Athena Project Discloses First 50 Silent Fixes
Athena discloses 50 silent fixes from 40,000 findings, partnering with CISA for responsible disclosure.
Stories per day · 30 days
2 RSS
Relatedai-marketing1hyper-threading1php1security-research1side-channel1tailscale1vulnerability-discovery1
10 stories, newest first · one card per story
Stories tagged #responsible-disclosure
Blogger rejects LLMs for research and criticizes AI security marketing
The post contrasts Calif, OpenAI and Wiz narratives on PHP flaws and says a Tailscale hash drop was not responsibly disclosed.
1
Scholar describes duty to responsibly disclose Hyper-Threading side-channel vulnerability
The author contacted Intel and open source vendors about a cache side-channel in Hyper-Threading before public disclosure, prioritizing the fix over career.
1
Reporting vulnerabilities to Estonian companies
A YouTube talk covers how researchers report vulnerabilities to companies in Estonia.
Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
Day one of Pwn2Own Ireland 2026 yielded 32 demonstrated zero-days against phones, smart home devices, printers, and AI tools, earning $368,000.
16-Year-Old Researcher Discovers Microsoft Authentication Bug Exposing 17.3 Trillion Records
A teenage researcher found Microsoft Titan accepted unsigned JWTs, enabling admin SQL against huge internal analytics stores.
16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
A teenage researcher found Microsoft Titan accepted unsigned JWTs, potentially reaching an estimated 17.3 trillion stored rows.
Researchers used Claude to hack OpenAI
Researchers exploited a Discourse misconfiguration on OpenAI's community forum to reach internal sign-ons and an employee ChatGPT account with GitHub code access; OpenAI fixed it.
Due to concerns about malicious applications, GPT2 will not be released (2019)
OpenAI's landmark 2019 GPT-2 post withheld the full 1.5B-parameter model over misuse concerns, releasing only a smaller variant and paper.
5
The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 [32:37]
A conference talk recounts GPG vulnerability disclosures, notes several GnuPG flaws remain unpatched, and demonstrates novel bugs live.