Angry Hacker Drops Microsoft Zero-Day Exploit, 1 Billion Users Warned

A security researcher frustrated with Microsoft has released the BlueHammer Windows zero-day exploit, telling the company, “I ...
Decrypt

Kelp DAO Exploit Sparks Aave Liquidity Crunch, $6.2 Billion Withdrawal Panic

After attackers drained $291 million in crypto from Kelp DAO-linked infrastructure, DeFi users struggled on Aave to withdraw ...
Bleeping Computer

Exploit for Veeam Recovery Orchestrator auth bypass available, patch now

A proof-of-concept (PoC) exploit for a critical Veeam Recovery Orchestrator authentication bypass vulnerability tracked as CVE-2024-29855 has been released, elevating the risk of being exploited in ...
Forbes

Apple Warns Users Of Zero-Day Threats—Here’s How To Keep Your Mac, iPhone And iPad Safe

Forbes contributors publish independent expert analyses and insights. Lars Daniel covers digital evidence and forensics in life and law. Update Now—Apple releases critical updates to in response to ...
TechRepublic

OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds

OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds Your email has been sent Researchers from the University of Illinois Urbana-Champaign found that OpenAI’s GPT-4 is ...

RUNE jumps 19% as KelpDAO exploit funds flow through THORChain

THORChain processed ~$80–$176M of KelpDAO exploit funds (nearly 99% routed through THORChain), driving a massive jump in fees ...

Oligo Security Brings Real-Time Exploit Blocking to the Application Layer

Oligo Security, the runtime security company, today announced Runtime Exploit Blocking, a new capability that stops exploit ...
Mashable

WhatsApp 'View Once' messages are far more permanent than you realize

A WhatsApp exploit is allowing users access to View Once messages after they are supposed to be inaccessible. Credit: Silas Stein/picture alliance via Getty Images If you're sending a "View Once" ...

SPARK Gains 100% as SparkLend Absorbs Billions Fleeing Aave After Exploit

Learn more Spark (SPK) has gained 98% to trade at $0.05834. The SPARK price rally follows a massive capital rotation into ...
Bleeping Computer

Researcher to release exploit for full auth bypass on FortiWeb

A security researcher has released a partial proof of concept exploit for a vulnerability in the FortiWeb web application firewall that allows a remote attacker to bypass authentication. The flaw was ...
Dark Reading

Patch Now: Exploit Activity Mounts for Dangerous Apache Struts 2 Bug

Concerns are high over a critical, recently disclosed remote code execution (RCE) vulnerability in Apache Struts 2 that attackers have been actively exploiting over the past few days. Apache Struts is ...
Tidbits

DarkSword Exploit Threatens iPhones Still Running iOS 18

Security researchers at Google, iVerify, and Lookout have jointly revealed the discovery of a sophisticated iPhone hacking toolkit called DarkSword, which multiple threat actors are using to ...