Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
Solar Designer says oss-security volume and subscriber churn remain elevated amid AI vulnerability-report floods.
149 stories, newest first · one card per story
Solar Designer says oss-security volume and subscriber churn remain elevated amid AI vulnerability-report floods.

Proofpoint research argues AI is degrading threat actor quality, with once-sophisticated TA4903 now producing sloppier credential phishing and BEC attacks.
Bank of America hired 1,000 contractors to patch Anthropic Mythos findings amid large AML penalties.

openKylin outlined its vision for AI-era Linux at Open Source Summit Europe 2026.

Semperis survey of 1,200 ransomware victims finds AI in 84% of incidents and identity systems widely targeted.
AI decompilation is reconstructing commercial games, aiding preservation while raising fears of software reuse.
Huntress discusses 10 endpoint security trends for 2027 focusing on AI risks, ransomware, and identity security.

Square introduces kiosk with agentic AI for conversational ordering assistance.
Bruce Schneier says cryptographic over-engineering should hold up better against AI cryptanalysis than Matthew Green fears.

A partner webinar pitches runtime identity controls against AI-accelerated privilege escalation after account compromise.

Troy Hunt says recent breaches came from phone vishing, not AI, calling AI breach hype unsupported.

Graylark's Raven tool lets police identify specific homes from one interior photo using Airbnb and Zillow listings.

Amazon runs more than one million warehouse robots and is expanding AI-coordinated fleets and arms.

WEF outlook finds CEOs rank cyber fraud above ransomware as AI and geopolitics widen resilience gaps.
Andrej Karpathy says the gap in shared understanding of LLM capabilities is widening.

Cybersecurity M&A reached 117 deals last quarter as AI demand pulls in nontraditional buyers.

Horizon3.ai argues AI-speed attackers require continuous exposure management, not periodic visibility.

Wordfence argues cybersecurity needs AI-driven math before public-key encryption fails.
Carson Gross says programming and complexity control stay valuable despite AI tools.

Opinion argues AI platforms should continuously enforce compliance controls instead of dashboards that only document them.
Meta's infrastructure chief explains why company-owned data centers and chip choices underpin its AI strategy.

Hadrian raised $40 million in Series B funding to expand its autonomous AI offensive security platform.
Tanium relaunched Security Operations with behavioral endpoint detection, fleet-wide response, and plain-language AI hunting.

Security leaders argue AI-accelerated attacks require continuous, automated penetration testing and offensive security instead of annual compliance-driven assessments.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views