Topic

#Vulnerabilities

10 articles on Vulnerabilities — news, releases, guides and analysis from the SourceFeed engine.

AI Bug Hunters Leave Their Mark on macOS Tahoe 26.6

Apple's 155-CVE July update ships no zero-days, but the researcher credits reveal where vulnerability discovery is heading.

Ji-ho Choi

Microsoft's 570 Patches Break Old Triage

AI discovery turned Patch Tuesday into a firehose. Treat exploitability ratings as outdated signals.

Article · 4w ago1

The MCP Security Blind Spot in AI Coding Assistants

A high-severity flaw in Amazon Q Developer highlights how repository-level tool configurations bypass traditional IDE security boundaries.

Article · 1mo ago0

AI Coding Assistants Turn Local Git Repos Into Cloud Exploits

A high-severity Amazon Q flaw highlights how Model Context Protocol configurations let malicious repositories run code and steal credentials.

Article · 1mo ago2

The AI Auditing Wave and the End of Battle-Tested Code

As AI-driven vulnerability discovery systematically strips latent bugs from curl, developers must rethink their dependency patching strategies.

Article · 1mo ago1

Vulnerability Reports Lost Their Privilege. Now What?

Cheap LLM bug-hunting has collapsed the signal-to-noise of disclosures, and the old etiquette of coordinated reporting no longer pays for itself.

Article · 1mo ago3

Dismantling the IIS Attack Surface

Why Microsoft's legacy web server remains a prime target for modern reconnaissance and how to harden your Windows workloads.

Article · 1mo ago0

AI Agents Uncover 21 Zero-Day Vulnerabilities in FFmpeg

Autonomous security agents found decades-old memory safety flaws in the widely deployed media processing library, prompting urgent updates.

News · 2mos ago2

Eyes Open, Vulnerabilities Shipping: The AI Code Security Paradox

A Checkmarx survey of 2,350 developers and security leaders finds 70% believe AI-generated code is more vulnerable — and nearly a third ship it to production anyway. The tools exist. The process doesn't.

Article · 2mos ago0

Arbitrary Code Execution in objdump -g: How a Missing Bounds Check Becomes a Full Exploit

A heap out-of-bounds write in the FR30 relocation handler lets a crafted object file run attacker code when inspected with `objdump -g` — and the exploit defeats ASLR, PIE, and heap hardening in a single shot.

Article · 2mos ago0