Tag
Security researcher Simcha Kosman discusses his team's Black Hat USA 2026 research on breaking out of ChatGPT's secure sandbox, highlighting vulnerabilities in container isolation and AI supervision through attack chains.
The article discusses how a surge in cybersecurity vulnerabilities, referred to as 'Vulnpocalypse,' is leading to reevaluation and changes in the pricing structures of bug bounty programs.
The paper introduces a curvature-based cryptanalysis method to extract hidden feed-forward network structures in transformers using black-box queries, achieving high-fidelity functional model substitutes.
Dealignai has released GLM-5.3 Uncensored NVFP4, an uncensored AI model designed for offensive cybersecurity tasks with refusal behavior removed at the weight level, capable of generating working security code while maintaining near-base performance.
A WIRED article reports on multiple tech security issues, including a research finding that expired Visa cards can be exploited for contactless payments through a man-in-the-middle app, along with other stories on AI surveillance, privacy breaches, and encryption debates.
A security researcher details the process of remotely unlocking electric scooters by performing reconnaissance on the company's web infrastructure and exploiting vulnerabilities in WordPress and an operations panel.
Researchers have, for the first time, systematically extracted hidden chain-of-thought from closed-source models at OpenAI, Anthropic, and Google. They exploited an API encryption compatibility flaw to have weaker models decrypt the content, thereby bypassing CoT distillation protections, and also studied open-source models such as Kimi K3, GLM-5.2, and DeepSeek.
HackSys Extreme Vulnerable Driver (HEVD) is an intentionally vulnerable Windows kernel driver for learning kernel exploitation techniques, including use-after-free, stack overflows, and pool overflows. The tweet notes that a UAF exploit has been completed.
This repository provides artifacts for Segmentation Fault-Oriented Programming (SFOP), a novel exploitation technique that abuses signal handlers to bypass Intel CET. It includes PoC exploits and demonstrations against Nginx and Ladybird.
Security researcher Domas reveals rosenbridge, a hardware backdoor in VIA C3 x86 CPUs that allows unprivileged code to bypass processor protections and access kernel memory. The repository provides tools to check for and mitigate the vulnerability.
Announcement of a DEF CON talk by @clearbluejar on hands-on vulnerability discovery using local AI models.
Off-by-1 Labs (1Password) research finds that LLM-generated patches for complex, recently disclosed vulnerabilities are flawed 53.9% of the time, often failing to resolve the issue or introducing new vulnerabilities. The study emphasizes that AI-generated patches require human review and releases tooling, datasets, and a paper.
This research describes compiler-invented loads, where compiler optimizations create additional memory reads not present in source code, turning seemingly secure code into vulnerable binaries with TOCTOU races. It includes audits across kernels, hypervisors, enclaves, and firmware.
A security researcher details how they reverse-engineered the Eufy Security Video Doorbell ecosystem, demonstrating jamming attacks, decoding the soundwave sync protocol, and extracting decrypted credentials from memory dumps.
Open-Kritt is an open-source security research platform that orchestrates multiple AI agents to analyze code in parallel, automating discovery of real vulnerabilities, and supports deduplication, validation, and prioritization. The team behind it has used it to earn significant bounties and win the Firedancer audit contest.
A conference talk at EMF 2026 where researcher Rairii presents findings on hacking Microsoft's Windows 365 Link thin client, bypassing its locked-down 'secure-by-design' architecture including EFI Secure Boot and BitLocker.
GitHub is restructuring its bug bounty program to prioritize quality over quantity, introducing a permanent VIP program with higher payouts, restructured public bounties with static payouts, and raising signal requirements to reduce low-effort reports.
Cynative Security Research Agent lets users query their cloud infrastructure safely without impacting production.
This paper identifies the planning phase in multi-agent LLM systems as a critical attack surface, introducing PlanFlip—a framework of four planning-phase prompt injection attacks that achieve cascade amplification across downstream agents. Evaluations on nine frontier LLMs reveal that stronger models like GPT-5 are more vulnerable, while reasoning-augmented models like DeepSeek-R1 resist attacks, and proposed defenses achieve high detection rates.
This article details the discovery and exploitation of a Linux kernel 0-day vulnerability in the network scheduler subsystem (red scheduler), turning a limited slab use-after-free into full physical memory read/write, ultimately achieving privilege escalation to root. The vulnerability existed for 2.5 years and was fixed in June 2026.