Security news aggregator

Latest coverage for Research

Research examines attack methods, defenses, and vulnerabilities, helping security teams understand risks and improve protection.

11 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Research is the systematic study of technologies, systems, attack methods, vulnerabilities, and defensive techniques to establish evidence and produce new findings. In information security, it includes work such as discovering flaws in software or protocols, analyzing malware and attacker behavior, testing cryptographic designs, and evaluating security controls. News under this tag may describe a proof of concept, a measurement study, or a proposed technique rather than a confirmed real-world attack.

For practitioners, research can change how risks are prioritized and mitigated. A demonstrated vulnerability may require vulnerability-management teams to verify affected assets, apply fixes, or add compensating controls; responsible disclosure gives developers time to assess and remediate before technical details enable exploitation. Research involving live systems, personal data, or offensive tooling also raises privacy, authorization, dual-use, and ethical concerns. Sound findings should state their assumptions, scope, limitations, and reproducibility, since laboratory results do not automatically show that an attack is practical in every environment.

Showing 11 most recent headlines Filtered view
Bank Info Security 11 months, 4 weeks ago

Hackers Exploit FIDO MFA With Novel Phishing Technique

PoisonSeed Threat Actor Uses Cross-Device Login Feature and QR Code to Trick UsersExpel researchers have found a novel adversary-in-the-middle phishing technique used by PoisonSeed, a cybercrime group previously tied to large-scale cryptocurrency thefts, to sidestep one of the most secure forms of multifactor authentication - FIDO2 physical keys.

Bank Info Security 20 Jul 2025, 4:30 a.m. Authentication Cryptocurrency Cybercrime Exploit MFA Phishing Research Threat Actor

Semperis Warns of Flaw in Windows Server 2025 Delegated Managed Service AccountsA critical cryptographic flaw in Windows Server 2025's delegated Managed Service Accounts, or dMSAs, allows attackers to generate passwords for every managed service account across an Active Directory forest and create a backdoor, Semperis researchers found.

Bank Info Security 18 Jul 2025, 10:00 a.m. Active Directory Backdoor Credentials Flaw Microsoft Passwords Research Theft Warning

Agency to Collaborate with External Experts on Vulnerability ResearchThe U.K. NCSC will collaborate with industry experts for vulnerability detection and mitigation as part of its latest Vulnerability Research Initiative. The announcement comes on the heels of funding concerns for the U.S. government-based Common Vulnerabilities and Exposures program.

Bank Info Security 17 Jul 2025, 2:00 p.m. America Government Mitigation Research United Kingdom Vulnerability

Experts Aim to Probe How AI Models Reason, and Why It MattersAI researchers from OpenAI, Google DeepMind and Anthropic and others have urged deeper study into chain-of-thought monitoring, a technique to track how reasoning models arrive at answers. Their joint paper warns that transparency may erode if not prioritized.

Bank Info Security 17 Jul 2025, 11:00 a.m. Artificial Intelligence Google Research Study Warning

Oracle Cloud Infrastructure Flaw Enabled Malicious File Uploads, Researchers FoundExploring Oracle Cloud Infrastructure, researchers at Tenable found that Oracle's console-based Code Editor tool failed to block arbitrary file uploads, and could be silently exploited via drive-by attacks to install malware. They said Oracle has now fixed the vulnerability.

Bank Info Security 17 Jul 2025, 3:00 a.m. Attack Vector Cloud Fixed Flaw Malware Oracle Patch Research Vulnerability

Attackers Can Upload Malware in System Management Mode and Disable Secure BootMultiple high-severity vulnerabilities in Gigabyte's UEFI firmware could enable attackers to execute arbitrary code within System Management Mode, granting persistent and nearly undetectable control over affected systems, cybersecurity researchers reported.

Bank Info Security 16 Jul 2025, 9:30 a.m. Exploit Firmware Malware Research Vulnerability

Remote Code Execution Flaw Affects More Than 5,000 ServersThreat actors are actively exploiting a critical vulnerability in a server file transfer solution. Researchers say the flaw in Wing FTP Server could allow threat actors to execute system-level commands remotely, using null byte and Lua injection without authentication.

Bank Info Security 15 Jul 2025, 9:30 a.m. Authentication Critical Vulnerability Flaw Remote Code Execution Research Threat Actor Vulnerability

Bluetooth Flaws in Car Software Could Enable Hijacking of Infotainment SystemsA set of critical Bluetooth flaws in software that helps cars connect to phones and other devices could enable attackers to remotely take control of car infotainment systems used by major automakers including Mercedes-Benz, Skoda and Volkswagen, new research shows.

Bank Info Security 15 Jul 2025, 4:30 a.m. Bluetooth Flaw Hacking Research

Attackers Can Trick Gemini Into Displaying Deceptive Messages, Researchers WarnAttackers can hide malicious instructions inside emails to trick Google's Gemini into delivering falsified summaries with deceptive messages to end users, researchers warn. Google said it's continuing to put multiple defenses in place to combat these types of prompt injection attacks.

Bank Info Security 15 Jul 2025, 3:30 a.m. Google Research