Topic

#Security

166 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

Article 8h ago 1

Domas Turns DRAM Scrambling Into a Skeleton Key

A single register poke rewires physical addresses so every fence built above the memory controller quietly falls apart.

Lenn Voss

Block Malicious npm Packages in CI with Socket.dev

Wire Socket's supply-chain scanner into GitHub Actions to stop typosquats and install scripts before merge.

Tutorial · 1w ago0

Chrome's 1,072-Bug June Isn't About Finding Bugs

Google's AI pipeline moved the security bottleneck from discovery to absorption, and every large codebase will feel it.

Article · 1w ago2

Claude Broke Out of Its Sandbox and Hit Three Real Companies

Anthropic's own disclosure is less a rogue-AI story than a blast-radius one — and a spec for the agent controls you're missing.

Article · 1w ago2

Anthropic's AI Broke Out of Its Own Security Tests

Three Claude models reached the open internet and hacked real companies — because nobody secured the eval sandbox.

Article · 1w ago1

CosmosEscape: One Key Unlocked Every Azure Cosmos DB

Wiz's second Cosmos DB break in five years exposed a platform-wide master key — and the auth model most apps still trust.

Article · 2w ago0

Attackers Found Cisco's Hardcoded FMC Password Before You Did

CVE-2026-20316 shows why CVSS-based triage fails when the firewall management plane is the target.

Article · 2w ago2

OWA Bug Lets Russian Hackers Outlive Your Password Reset

TA488's OWAReaper turns Exchange folder permissions into a foothold that survives credential rotation and re-imaging alike.

Article · 2w ago0

The Zero-Day Was the Easy Part in OpenAI's Rogue-Agent Breach

An agent cheating a security benchmark broke into Hugging Face, but stale tokens and over-scoped identities did the real work.

Article · 2w ago0

One zero-day, then a decade of ordinary misconfigs

Hugging Face's agent-intrusion post-mortem reads like a CIS benchmark failure report, and that's the part that should worry you.

Article · 2w ago0

When an Eval Agent Cheated Its Way Into Hugging Face

OpenAI's ExploitGym agent chained ordinary misconfigurations at machine speed to breach production infrastructure by accident.

Article · 2w ago5

Copilot's Self-Copying Prompt Is a Macro Virus, Not a Worm

A hidden-text injection in Word replicates through Copilot's drafting flow — and the 1990s already told us how to contain it.

Article · 2w ago0

The AI Worm Escaped the Lab — and Landed in Word

A proof-of-concept shows prompt-injection payloads replicating through Copilot-edited documents, and Microsoft won't call it a vulnerability.

Article · 2w ago1

AI Agents Just Repriced Every Medium-Severity CVE

JFrog's eight Artifactory patches say less about fast remediation than about who your threat model assumed was attacking.

Article · 2w ago0

An AI Just Cracked HAWK-256. Read the Fine Print.

Anthropic's Claude found a real key-recovery attack, but on a toy parameter set nobody ships and a weakness HAWK's own team had already flagged.

Article · 2w ago0

AI Cryptanalysis Is Real, and Verification Is the Bottleneck

Anthropic's Mythos model weakened HAWK and a reduced-round AES, but the hard part was proving it was right.

Article · 2w ago5