Curl Ends Cash Bug Bounty Amid AI-Generated Report Surge
Curl maintainer Daniel Stenberg ended the project's cash bug bounty after confirmed-vulnerability rate fell below 5% due to AI-generated junk reports. Post-change,…
Tag: security
Sectigo: Digital Certificate and Security Solutions
Sectigo is a cybersecurity company offering digital certificate management and security solutions. Senior Fellow Jason Soroko commented on CVE-2026-8933.
ADB Keyboard: Android Test Automation Tool
A test automation tool for Android that accepts text via broadcast intents. Its documented functionality is exploited by AI agents for input,…
Mend.io: Software Supply Chain Security
Mend.io disclosed details of an undocumented software supply chain attack using 14 RubyGems packages to store stolen credential data.
Gatekeeper: macOS Security Feature Bypassed by ClickLock
Gatekeeper is a macOS security feature that is bypassed by ClickLock Stealer by killing NotificationCenter, preventing security warnings from appearing.
Zoom Video Communications
Zoom is a leading provider of video conferencing and collaboration solutions. The company recently patched multiple vulnerabilities in its annotation tool affecting…
1Password Password Manager
1Password is a password manager targeted by OkoSpyware for surveillance.
Microsoft BitLocker Drive Encryption
BitLocker is a full-disk encryption feature included with Microsoft Windows. It was the subject of a disclosed bypass vulnerability (CVE-2026-50661) requiring physical…
Miggo Discovers Critical RabbitMQ Vulnerabilities
Miggo's security team discovered and responsibly disclosed two access control vulnerabilities in RabbitMQ that could leak OAuth secrets and expose cross-tenant data.
GitLab: DevOps Platform and Vulnerability Response
GitLab is a leading DevOps platform providing source code management, CI/CD, and security features. It recently addressed a critical vulnerability (CVE-2026-19478) affecting…