On September 2, 2026, the curl project released version 8.22.0 with nine security advisories, six of which were credited to Stanislav Fort of AISLE, a security startup whose autonomous analysis system…
A CVSS 9.9 vulnerability in Cursor, CVE-2026-26268, allows attackers to execute arbitrary code on a developer's machine by cloning a malicious repository, as disclosed by Novee Security. The flaw, whi…
The Forum of Incident Response and Security Teams (FIRST) announced VulnOptiCON 2026, a three-day technical colloquium scheduled for September 23-25, 2026, in Luxembourg, to address vulnerability trac…
NATO's Cyber Security Centre and AI startup AISLE have joined the CVE program as numbering authorities under the ENISA Root, enabling them to assign unique identifiers to software vulnerabilities, the…
A new approach to cybersecurity evaluations proposes using language models as constant red-team oracles to empirically compare the attack surfaces of different software implementations, such as OpenSS…
AI security firm AISLE discovered six new CVEs in curl, including the oldest latent bug in the project's history, and previously found all 12 zero-day vulnerabilities in OpenSSL's latest security rele…
Anthropic's Mythos AI security tool, touted as too dangerous to release, found only one low-severity vulnerability in the heavily audited curl codebase after a privileged deployment. The curl project …