اخبار امنیتی

Schneier on Security

AIs Hacking the Law

۱۴۰۵/۰۸/۱۲ · ۲۱ ساعت پیش آسیب‌پذیری Schneier on Security

In both a 2021 essay and my 2022 book, A Hacker’s Mind , I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of this from Germany: Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 Courts absorb most exploits through…

Schneier on Security

AI Vulnerability Finding

۱۴۰۵/۰۸/۱۱ · ۱ روز پیش آسیب‌پذیری Schneier on Security

A comment : 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there.

Schneier on Security

Bias in Qwen3-Coder Model

۱۴۰۵/۰۸/۰۴ · ۸ روز پیش آسیب‌پذیری Schneier on Security

Interesting research : TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the code against Americans. Ask for the app…

Schneier on Security

New Serious PHP Vulnerabilities Released and Patched

۱۴۰۵/۰۷/۳۰ · ۱۲ روز پیش آسیب‌پذیری Schneier on Security

PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We…

CVE-2026-109619CVE-2026-109618