Search: “open source”

3 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 3391 Malware 2364 Ransomware 1502 Exploit / PoC 1278 Industry 903 Threat actor 852 Data breach 780 Policy & legal 659 Phishing & fraud 523 AI safety & security 245 AI tools & infra 242 Tools 213 Research 156 Advisory 105

SeverityAll critical 4935 high 3603 medium 2667 low 1566 info 731

ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up

ENISA warns frontier AI compresses attack lifecycles to minutes, with exploits possible within 15 minutes of disclosure and median 72-minute breach-to-exfiltration times.

ENISA's July 2026 paper 'ENISA's view on Cybersecurity in the Frontier AI Era' argues AI-assisted attackers may weaponize vulnerabilities within 15 minutes of disclosure and achieve initial-access-to-data-exfiltration in a median 72 minutes, creating a 'negative time-to-exploit' problem. The report cites one organisation whose CVE volume rose from roughly 80 in Q1 2025 to almost 500 in Q1 2026, then about 500 reports per day when frontier-AI tools were used. ENISA recommends machine-speed defence under 'Cybersecurity as Code', EPSS and VEX-based prioritisation, AI-assisted incident response with human oversight, and an assume-breached architecture.

Security AffairsSep 14, 20:35 UTC · 2d agoAdvisory

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Google announced Android 17 will enforce OS-wide Encrypted Client Hello with ECH GREASE, plus Certificate Transparency by default and carrier 2G disablement.

Google announced Android 17 network security protections headlined by OS-wide support for Encrypted Client Hello (ECH), with ECH GREASE enabled by default so connections to non-ECH servers look identical. Google's Jigsaw noted OkHttp has integrated ECH, letting third-party Android apps adopt the standard. The release also enforces Local Network Protection permission prompts, enables Certificate Transparency by default, and lets carriers turn off 2G by default to prevent downgrade attacks, rogue base stations, and SMS blasters. ECH was previously added to Chrome 117 and Firefox 118 at the browser level only.

The Hacker NewsAug 28, 16:20 UTC · 19d agoAdvisory

CISA Vulnerability Review

CISA's Vulnerability Review finds most compromises exploit exposed, well-known flaws due to basic security failures, based on FY2024-2025 data.

The CISA Vulnerability Review analyzes CISA and open-source data from fiscal years 2024 and 2025. It concludes most compromises do not rely on advanced techniques; threat actors scan the internet for exposed, well-known software vulnerabilities. CISA urges organizations to address underlying weaknesses and prioritize vulnerabilities for remediation based on the risk they pose.

CISA AdvisoriesAug 26, 12:00 UTC · 21d agoAdvisory