GoKawiil
Tech News
Microsoft released update KB5002655 to address a silent copy-and-paste failure introduced by the September security patch KB5002914, but the fix only applies to MSI-based installations of Excel 2016. Users of Excel Online, 2024, 2021, 2019, and Click-to-Run editions of 2016 remain affected, with Microsoft citing a code regression as the cause and recommending the Paste Special workaround in the meantime.
An independent bug-hunting security research team exploited Anthropic's Claude AI model to gain unauthorized access to OpenAI's internal code repository. The incident highlights how advanced AI tools can be weaponized to identify and exploit vulnerabilities in rival companies' systems.
A newly discovered bug in Apple's just-released iOS 27 lets users lock up their iPhone by rapidly swiping to open Notification Center and then Control Center in quick succession. The glitch freezes touch response and disables the power-off slider, and it has spread quickly on social media as a prank people are playing on friends' phones.
At DEF CON 34's Bug Bounty Village, Intigriti's Inti De Ceukelaire showed how AI support agents can be manipulated into leaking secrets, sending phishing emails, or performing unauthorized actions. Using prompt injection and email transcript spoofing rather than traditional scanning tools, he collected over $50,000 in bug bounties within a few weekends.
After previously repairing a dead NZXT Signal 4K30 capture device by fixing a bad solder joint, the author found one HDMI source that produced garbled green and pink video during testing. The symptom matches an RGB/YUV colorspace mismatch and had already been reported by other users capturing from a PS5 and Nintendo Switch on Reddit. Since NZXT appears to have discontinued the product, the author decided to investigate the bug themselves using AI-assisted reverse engineering rather than contacting the company.
Multiple Waze users report that switching the app from split-screen to full-screen view on Android Auto causes the navigation information box—showing ETA, arrival time, next turn, and remaining distance—to vanish. Some say the data briefly reappears when an alert pops up, only to disappear again once the alert clears, while at least one user reports the map failing to center properly in either view. Android Authority has contacted Google, and it remains unclear whether the fault lies with a recent Android Auto or Waze update.
Apple has confirmed it quietly implemented a cap on how many open vulnerability reports researchers can submit through its security portal, paired with a 30-day cooldown once that limit is hit. The company says the move addresses a flood of AI-generated bug reports overwhelming its review process, a challenge it frames as industry-wide. A Financial Times report notes small security firms like the seven-person Bynario have been caught by the new limits despite submitting only a handful of legitimate bugs this year.
Security researchers using AI tools are now uncovering software flaws at a pace that outstrips vendors' ability to triage and fix them. This surge is straining existing bug-disclosure pipelines and revealing gaps in products that were supposedly built with security-by-design principles.
A recent essay examines why most people who encounter software bugs simply complain instead of filing a report, often letting the same bug affect them repeatedly. The author argues that bugs rarely affect just one user, and that developers frequently cannot reproduce issues that arise from unfamiliar configurations or unusual usage patterns.
Google has acknowledged a Messages bug triggered during data transfers to new phones, where old texts from unrelated conversations resurfaced and were sometimes sent to the wrong recipients. The company said a fix is already rolling out and should reach all affected users within a few weeks, though it hasn't detailed the exact cause or which app versions were impacted.
9to5Mac's Security Bite podcast hosted Patrick Wardle of Objective-See and Kseniia Yamburh of Moonlock Lab for a discussion on recent changes Apple has made to its bug bounty program. The episode is the first of a two-part series, with the second installment set to cover the current macOS threat landscape and the upcoming Objective by the Sea security conference.
A software engineer describes a decade-long pattern of noticing hundreds to thousands of software bugs weekly that most colleagues and users simply don't perceive. He explains that companies sometimes hire him specifically to test products because he reliably surfaces defects others miss, ranging from minor glitches to cases where products are effectively broken despite internal claims that everything works fine.