Angry Hacker Drops Microsoft Zero-Day Exploit, 1 Billion Users Warned

A security researcher frustrated with Microsoft has released the BlueHammer Windows zero-day exploit, telling the company, “I ...

NEAR Protocol DeFi Hub Rhea Finance Loses $7.6 Million in Oracle Exploit

Rhea Finance lost $7.6M in an oracle manipulation exploit. Attackers used fake tokens and fresh liquidity pools to mislead ...

Microsoft's Security Response Center is being blamed for the zero-day BlueHammer exploit leak

A zero-day BlueHammer exploit was recently published on GitHub in response to alleged MSRC failures, and although Microsoft ...

Oligo Security Brings Real-Time Exploit Blocking to the Application Layer

Oligo Security, the runtime security company, today announced Runtime Exploit Blocking, a new capability that stops exploit ...

Hyperbridge attacker mints 1B bridged Polkadot tokens in $237K exploit

A hacker exploited the Polkadot-based cross-chain interoperability protocol Hyperbridge, netting about $237,000 and raising ...
Ars Technica

Exploit released for 9.8-severity PaperCut flaw already under attack

Exploit code for a critical printer software vulnerability became publicly available on Monday in a release that may exacerbate the threat of malware attacks that have already been underway for the ...
Bleeping Computer

Researcher to release exploit for full auth bypass on FortiWeb

A security researcher has released a partial proof of concept exploit for a vulnerability in the FortiWeb web application firewall that allows a remote attacker to bypass authentication. The flaw was ...
CoinTelegraph

Balancer exploit swells to $116M in outflows as team offers 20% bounty

DeFi protocol Balancer is the target of an ongoing exploit, with more than $116 million in staked Ether tokens transferred to a new wallet. Update Nov. 3, 10:42 am UTC: This article has been updated ...

Hackers exploit critical flaw in Ninja Forms WordPress plugin

A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files ...
AppleInsider

Exploit that delivered Pegasus spyware patched in iOS 16.6.1 update

Apple's operating system updates on Thursday patched an exploit chain capable of compromising iOS 16.6 devices with the Pegasus spyware without any interaction from the victim. The exploit was ...
CoinTelegraph

MetaMask denies claims of wallet exploit in ‘massive’ $10M hack

MetaMask stated its security team is working with others in the Web3 wallet space to uncover the source of the exploit. Cryptocurrency wallet provider MetaMask has denied claims that an exploit of its ...
TechSpot

GPT-4 can exploit zero-day security vulnerabilities all by itself, a new study finds

A hot potato: GPT-4 stands as the newest multimodal large language model (LLM) crafted by OpenAI. This foundational model, currently accessible to customers as part of the paid ChatGPT Plus line, ...