Security news aggregator

Latest coverage for Research

Research examines attack methods, defenses, and vulnerabilities, helping security teams understand risks and improve protection.

9 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Research is the systematic study of technologies, systems, attack methods, vulnerabilities, and defensive techniques to establish evidence and produce new findings. In information security, it includes work such as discovering flaws in software or protocols, analyzing malware and attacker behavior, testing cryptographic designs, and evaluating security controls. News under this tag may describe a proof of concept, a measurement study, or a proposed technique rather than a confirmed real-world attack.

For practitioners, research can change how risks are prioritized and mitigated. A demonstrated vulnerability may require vulnerability-management teams to verify affected assets, apply fixes, or add compensating controls; responsible disclosure gives developers time to assess and remediate before technical details enable exploitation. Research involving live systems, personal data, or offensive tooling also raises privacy, authorization, dual-use, and ethical concerns. Sound findings should state their assumptions, scope, limitations, and reproducibility, since laboratory results do not automatically show that an attack is practical in every environment.

Showing 9 most recent headlines Filtered view
Bank Info Security 2 years, 6 months ago

NIST Warns of Cyberthreats to AI Models

Data-Poisoning Attacks Are Critical Threat to Machine Learning Security, NIST WarnsMachine learning systems continue are vulnerable to cyberattacks that could allow hackers to evade security and prompt data leaks, scientists at the National Institute of Standards and Technology warned. There is "no foolproof defense" against some of these attacks, researchers said.

More from Bank Info Security 6 Jan 2024, 11:00 a.m. Artificial Intelligence Cyberattack Evasion Leak Machine Learning NIST Research Vulnerability Warning

Security researchers are detecting hundreds of IP addresses on a daily basis that scan or attempt to exploit Apache RocketMQ services vulnerable to a remote command execution flaw identified as CVE-2023-33246 and CVE-2023-37582. [...]

More from Bleeping Computer 6 Jan 2024, 6:32 a.m. Actively exploited CVE-2023-33246 CVE-2023-37582 Apache CVE Exploit Flaw Remote Code Execution Research Vulnerability

Security researchers have detailed a new variant of a dynamic link library (DLL) search order hijacking technique that could be used by threat actors to bypass security mechanisms and achieve execution of malicious code on systems running Microsoft Windows 10 and Windows 11

More from The Hacker News 2 Jan 2024, 3:00 a.m. Bypass Exploit Library Malicious Code Microsoft Research Threat Actor Windows 10 Windows 11