Attacking a vulnerable DIR-822A router requires neither an administrative password nor any interaction from the device owner. A malicious actor simply needs to reside on the same local network and transmit a maliciously crafted...
Apple has mounted the largest vulnerability purge in its entire history: a single September cycle brought more than 260 unique CVEs and sent nearly the whole of the company’s ecosystem scrambling to update. On...
The Emergence of Fabricated Vulnerabilities Vulnerability databases recently received reports of critical SQLite flaws. These fictitious vulnerabilities boasted severity scores reaching a staggering 9.8. However, rigorous source code inspections failed to corroborate a single...
Widespread Impact Across Open-Source Core Stacks For decades, the architectural underpinnings of mobile networks relied upon implicit trust. However, as telecommunication operators migrated to cloud-native environments, this historical complacency mutated into a prolific source...
The deluge of vulnerability reports has reached such an overwhelming crescendo that even governmental infrastructures struggle to maintain pace. The National Institute of Standards and Technology (NIST) has conceded that its traditional methodology for...
In the realm of information security, it has long been standard practice to categorize vulnerabilities via the CVE system: a breach is assigned a designation, followed by a CVSS severity score, a CWE type,...
Europe has inaugurated its proprietary mechanism for monitoring software vulnerabilities: the Global CVE Allocation System (GCVE). With the launch of this nascent platform, the European Union has responded to burgeoning anxieties regarding the potential...
DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering. It leverages IDA Pro and the IDA Domain API to extract pseudocode of functions and perform structured diffing between patched...
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers — through a combination of prompt injections and legitimate IDE capabilities — to silently exfiltrate data or...
Zoom has patched a critical vulnerability in its Windows clients, while Xerox has issued fixes for severe flaws in its FreeFlow Core system. Both issues posed significant threats—ranging from privilege escalation to remote code...
The GreyNoise team has uncovered a disquieting pattern: in 80% of cases, anomalous spikes in suspicious internet activity occur prior to the official disclosure of new vulnerabilities (CVEs). These are not coincidences or random...
BinPool is a dataset consisting of vulnerable and patched binaries derived from historical Debian packages, compiled using four different optimization levels. It can be used for vulnerability discovery tasks through various methods, including machine...
