Exploit Kit That Can Hack Millions of iPhones Leaked Publicly
Image: Primary
Image: Primary
Vercel is gradually rolling out a login defense that binds sessions to a user's device, BleepingComputer reported. Device Bound Session Credentials use a private key stored in the device's security hardware to prevent a stolen session cookie from being reused on another device.
A preprint studying Project Glasswing finds that firms given early access to Claude Mythos Preview more than doubled vulnerability disclosures relative to Chinese and Russian tech firms without access.
Bitdefender researchers demonstrated an Android flaw called GhostMap that lets an installed app trigger a persistent crash loop without requesting permissions or being launched, BleepingComputer reported.
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability affecting Linux systems that use musl libc with PAM disabled, LWN reported.
IonQ agreed to acquire security specialist Elisity to integrate identity-based access controls into its quantum security platform, Yahoo Finance reported.
Palo Alto Networks is in talks to acquire Clutch Security for around $500 million, The Information reported, citing people familiar with the matter. The three-year-old Israeli security startup develops software that tracks passwords used by AI agents.