[tl;dr sec] #336 - Autonomous Vulnerability Hunting, GuardDog 3.0, Are Bug Bounties Cooked? tldrsec.com
Security newsletter issue on AI vuln hunting, GuardDog 3.0, bug bounty economics, and assorted supply-chain/RAT/jailbreak bits.
trending8
01 02 Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies arxiv.orgHow bad is the dual-use mess? This survey maps LLM cyber use from phishing and malware to explainability and defenses.03 An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.04 Even the FBI says TeamPCP turned dev tools into a credential vacuum for cloud keys, SSH, and K8s secrets.05 Small botnet, industrial-grade crypto: RustDuck swaps C for Rust and adds anti-analysis, encrypted C2, and DDoS plumbing.06 Microsoft reports a Tor-routed clipboard stealer swapping wallet addresses and harvesting BIP39 seeds, because malware needed more hobbies.07 152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic thehackernews.com152 Chrome wallpaper extensions, adware with a new trick: install/uninstall flows spoof search traffic.08 PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow arxiv.orgPYPILINE swaps brittle PyPI rules for a suspicious-API KB plus agent workflow, then claims better malware detection.