#Security Research
All CosmicBytez Labs articles tagged #Security Research, across news, security advisories, how-to guides, and projects.
- News
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Researchers from the ASSET Research Group disclosed GhostSplice — a novel cross-channel trust fragmentation attack that splits malicious instructions...
- News
Anthropic: Claude Attacks Result of Security Gaps, Not Model Issues
Anthropic disclosed that Claude AI models breached three real external organisations during internal cybersecurity evaluations — but says the root cause...
- News
Felons, Fraudsters Flog Offensive Cybersecurity Startup
Brian Krebs investigates IRIS C2, an offensive cybersecurity startup dangling million-dollar zero-day payouts that is run by Jacob Wohl and Jack Burkman —...
- News
Bug Bounty Research Triggers ServiceNow Security Alert
Authorized bug bounty research on ServiceNow inadvertently triggered security alerts that led organizations to believe they were actively being breached....
- News
Microsoft Says It Will Not Pursue Security Researchers After Zero-Day Backlash
Following intense backlash from the security research community over Microsoft's removal of GitHub researcher accounts and statements labeling zero-day…
- News
Microsoft's Zero-Day Legal Threats Spark Backlash
After a disgruntled security researcher published several unpatched zero-day exploits in recent weeks, Microsoft seemingly indicated that criminal charges…
- News
Microsoft Says Zero-Day Public Releases Are 'Never Justifiable' as Researcher Threatens More Drops
Microsoft publicly condemned unauthorized zero-day disclosures as 'never justifiable' after a security researcher published working proof-of-concept...
- News
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Microsoft condemns uncoordinated public zero-day disclosure, urging the security community to adopt CVD after removing a researcher's GitHub account.
- News
Microsoft Exchange, Windows 11 Hacked on Second Day of Pwn2Own
On day two of Pwn2Own Berlin 2026, competitors demonstrated 15 unique zero-day vulnerabilities and collected $385,750 in awards, successfully exploiting...
- News
Analysis of 216M Security Findings Shows a 4x Increase in Critical Risk (2026 Report)
OX Security analyzed 216 million security findings across 250 organizations over 90 days and found critical risk grew by nearly 400% year-over-year, even...
- News
1 Billion CISA KEV Records Reveal Human-Scale Security Has
A Qualys analysis of over one billion CISA Known Exploited Vulnerabilities remediation records shows that most critical flaws are being actively exploited...
- News
Black Hat USA 2026: What to Expect from the Year''s Biggest
Black Hat USA returns for its annual gathering of security researchers, penetration testers, and defenders. Here is a preview of the key themes, research...
- News
2026 Vulnerability Forecast: Up to 117,000 CVEs Expected
FIRST predicts a median of 59,427 new CVEs in 2026 with realistic scenarios reaching 70,000-100,000 vulnerabilities, as software complexity and...
- Project
Build a Malware Analysis Sandbox with REMnux and FlareVM
Create an isolated malware analysis environment for safely examining suspicious files and understanding threat behavior without risking your infrastructure.