News

SPYWARE ACCORD ADOPTED IN PARIS

Spyware pact draws distinction between malicious and legitimate use of cyber-intrusion tools

EUCC CERT SCHEME, implications for vuln management

EUCC cyber certification scheme enters early adopter phase after vulnerability disclosure rules issued

YouTube

YouTube email leak exploit, Great ‘Wallbleed’ of China, Burp’s overlooked ‘best feature’ – ethical hacker news roundup

US Capitol Building depicted for article about a VDP bill mandating vulnerability disclosure policies for federal contractors clearing the US house

US House passes bill mandating vulnerability disclosure policies for federal contractors

AI software developer, depicted as humanoid robot, does some coding

Junior devs ‘can’t actually code’, AI coding risks, security researchers decry inscrutable AI – OffSec roundup for CISOs

Bounty Grid Boost: Ethical Hackers Invited to Strengthen the Security of the French Government’s Digital Services

Trophy for the top web hacking techniques of 2024

Top web hacking techniques of 2024, McDelivery hijack, 4D SOTA jailbreak – ethical hacker news roundup

Vulnerability or bug management cycle

Vulnerability management reboot sought, CISOs more influential in boardroom, Trump’s cyber overhaul – OffSec roundup for CISOs

Record CVE surge - explaining the ongoing rise in new vulnerabilities

CVE surge: Why the record rise in new vulnerabilities?

The YesWeHack Bug Bounty Report 2025

The YesWeHack Bug Bounty Report 2025

HTML code on a PC monitor to illustrate DOMPurify bypasses on an ethical hacker news roundup

DOMPurify bypasses, prompt injecting ChatGPT to shell, AI fuzz finds – ethical hacker news roundup

Futuristic Sci-Fi glowing HUD clock fading, representing how the clock is now ticking on Cyber Resilience Act compliance

Clock ticking on Cyber Resilience Act compliance, Bug Bounty forecasts, intriguing CISA red team find – OffSec roundup for CISOs