TECH NEWS

CISA: Most exploited vulnerabilities should have been eradicated decades ago

Organizational culture and systemic gaps in Secure by Design adoption blamed for sorry state of affairs

CISA is still crying out for software vendors to adopt Secure by Design (SBD) development practices, and says in its latest review that longstanding vulnerability classes are still the most exploited.

The agency examined soft spots across 2024 and 2025, finding that the majority of those that receive CVEs and make it to the Known Exploited Vulnerability (KEV) catalog belong to decades-old flaws that should have been addressed by now.

Injection-related vulnerabilities, such as cross-site scripting (XSS) (CWE-79), OS command injections (CWE-78), and SQL injections (CWE-89) were among the most common across both CVE and KEV records in 2024-2025, CISA said.

These were joined by bugs introduced by vendors that didn’t properly mitigate against improper input validation (CWE-20) in their code – the single most-common weakness type across the KEV catalogand registered...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

https://cdn.mos.cms.futurecdn.net/wSvr2XcdjMHeeAahcBvs54-1920-80.jpg

'Illegal and baseless': US judge blocks the Pentagon blacklisting of Anthropic as a supply chain risk

* Anthropic emerges victorious in legal battle against Pentagon over supply chain risk designation * The Pentagon wanted to use Anthropic's models for autonomous weapons and surveillance * Judge rules that the Pentagon's supply chain risk claims were "baseless" A US federal judge has blocked the Pentagon&

https://assets.bwbx.io/images/users/iqjWHBFdfxIU/iDAfCS2ZY8ug/v1/1200x900.jpg

A look at Beijing's AGI Bar, the unofficial clubhouse for China's AI industry where entrepreneurs trade gossip, recruit talent, and court investors over beers

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Most carriers track everything. Cape doesn't. — Unlimited talk, text &

https://www.securityweek.com/wp-content/uploads/2024/09/Linux.jpeg

OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems

Around the time some OpenAI models escaped their testing environment and hacked Hugging Face, some agents exploited a Linux kernel vulnerability to escalate privileges on OpenAI’s own systems. This was mentioned in a report published by OpenAI this week to detail the incident in which its models hacked Hugging

https://cdn.mos.cms.futurecdn.net/kj8HSS84jys69io2DqhGXh-2560-80.jpg

Amazon fights price hikes with its massive Labor Day sale — 60% off Apple devices, TVs, appliances, smart home and…

Amazon's 2026 Labor Day sale is live, and it arrives at just the right time. As retailers like Amazon and Apple have had to raise prices on their electronics recently because of the memory and storage component shortage, a discount is very welcome, and Amazon has done just

Read more

'Illegal and baseless': US judge blocks the Pentagon blacklisting of Anthropic as a supply chain risk

A look at Beijing's AGI Bar, the unofficial clubhouse for China's AI industry where entrepreneurs trade gossip, recruit talent, and court investors over beers

OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems

Amazon fights price hikes with its massive Labor Day sale &mdash; 60% off Apple devices, TVs, appliances, smart home and…

Amazon fights price hikes with its massive Labor Day sale — 60% off Apple devices, TVs, appliances, smart home and…