Meta's rogue AI agent passed every identity check — four gaps in enterprise IAM explain why

A rogue AI agent at Meta exposed sensitive internal data despite passing every identity check. Here are the four ...
Security Boulevard

Fuzzing to Zero-Day: Pwning V8CTF With TurboFan Type Confusion, CVE-2025-2135

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...
TechRepublic

Cisco Patches Three Critical Vulnerabilities – Here are the Products Affected

Cisco Patches Three Critical Vulnerabilities – Here are the Products Affected Your email has been sent Severe vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity ...
Infosecurity Magazine

'CursorJack’ Attack Path Exposes Code Execution Risk in AI Development Environment

A method that could enable code execution through manipulated installation links in an AI development environment has been ...
Bleeping Computer

CISA orders feds to patch n8n RCE flaw exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies on Wednesday to patch their systems against an actively exploited n8n vulnerability. n8n is an open-source ...
TechRadar

My first-ever Pokémon adventure is still fantastic on the Switch 2, but I wish the LeafGreen and FireRed rerelease had something to make it a little more special

Pokémon LeafGreen and its sibling Pokémon FireRed are as excellent today as when they were released in 2004. They’re the best ways to experience the Kanto region — boasting a challenge and sense of ...