CSO Online

The exploit window is shrinking. Most security workflows are not

The result is predictable: Security teams waste valuable time chasing noisy vulnerabilities while genuinely exploitable ...

Zoom Zero-Click RCE: AI Helped Build an Exploit in Under 24 Hours

Researchers built a Zoom zero-click RCE exploit in under 24 hours using AI, exposing risks to Windows, macOS, iOS, and Android users.
Business Wire

Offensive Security Launches New Course and Certification for Exploit Development and Reverse Engineering

NEW YORK--(BUSINESS WIRE)--Offensive Security, the leading provider of hands-on cybersecurity training and certifications, today announced the launch of Windows User Mode Exploit Development (EXP-301) ...
Dark Reading

The Business Of Commercial Exploit Development

Over the past 15 years of cybersecurity discussion, it's doubtful that you'll have failed to notice the biannual flare-ups concerning vulnerability disclosure. Whether it's due to the slow fuse of a ...
CSOonline

Putting AI-assisted ‘vibe hacking’ to the test

Valuable tools for experienced attackers and researchers, LLMs are not yet capable of creating exploits at a prompt, researchers found in a test of 50 AI models — some of which are getting better ...
The Hacker News

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

Daybreak Red is one of two access tiers set up by OpenAI as part of the Daybreak initiative it introduced back in May 2026, the other being Daybreak Blue, which provides access to frontier ...
JD Supra

New iOS Exploit "DarkSword" and a New Era of Mobile Security

Advanced iOS exploits are scalable and actively circulating. A new report detailing "DarkSword" found its highly sophisticated mobile exploitation capabilities are being used across multiple threat ...
Hosted on MSN

Google catches hackers using AI to build the first-known zero-day exploit — it bypassed two-factor authentication across thousands of servers

Somewhere in the world, a group of hackers fed an artificial intelligence tool a software flaw that no one knew existed. The AI did not just analyze the bug. According to Google, it built a working ...
Nextgov

Claude Mythos advances autonomous exploit development: What agencies can do to prepare

Anthropic’s Claude Mythos Preview represents a seismic shift in the impact of AI on the cybersecurity landscape in the federal government. According to the AI company’s Claude Mythos Preview System ...
TechRepublic

Hackers Used New Exploit Kit to Compromise Thousands of iPhones

Thousands of iPhones were compromised using the Coruna exploit kit, which chained 23 iOS vulnerabilities into advanced attacks used for espionage and cybercrime. An iOS exploit framework has revealed ...
Hosted on MSN

Exploits now arrive 10 hours after a vulnerability is published — down from days just two years ago

When Ivanti disclosed critical flaws in its Connect Secure VPN gateway in January 2024, attackers had working exploits circulating within roughly 24 hours. By the time most IT teams scheduled a patch ...