It’s okay to say “pay me if you want fast fixes”, but communicate that policy ahead of time so people can make informed decisions.
https://duckalignment.academy/how-quickly-should-you-fix-vulnerabilities/It’s okay to say “pay me if you want fast fixes”, but communicate that policy ahead of time so people can make informed decisions.
https://duckalignment.academy/how-quickly-should-you-fix-vulnerabilities/Microsoft Will Finally Kill an Encryption Cipher That Enabled a Decade of Windows Hacks
Taking Down Next.js Servers for 0.0001 Cents a Pop, by (not on Mastodon or Bluesky):
https://www.harmonyintelligence.com/taking-down-next-js-servers
#Security Researcher Found Critical #Kindle #Vulnerabilities That Allowed Hijacking #Amazon Accts -Slashdot
The #BlackHat Europe hacker conf in London included a session titled "Don't Judge an #Audiobook by Its Cover" about a 2 critical (and now fixed) flaws in Amazon's Kindle. The Times reports both flaws were discovered by engineering analyst Valentino Ricotta (from the #cybersecurity research division of #Thales ), who was awarded a "bug bounty" of $20,000
#privacy

The Black Hat Europe hacker conference in London included a session titled "Don't Judge an Audiobook by Its Cover" about a two critical (and now fixed) flaws in Amazon's Kindle. The Times reports both flaws were discovered by engineering analyst Valentino Ricotta (from the cybersecurity research di...
Update Now: iOS 26.2 Fixes 20 Security Vulnerabilities, 2 Actively Exploited
https://www.macrumors.com/2025/12/12/ios-26-2-security-vulnerabilities/
#HackerNews #iOS262 #Update #Security #Vulnerabilities #Cybersecurity #Exploits #MacRumors
Update yo shit, now!
Update Now: iOS 26.2 Fixes 20+ Security Vulnerabilities
https://www.macrumors.com/2025/12/12/ios-26-2-security-vulnerabilities/
#AI #Hackers Are Coming Dangerously Close to Beating Humans
#Stanford researchers spent much of the past year building an AI #bot called #Artemis that scans networks for software #vulnerabilities , & when they pitted it against ten professional penetration testers on the university's own engineering network, the bot outperformed 9 of them. The experiment offers a window into how rapidly AI #hacking tools have improved after years of underwhelming performance
#security

Stanford researchers spent much of the past year building an AI bot called Artemis that scans networks for software vulnerabilities, and when they pitted it against ten professional penetration testers on the university's own engineering network, the bot outperformed nine of them. The experiment off...