NIST Enrichment Reductions Impact CVE Coverage, Accuracy

rm NIST Getty 153842014 LBWsYQ

The National Institute of Standards and Technology (NIST) scaled back the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according to researchers. The National Institute of Standards and Technology (NIST) scaled back the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according […]

Vulnerabilities Expose Private Data in Indian Government Systems

India cockroach mask Ritesh Shukla Getty

One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal. One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal.​ ​Read More

Can Clothes Make You Invisible to Facial Recognition?

noRecognition Bill Swearingen Hp6B39

Does life feel Orwellian sometimes? One researcher has a solution for you: graphic tees that confuse the neural networks in surveillance cameras. Does life feel Orwellian sometimes? One researcher has a solution for you: graphic tees that confuse the neural networks in surveillance cameras.​ ​Read More

Iran, Russia, China Target Water Systems for Sabotage

wastewater plant engineers BugTiger Getty 2160087422 rOSw2n

Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware. Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware.​ ​Read More

Amazon Q VS Extension Flaw Leads to Cloud Credential Theft

AI agents 1800 Kiattisak Lamchan Alamy Go1TJt

Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk. Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk.​ ​Read More