Tag: zero-days
-
The Register: Palo Alto Networks tackles firewall-busting zero-days with critical patches
Source URL: https://www.theregister.com/2024/11/19/palo_alto_networks_patches/ Source: The Register Title: Palo Alto Networks tackles firewall-busting zero-days with critical patches Feedly Summary: Amazing that these two bugs got into a production appliance, say researchers Palo Alto Networks (PAN) finally released a CVE identifier and patch for the zero-day exploit that caused such a fuss last week.… AI Summary and…
-
Schneier on Security: Most of 2023’s Top Exploited Vulnerabilities Were Zero-Days
Source URL: https://www.schneier.com/blog/archives/2024/11/most-of-2023s-top-exploited-vulnerabilities-were-zero-days.html Source: Schneier on Security Title: Most of 2023’s Top Exploited Vulnerabilities Were Zero-Days Feedly Summary: Zero-day vulnerabilities are more commonly used, according to the Five Eyes: Key Findings In 2023, malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks compared to 2022, allowing them to conduct cyber operations against higher-priority…
-
Schneier on Security: AIs Discovering Vulnerabilities
Source URL: https://www.schneier.com/blog/archives/2024/11/ais-discovering-vulnerabilities.html Source: Schneier on Security Title: AIs Discovering Vulnerabilities Feedly Summary: I’ve been writing about the possibility of AIs automatically discovering code vulnerabilities since at least 2018. This is an ongoing area of research: AIs doing source code scanning, AIs finding zero-days in the wild, and everything in between. The AIs aren’t very…
-
The Register: Open source LLM tool primed to sniff out Python zero-days
Source URL: https://www.theregister.com/2024/10/20/python_zero_day_tool/ Source: The Register Title: Open source LLM tool primed to sniff out Python zero-days Feedly Summary: The static analyzer uses Claude AI to identify vulns and suggest exploit code Researchers with Seattle-based Protect AI plan to release a free, open source tool that can find zero-day vulnerabilities in Python codebases with the…
-
The Register: Jetpack fixes 8-year-old flaw affecting millions of WordPress sites
Source URL: https://www.theregister.com/2024/10/18/jetpack_patches_wordpress_vulnerability/ Source: The Register Title: Jetpack fixes 8-year-old flaw affecting millions of WordPress sites Feedly Summary: Also, new EU cyber reporting rules are live, exploiters hit the gas pedal, free PDNS for UK schools, and more in brief A critical security update for the near-ubiquitous WordPress plugin Jetpack was released last week. Site…
-
Cisco Talos Blog: Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score
Source URL: https://blog.talosintelligence.com/microsoft-patch-tuesday-september-2024/ Source: Cisco Talos Blog Title: Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score Feedly Summary: September’s monthly round of patches from Microsoft included 79 vulnerabilities, seven of which are considered critical. AI Summary and Description: Yes Summary: Microsoft has disclosed multiple vulnerabilities including two…