4+ day, 18+ hour ago   (619+ words) The incident is the largest publicly disclosed Bitcoin sidechain security breach on record: approximately 3,996 BTC, worth roughly $316 million, drained from the Liquid Federation's reserve wallet in a single transaction, recovered in part within about 26 hours through an entirely on-chain negotiation....

4+ day, 18+ hour ago   (572+ words) StyleSmuggler is a two-stage server-side template injection attack (CWE-1336) that exploits Magento's template rendering engine through a specific input property called styles. Server-side template injection is a class of vulnerability in which user-supplied input triggers remote code execution — a distinction…...

1+ week, 19+ hour ago   (298+ words) The agents were running multi-round timed web-lookup tasks — information-retrieval exercises structured as five sequential questions, with a generous first window and extremely short answer deadlines (sometimes 13 seconds) for the rounds that followed. Their environment gave them read access to the…...

1+ week, 3+ day ago   (675+ words) That finding, more than any benchmark score, defines what "Critical" means in practice — and why OpenAI announced Tuesday that Astra's most dangerous capabilities will be restricted to a vetted group of defenders rather than made available to everyone at once....

2+ week, 3+ day ago   (515+ words) "The client cannot detect or prevent this — the template is a model-level property invisible to API consumers," Oasis Security stated in its research report. The attack proceeds in three steps that chain together a decades-old browser security technique with a…...

3+ week, 4+ day ago   (384+ words) The patch arrived five days after a routine August 12 release that contained no critical-rated issues, breaking GitLab's standard twice-monthly cadence — itself a signal that the company's security team assessed this as too urgent to wait. GitLab has not named the…...