Google fixed the first actively exploited Chrome zero-day since the start of the year
Google fixed the first actively exploited Chrome zero-day since the start of the year Pierluigi Paganini March 26, 2025 Google fixed a flaw in the…
Author: Cybernoz
Using the Smartest AI to Rate Other AI
The structure of the rate_ai_result Stitch Since early 2023 I’ve wanted a system that can assess how well AI does at a given task. And…
Introducing Burp Suite’s game-changing performance update | Blog
Amelia Coen | 12 September 2024 at 11:55 UTC Hands-on security testers need the best tools for the job. Tools you have faith in, and…
![[tl;dr sec] #268 - AI-powered Burp Suite, OAuth Vulnerabilities, Subtle LLM Backdoors](https://image.cybernoz.com/wp-content/uploads/2025/03/1743080265_tldr-sec-268-AI-powered-Burp-Suite-OAuth-Vulnerabilities-Subtle.png)
[tl;dr sec] #268 – AI-powered Burp Suite, OAuth Vulnerabilities, Subtle LLM Backdoors
How Burp Suite is adding AI-powered features, understanding and mitigating OAuth vulns, a PoC to subtly backdoor an LLM I hope you’ve been doing well!…
Researchers back claim of Oracle Cloud breach despite company’s denials
Dive Brief: Security researchers said they confirmed a breach of Oracle Cloud after a previously unknown threat actor posted an offer to sell more than…
Senators criticize Trump officials’ discussion of war plans over Signal, but administration answers don’t come easily
Democratic senators hammered two top national security officials Tuesday about their participation in a Signal chat discussing war plans that reportedly included a journalist, but struggled…
ESET Research Podcast: Gamaredon
ESET researchers introduce the Gamaredon APT group, detailing its typical modus operandi, unique victim profile, vast collection of tools and social engineering tactics, and even…
StreamElements discloses third-party data breach after hacker leaks data
Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on…
Classiscam Actors Automate Malicious Websites To Steal Financial Data
Online marketplaces have become increasingly popular in developing countries since 2015, providing platforms for trading various goods from used electronics to brand-new items. This digitalization…
Rethinking SAP Security Without Maintenance Contracts
Do you rely on SAP maintenance contracts to keep vulnerabilities in check? Here’s a question: have you felt the sting of renewal season? Those spiraling…
How to Delete Your Data From 23andMe
Genetic testing company 23andMe, once a Silicon Valley darling valued at $6 billion, filed for Chapter 11 bankruptcy protection late Sunday as it prepares for…
Massive Data Breach Hits NSW Online Registry: 9,000+ Files Stolen
A major cybersecurity incident has struck the New South Wales court system, as cybercrime detectives investigate a significant data breach affecting the Department of Communities…