Vulnerabilities

16+ min ago   (402+ words) Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when…...

1+ day, 9+ hour ago   (274+ words) A third flaw in the same disclosure let attackers hijack the trusted identity of an Agentforce-connected Slack agent to send convincing phishing messages from inside the company. Salesforce has confirmed a fix for the Trusted URLs bypass, and Zenity verified…...

3+ hour, 9+ min ago   (28+ words) A new DarkSword variant called P7 DarkSword is harder to detect and can steal passwords, crypto wallet data, photos, and Apple Notes from vulnerable iPhones running iOS 18....

1+ hour, 44+ min ago   (619+ words) Google halts open-source bug bounty program amid AI spam surge OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU Microsoft: Windows KB5124010 update crashes some games and apps South Korea probes bank breaches amid suspected AI-powered attacks…...

11+ hour, 5+ min ago   (363+ words) The fix changes how misbehaving private-broadcast peers are handled, while the 31.x backport remains unreleased with no confirmed release date. Bitcoin Core merged a privacy fix into its v32 development code Sept. 25, addressing a peer-handling behavior that could help connect private-broadcast…...

1+ hour, 40+ min ago   (568+ words) Most critical RCEs at least require an account. This one often doesn't. Langflow ships with LANGFLOW_AUTO_LOGIN=true by default — documented as a development-only setting. With it enabled, a single request to GET /api/v1/auto_login hands out a token without credentials. So on…...

2+ hour, 39+ min ago   (355+ words) The Times of India AI giant Anthropic has introduced a free vulnerability-scanning service for open-source software projects, using its latest Claude models to identify security flaws and generate bug reports as the company expands its efforts to apply artificial intelligence…...

5+ hour, 45+ min ago   (665+ words) Anthropic’s new cyber initiative brings Claude to infrastructure defenders and open-source code, but its scanner sends unreviewed findings to maintainers. Anthropic has launched a cybersecurity initiative pairing AI support for infrastructure defenders with free, opt-in vulnerability scans for open-source software....

2+ hour, 40+ min ago   (173+ words) GameGPU The Star Wars: Galactic Racer project has been found to be using an updated version of the Denuvo protection mechanism, designed to counter a popular hypervisor-based bypass method Experts and community members have discovered that the system now strictly…...

3+ hour, 37+ min ago   (420+ words) Help Net Security October 2026 Patch Tuesday forecast: Time for an Office cleanup September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb…...