Cybersecurity vulnerabilities

The article discusses critical vulnerabilities discovered in the Central Board of Secondary Education (CBSE)'s On-Screen Marking Portal. It references a blog post on ni5arga.com and a Hacker News comment thread with no user discussions.

Anthropic plans to release Mythos-class AI models to the public once safety safeguards are developed, but acknowledges current risks. The models, highly effective at finding software vulnerabilities, are currently restricted via Project Glasswing due to misuse concerns. Governments and security experts have responded with heightened scrutiny and action.

Anthropic is investigating unauthorized access to its Mythos AI model, which has not been publicly released due to its potential to enable cyber-attacks. The report by Bloomberg claims a small group accessed the cybersecurity-vulnerability-detecting model, raising security concerns.

CISA has issued an urgent warning that three vulnerabilities in Cisco Catalyst SD-WAN Manager are actively exploited in attacks, giving federal agencies four days to apply patches. The agency emphasizes the critical nature of the flaws, which could allow attackers to compromise network security.

Cybersecurity researchers discovered 22 vulnerabilities, codenamed BRIDGE:BREAK, in Lantronix and Silex serial-to-IP converters, potentially allowing device hijacking and data tampering. Forescout Research Vedere Labs identified nearly 20,000 exposed converters.

The National Institute of Standards and Technology (NIST) has adjusted its CVE enrichment process in the National Vulnerability Database (NVD) due to a 263% surge in vulnerability submissions. Only CVEs meeting specific criteria will now be enriched, while others will remain listed without additional details.

Tests reveal that facial recognition on 21 popular devices can be easily spoofed using printed photos, raising concerns about device security. The findings highlight vulnerabilities in biometric authentication systems, prompting questions about the safety of personal data.