New HTTP Desync Attacks Compromise Major CDNs and Government Systems
Security researcher James Kettle has published groundbreaking research exposing fundamental vulnerabilities in HTTP/1.1 that led to critical security…
Research
New HTTP Desync Research Reveals Mass Exploits HTTP/1.1
Security researcher James Kettle is going to present significant findings on HTTP desync vulnerabilities at upcoming cybersecurity conferences, demon…
Critical Flaw Lets Attackers Hijack Train Brakes With $500 Radio Equipment
A critical security vulnerability in America's railway system allows attackers to remotely hijack train brake controls using inexpensive radio eq…
TokenBreak Attack - Single Character Bypass Defeats LLM Safety Guardrails
A single character change can now completely bypass the safety systems of major AI platforms like ChatGPT, Claude, and Gemini. Security researchers …
Researchers Expose Critical Secure Boot Vulnerabilities Affecting Millions of UEFI Systems
Security researchers have uncovered two significant vulnerabilities that can completely bypass Secure Boot protections on UEFI-compatible systems, po…
Researcher Expose Critical Gaps in Email Security Gateway Protection
IRONSCALES, the AI-powered email security leader, reveals that traditional Secure Email Gateways (SEGs) are failing to catch a concerning number of p…
New Security Flaws in Apple Chips Could Expose Sensitive Browser Data
Security researchers from Georgia Tech and Ruhr University Bochum have uncovered two significant vulnerabilities in Apple's latest processors tha…
Research Exposes Cryptographic Vulnerabilities in E2EE Cloud Storage Systems
Researchers from ETH Zurich, Jonas Hofmann and Kien Tuong Truong uncovered significant security flaws in five popular end-to-end encrypted (E2EE) clo…
SnailLoad - New Side-Channel Network Latency Attack
Researchers at Graz University of Technology have unveiled a novel side-channel attack technique named " SnailLoad ." This innovative appr…
Mandiant Uncovers China-Linked Cyberattack Campaign
Mandiant researchers have shed light on the extensive cyberattacks conducted by a suspected Chinese state-sponsored hacking group known as UNC3886. …
Major Keyboard Apps Leak User Keystrokes to Network Eavesdroppers
In a startling new report , researchers at Citizen Lab have revealed critical vulnerabilities in popular mobile keyboard apps used by over a billion …
Newly Uncovered "Branch History Injection" Attack Bypass Spectre Mitigations
A team of cybersecurity researchers has unveiled a new variant of the notorious Spectre v2 vulnerability , dubbed " Branch History Injection &qu…
Microsoft Falls Short in Email Security, Research Reveals
A recent report by VIPRE Security Group reveals that email-based threats have undergone significant changes in 2024, necessitating the adoption of ad…
New Research Exposes Privacy Risks of WebGPU Browser API
A team of academics has published a research paper demonstrating how the WebGPU API, designed to boost graphics performance in web browsers, can be a…
New Flaw in Apple, AMD, and Qualcomm GPUs Could Expose AI Data
A new vulnerability called LeftoverLocals has been discovered that allows attackers to steal sensitive data processed on graphics processing units (…
'Zero-Click' Bluetooth Attacks Pose Serious Threat Across Major Operating Systems
Bluetooth technologies power wireless keyboards, mice, game controllers and other peripherals used by billions of devices worldwide. However new rese…