The Exploit Post

Sign in Subscribe

Latest

Slop Is Served! An Editor’s Column

Slop Is Served! An Editor’s Column

A new phrase has joined the digital dictionary: “AI slop.” It’s the label people slap on the sloppy, off-putting results of neural networks the distorted hands, the uncanny smiles, the soulless text. The word has become shorthand for everything people hate about generative AI. But since slop seems unavoidable,

Librarian Likho Develops Its Own Malware with AI Assistance

Librarian Likho Develops Its Own Malware with AI Assistance

Kaspersky Lab has detected a new wave of targeted cyberattacks by the Librarian Likho group—previously known as Librarian Ghouls—against organizations in Russia’s aviation and radio industries. For the first time, the threat actors are using custom-built malware to steal confidential information malware that researchers say was developed

Symantec: Chinese Hack Group ‘Jewelbug’ Breached Russian IT Services Provider

Symantec: Chinese Hack Group ‘Jewelbug’ Breached Russian IT Services Provider

A China-linked cyber-espionage group known as Jewelbug infiltrated the network of a Russian IT services provider, maintaining access for nearly five months, according to a report by the Symantec Threat Hunter Team. The breach marks the first time the group has been observed operating outside Southeast Asia and South America,

Hackers Breached F5, Stole BIG-IP Source Code and Data on Undisclosed Vulnerabilities

Hackers Breached F5, Stole BIG-IP Source Code and Data on Undisclosed Vulnerabilities

F5 Networks has confirmed a security breach attributed to state-sponsored hackers who maintained long-term access to parts of the company’s internal systems. The attackers reportedly stole confidential data, including source code for the BIG-IP platform and details about previously undisclosed vulnerabilities. What Happened In a filing with the U.

Researchers Spied on Satellite Traffic with an $800 Device

Researchers Spied on Satellite Traffic with an $800 Device

Scientists from the University of California San Diego and the University of Maryland have uncovered a major privacy and security flaw affecting satellite communications worldwide. Their three-year study revealed that roughly half of all geostationary satellite transmissions are sent without encryption, exposing sensitive data from corporations, governments, and everyday users—

The RMPocalypse Vulnerability Compromises AMD SEV-SNP Security

The RMPocalypse Vulnerability Compromises AMD SEV-SNP Security

AMD has released patches for a critical vulnerability known as RMPocalypse, which undermines the security of Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) — the company’s flagship confidential computing technology. Discovery and Technical Details Researchers from the Swiss Federal Institute of Technology Zurich (ETH Zurich) discovered that the flaw

Latest Windows 10 Updates: Microsoft Patches 173 Vulnerabilities, Including Six Zero-Days

Latest Windows 10 Updates: Microsoft Patches 173 Vulnerabilities, Including Six Zero-Days

As part of October’s Patch Tuesday, Microsoft has released fixes for 173 vulnerabilities across its products including six zero-day flaws and two vulnerabilities already under active exploitation. Overview of Zero-Days and Actively Exploited Bugs This month’s updates address two publicly disclosed zero-day vulnerabilities in Windows SMB Server and