Rights groups have reacted angrily to the news that the government is expanding police use of live facial recognition (LFR) without adequate legislative safeguards. The Home Office yesterday announced the deployment of 10 new LFR vans to seven forces across… Read More "Campaigners Slam Expansion of Police Facial Recognition Schemes in UK"
The second Trump administration has its first federal cybersecurity debacle to deal with. A breach of the United States federal judiciary’s electronic case filing system, discovered around July 4, has pushed some courts onto backup paper-filing plans after the hack… Read More "The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived"
Posted by Alex Rebert and Max Shavrick, Security Foundations, and Kinuko Yasuda, Core Developer Attackers regularly exploit spatial memory safety vulnerabilities, which occur when code accesses a memory allocation outside of its intended bounds, to compromise systems and sensitive data.… Read More "Retrofitting spatial safety to hundreds of millions of lines of C++"
Aug 14, 2025The Hacker NewsEndpoint Security / Application Security Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In this… Read More "Simple Steps for Attack Surface Reduction"
Bestimmte Implementierungen der FIDO-Authentifizierung – insbesondere Windows Hello for Business – können laut Proofpoint anfällig für Downgrade-Angriffe sein. ymgerman | shutterstock.com Der FIDO-Standard gilt allgemein als sicher und benutzerfreundlich. Er kommt für passwortlose Authentifizierung zum Einsatz und gilt als wirksames… Read More "FIDO ausgehebelt | CSO Online"
Sysadmins have been urged to prioritize updating a new critical vulnerability in Fortinet’s FortiSIEM solution, as exploit code is currently circulating in the wild. Published on Tuesday, CVE-2025-25256 is an escalation of privilege vulnerability with a CVSS score of 9.8.… Read More "Fortinet Warns Exploit Code Available for Critical Vulnerability"
Recently, OSS-Fuzz reported 26 new vulnerabilities to open source project maintainers, including one vulnerability in the critical OpenSSL library (CVE-2024-9143) that underpins much of internet infrastructure. The reports themselves aren’t unusual—we’ve reported and helped maintainers fix over 11,000 vulnerabilities in… Read More "Finding more vulnerabilities with AI"
Aug 14, 2025Ravie LakshmananCryptocurrency / Financial Crime Google said it’s implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing apps in 15 jurisdictions in order to “ensure a safe and compliant ecosystem… Read More "Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses"
I’ve been thinking a lot about SOC efficacy lately, and I’m going to take a position that might make some people uncomfortable. Despite organizations investing millions in security operations centres (SOC) and state-of-the-art detection technologies, we’re seeing breaches at unprecedented… Read More "7 reasons the SOC is in crisis — and 5 steps to fix it"
Today, we are announcing the availability of Vanir, a new open-source security patch validation tool. Introduced at Android Bootcamp in April, Vanir gives Android platform developers the power to quickly and efficiently scan their custom platform code for missing security… Read More "Google Online Security Blog: Announcing the launch of Vanir: Open-source Security Patch Validation"
