Email may not be hiding anything (engadget.com)

2026-07-01 | by Anna Washenko | get Apple Hide My Email Privacy Kit → | tags: apple, hide my email, icloud+

27.

Apple’s Hide My Email feature might not be so private after all (androidauthority.com)

2026-07-01 | get Apple iCloud Private Relay → | tags: apple, hide my email, icloud+

28.

Medical records could be revealed by AI training-data vulnerability (feeds.nature.com)

2026-06-24 | by Thompson | get AI Data Security Kit → | tags: ai training-data, medical records, data vulnerability

29.

Vulnerability reports are not special anymore (news.ycombinator.com)

2026-06-23 | get Cybersecurity Awareness Book → | tags: go security, vulnerability reports, open source

30.

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks (bleepingcomputer.com)

2026-06-23 | get Cisco Unified Communications Manager Security Patch → | tags: cisco unified cm, cve-2026-20230, ssrf vulnerability