Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do

Capital One has open-sourced VulnHunter, an AI security tool that finds exploitable code flaws, maps attack paths and helps ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
https//beincrypto.com

Ostium Perp DEX Hit for $18 Million in Brutal Oracle Exploit

Ostium DEX drained $18M USDC via compromised oracle key on Arbitrum. Attacker used future-dated prices to loop profitable trades and empty vault. Major RWA perp protocol hit despite $27.8M funding ...
Dark Reading

2-Click Cursor Exploit Enables Dev Environment Takeover

A popular artificial intelligence (AI) coding tool can be exploited in just two clicks, allowing attackers to install permission-rich model context protocol (MCP) servers on privileged developers' ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...
Crypto Briefing

Taiko reopens bridge after recovering from $1.7M exploit last month

Taiko’s cross-chain bridge is back online. The Ethereum Layer 2 rollup has completed its recovery from a June 21 exploit that drained roughly $1.7M from its bridge and ERC20 Vault contracts, and the ...
Bloomberg L.P.

What the Saga Over Anthropic’s Mythos Tells Us About the Cyber Risks From AI

Anthropic PBC has said its Mythos artificial intelligence model is so good at finding vulnerabilities in software and computer systems that it can’t be released to the general public. The AI giant has ...
GitHub

codedabble-dev/java-snapshot-testing

Tired of needing to assertThat(foo).isEqualTo("bar") again & again? Are you just wanting to ensure you don't break - for example - REST interfaces Are you manually saving text files for verification ...
CSOonline

Hackers exploit critical PTC Windchill PLM software flaw

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put intellectual property in jeopardy. Hackers are exploiting a critical ...
acm.org

Hidden Prompts in Manuscripts Exploit AI-Assisted Peer Review

Frustrated by artificial intelligence (AI)-generated essays, teachers and instructors embed invisible instructions in assignments to expose students relying on AI. Prompts such as “include the words ...
SecurityWeek

Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning

The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project. A vulnerability that can facilitate attacks on operational technology ...
TMCnet

Azul Addresses the Java Runtime Security Blind Spot Autonomous AI Can Now Exploit

Azul, the trusted leader in enterprise Java for today's AI and cloud-first world, today launched a free JVM vulnerability risk assessment to address the blind spot that autonomous AI exploitation ...