Google Mantis: An Agentic Vulnerability Scanning Harness for Reducing False Positives
Google has open-sourced Mantis, an AI-agent framework designed to automate the software vulnerability lifecycle, from identifying and validating…
DRAM Controller Register Manipulation Breaks CPU Memory Isolation
Security researcher Christopher Domas has unveiled skitter-creek-bath-salts, an open-source hardware security project that dismantles traditional CPU privilege boundaries…
Google Cloud unveils AI harness that finds flaws fast
Google Cloud has disclosed details of its internal Agentic Vulnerability Discovery Harness for source code review, a system…
Indirect Prompt Injection Exploits GitHub’s AI Agent to Leak Private Repository Data
GitLost is a prompt-injection exploit discovered by Noma Security that tricks GitHub’s new Agentic Workflows into leaking private…
New Rowhammer Attacks on NVIDIA GPUs Enable Full System Takeover
Security researchers have demonstrated a new class of Rowhammer attacks targeting NVIDIA GPUs that can escalate from memory…
ExpressVPN launches private AI platform with secure enclaves
ExpressVPN has launched a private AI platform called ExpressAI, designed to give users access to AI tools without…
AI browsers expose enterprises to cyber threats, warns SquareX
SquareX has released research identifying serious vulnerabilities in AI-powered browsers that could allow attackers to compromise sensitive enterprise…
Barracuda warns of surge in advanced OAuth phishing
Barracuda threat analysts have raised concerns over a new wave of email-based threats targeting organisations worldwide, with phishing…