Latest cybersecurity reporting from selected sources.

Researchers have uncovered a malware framework dubbed "fast16" that predates Stuxnet by five years.

Researchers say the advanced framework was built almost entirely by agents, marking a significant evolution in the use of AI to develop wholly original malware.

Researchers discovered a modular, "cloud-first" framework that is feature-rich and designed to maintain stealthy, long-term access to Linux environments.

Researchers utilized prompts and large language models to develop an open-source AI framework capable of generating both vulnerability exploits and patches.

Teenaged security researchers Sasha Zyuzin and Ruikai Peng discuss how their new vulnerability discovery framework leverages LLMs to address limitations of the past.

Researchers have uncovered multiple campaigns spreading Lumma, Arechclient2, and Rhadamanthys malware by leveraging key features of the AV/EDR evasion framework.

Proofpoint researchers discovered a large-scale campaign using the open source penetration-testing framework that has targeted more than 80,000 Microsoft accounts.

Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around the patch.

The update to the company's Vulnerability Rating Taxonomy offers vulnerability researchers a framework for assessing and prioritizing vulnerabilities in large language models.

Expel-sponsored research unveils how companies measure SOC performance and the frameworks they rely on to assess and guide their security strategies

Anyscale has dismissed the vulnerabilities as non-issues, according to researchers who reported the bugs to the company.

Researchers found that the private keys and secrets they discovered being exposed within the Docker framework are already being used in the wild.

Security leaders also need to take a more holistic approach to addressing supply chain risks, company says in new research report.

The exploit requires a specific nonstandard configuration to work, limiting the danger it poses, but future research could turn up more broadly usable attacks.