On the top floor of San Francisco’s Moscone convention center, I’m sitting in one row of many chairs, most already full. It’s the start of a day at the RSAC’s annual cybersecurity conference, and ...

The majority of this month's vulnerabilities are considered less likely or unlikely to be exploited, with eight considered ...

Google's Big Sleep team uncovers a zero-day vulnerability using AI for the first time. Update, Nov. 05, 2024: This story, originally published Nov. 04, now includes the results of research into the ...

OpenAI’s o3 AI model has achieved a cybersecurity first: discovering a zero-day vulnerability (CVE-2025-37899) in the Linux kernel’s SMB implementation. This critical “use-after-free” bug was verified ...

Despite clear limitations, many vulnerability researchers find LLMs valuable, leveraging their capabilities to accelerate vulnerability discovery, assist in exploit writing, re-engineer malicious ...

Update, March 22, 2025: This story, originally published March 20, has been updated with expert commentary from infosecurity professionals regarding the latest critical Google Chrome vulnerability ...

Google’s AI-powered bug hunter has just reported its first batch of security vulnerabilities. Heather Adkins, Google’s vice president of security, announced Monday that its LLM-based vulnerability ...

Security researchers and attackers are turning to artificial intelligence (AI) models to find vulnerabilities, a technology whose use will likely drive the annual count of software flaws higher but ...

Generative AI (GenAI) may be creating some headaches for security professionals in the arena of vulnerability reporting, but one at least one company has shown you can build an effective autonomous ...

The Department of Defense Cyber Crime Center, known as the DC3, is expanding to address the increase in cyber attacks and vulnerabilities. The DC3’s Vulnerability Disclosure Program is expanding ...

The UK’s National Cyber Security Centre (NCSC) has lifted the lid on a Vulnerability Research Initiative (VRI) programme designed to engage the private sector on vulnerability research and discovery ...