A critical authentication bypass vulnerability in phpBB's default configuration, tracked as CVE-2026-48611, allows unauthenticated attackers to log in to any account with a single request. Discovered …
OpenAI's GPT-5.5-Cyber, launched under the "Patch the Planet" initiative with Trail of Bits, has filed 64 pull requests and 51 issues across 19 open-source projects including cURL, Python, and Go in i…
An AI security company faces a lawsuit for publishing hallucinated vulnerability findings, highlighting a crisis of trust in AI-generated security research. The case follows cURL's shutdown of its bug…
AI security firm AISLE discovered six new CVEs in curl, including the oldest latent bug in the project's history, and previously found all 12 zero-day vulnerabilities in OpenSSL's latest security rele…
A developer proposes using the Model Context Protocol (MCP) to connect vulnerability detection tools with security training platforms like HackEDU, creating a real-time feedback loop that assigns adap…
OpenAI released GPT-5.5-Cyber, a model that finds vulnerabilities cheaply but shifts the bottleneck to patching. The model discovered dozens of bugs in OpenBSD, Linux, FreeBSD, Chrome, Safari, and oth…
OpenAI launched Patch the Planet, a program with Trail of Bits that uses AI to find and fix vulnerabilities in open-source software, addressing growing supply chain risks. The initiative has already i…
OpenAI launched new security tools including the GPT-5.5-Cyber model, an updated Codex Security plugin, and the Patch the Planet open-source initiative. The company shifts from vulnerability discovery…
Curl will not accept vulnerability reports for the entire month of July 2026, a move maintainer Daniel Stenberg calls the "curl summer of bliss." The blackout follows a year of AI-generated fake secur…
Aikido's AI pentesting tool discovered a critical authentication bypass vulnerability in phpBB, affecting tens of millions of users across thousands of forums. The flaw, present in versions up to 3.3.…
Based solely on the provided text, the article is titled "HackerOne takes an axe to its bug bounty rewards." The body of the article does not contain any information about HackerOne or its bug bounty …
Relying on large language models (LLMs) to generate code without human security review can introduce serious vulnerabilities, as LLMs often replicate insecure patterns found in online examples. The ar…