SecurityNewHostile SIMs exploit spec-compliant commands
Malicious SIM cards can force phones to leak files, drop to 2G, or crash—by abusing standard SIM commands.
> Search
30 results for “research”
SecurityNew
SecurityNewGray to White: A Hacker's Redemption Arc
Marcus Hutchins, who halted WannaCry, recounts his path from malware author to security researcher.
SecurityPasskey Defenses Undermined by Weak Surroundings
Recent research shows passkey protections can be bypassed without breaking the underlying cryptography.
AI & MLAI Research Gets a Human Amplifier
PortSwigger's HTTP Terminator, guided by a human, finds novel vulnerability classes and hundreds of live targets.
SecurityNatJack Challenges NAT Security Trust
New research reveals how the NatJack attack class exploits fundamental design flaws in NAT, bypassing standard network protections.
SecurityCPU Interrupts Bypass Spectre Defenses
Researchers identified a new technique dubbed INTERRUPT INJECTION that exploits timing gaps to bypass existing CPU branch protections.
SecurityAI Agent Frameworks Face Security Crisis
Researchers reveal that vulnerabilities in AI agent foundations allow prompt injection to bypass critical trust boundaries.
SecurityOracle Database Hijacked for Tool Storage
Researchers identified a post-exploitation toolkit concealed within Oracle database schema objects to bypass endpoint security tools.
SecurityBMC Vulnerabilities Expose Servers
New research reveals widespread security flaws in baseboard management controllers across major global server manufacturers.
SecurityWebKit Flaws Expose Apple Private Relay
Security researchers uncovered vulnerabilities in WebKit that allow websites to bypass Apple's Private Relay and view IP addresses.
SecurityWhy AI Orchestration Is a Security Risk
New research shows that the choice of AI orchestration framework can increase agent compromise rates by more than 2.6 times.
Tech NewsBridging AI Research and Industry Needs
The University of Kentucky’s Economic Development Collaborative is set to host an August event focused on aligning AI with industry.
Cyber CrimeFake Bank Alerts Facilitate RMM Access
Researchers identify a sophisticated phishing campaign using brand impersonation to deploy remote access malware on Windows.
SecurityResearch Exposes Google Passkey Exploits
Researchers identified three methods to compromise passkeys, highlighting vulnerabilities in Google's synchronization process.
SecurityAI Safety Bypassed via Task Splitting
Threat actors are breaking malicious projects into small, fragmented tasks to circumvent AI safety guardrails, according to research.
SecurityCentral Asia Targeted by New Backdoors
Researchers are tracking a sophisticated campaign against Central Asian governments involving custom OctLurk and SilkLurk malware.
Cyber CrimeAutonomous AI Weaponization at Scale
Researchers have identified a threat actor using the DeepSeek AI model to automate the lifecycle of cyberattacks on exposed servers.
Cyber CrimeAI Integration Reshapes Malicious Tactics
Researchers report a rise in AI-driven malware and evolving social engineering, marking a shift in how attackers scale operations.
SecurityAI Vulnerability Scares Prove Premature
New research shows AI-discovered flaws are exploited at the same rate as traditional ones, debunking 'vulnpocalypse' fears.
Tech NewsFrenos Secures Capital for OT Security
The OT security firm adds $1.52 million in seed funding to its coffers to scale research and operations for its AI-driven platform.
SecurityWhat Is a Proof of Concept? A Cybersecurity Guide
Learn how security researchers and developers use proof of concept demonstrations to validate vulnerabilities and improve software resilience.
SecurityRedis Patches Zero-Days Found by AI
Researchers used AI agents to uncover remote code execution vulnerabilities in Redis, prompting seven urgent security releases.
SecurityAI Coding Agents Face Hallucination Risks
Researchers identify a recurring security flaw where AI agents blindly execute commands based on predictable, hallucinated names.
SecurityAI Hallucinations Spur Package Risks
Researchers find top AI models consistently inventing identical, non-existent library names that attackers could potentially weaponize.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
Cyber CrimeSurveillance Disguised as Privacy Tools
Researchers have uncovered an Iran-linked campaign using fake VPNs and media players to deploy spyware against specific user groups.
Tech NewsPrentis AI Eyes $100M Funding Round
The research lab is seeking a $1 billion valuation to develop AI agents capable of automating complex office workflows.
Cyber CrimeHotel Wi-Fi DNS Hijacks Target M365
Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.
SecuritymacOS Gatekeeper Bypassed by App Swaps
Researchers demonstrate that macOS fails to revalidate web-downloaded applications after they have been modified by users.
SecurityWeaponized AI Workloads Threaten Grid
Researchers detail how malicious GPU workloads could trigger cascading power grid failures through high-frequency electrical modulation.