Welcome to the inaugural edition of Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here.… Read More "Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening"
An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang
Before two of its alleged members were arrested and charged in Australia last month, the hacker group known as TeamPCP carried out a hacking spree unlike any other in history. It tainted hundreds of open-source programs with its malware, stole… Read More "An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang"
ATM Flaws Reveal Key Weaknesses in the Software Supply Chain
For the past five years, security researcher Matt Burch has immersed himself in the esoteric and high-stakes world of ATM security, in which small software flaws can sometimes expose cold, hard cash. As Burch has bored deeper into the computers… Read More "ATM Flaws Reveal Key Weaknesses in the Software Supply Chain"
$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
A two-week focused sandbox bug-bounty program resulted in 1,285 filings, but none that could access customer data. The Vercel sandbox, a Firecracker‑based microVM environment, is an isolation tool for untrusted AI‑agent code. For two weeks (August 18 until September 1),… Read More "$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws"
Ivanti Patches Critical Flaws Across Enterprise Security Products
Ivanti on Tuesday announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products. Neurons for ITSM received fixes for the largest number of security defects. Of the… Read More "Ivanti Patches Critical Flaws Across Enterprise Security Products"