#Vulnerability Research
All CosmicBytez Labs articles tagged #Vulnerability Research, across news, security advisories, how-to guides, and projects.
- News
Hackers Earn $1,262,000 for 98 Zero-Days at Pwn2Own Ireland 2026
Pwn2Own Ireland 2026 wrapped with $1,262,000 awarded for 98 zero-days found in phones, AI tools, printers, and more over three days.
- News
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google paused payouts for OSS VRP product bug reports on October 1 after a surge in automated submissions, most of them invalid, flooded Go, Angular, and Bazel.
- News
Google Halts Open Source Bug Bounty Program Amid AI Spam Surge
Google paused OSS VRP product submissions on October 1 after AI-generated reports buried reviewers, joining curl and Intel in scaling back bounties.
- News
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders
Google's Gemini 4 Argon rolls out to 650+ vetted defenders via the Fairwind Program, pairing autonomous vuln-hunting with a guardrail-free build.
- News
Researchers Use AI to Find Widespread Software Decoder Flaw
AI models helped researchers turn a libheif image-decoder bug into RCE, reaching Meta's product suite and an OpenAI code repository.
- News
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Cycode found chained flaws in NASA's open-source AMMOS Instrument Toolkit GUI allowing unauthenticated attackers to send arbitrary spacecraft commands.
- News
Kimi K3 AI Agents Discovered Redis Zero-Days and Built RCE Exploits in Under 90 Minutes
Autonomous AI agents powered by Moonshot AI's Kimi K3 model found 19 Redis zero-day vulnerabilities and produced working authenticated RCE...
- News
We Built a Vulnerability Vending Machine: AI Tokens In, Zero-Days Out
Security firm Intruder built an AI-powered system that combines code slicing with large language models to automatically discover complex software...
- News
Chinese LLMs Broaden the Gap Between Attackers & Defenders
China's GLM 5.2 finds vulnerabilities at $0.17 each and outperforms frontier Western models on security benchmarks — while AI-enabled adversary activity...
- News
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws
OpenAI has released GPT-5.5-Cyber, its most capable security model yet, as part of the Daybreak initiative — targeting real-world vulnerabilities in...
- News
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely
Anthropic has disclosed that Project Glasswing — its AI-powered vulnerability research initiative using the Claude Mythos system — has uncovered more than...
- News
Hackers Earn $1,298,250 for 47 Zero-Days at Pwn2Own Berlin
Pwn2Own Berlin 2026 has concluded with security researchers earning over $1.29 million in prizes after successfully exploiting 47 zero-day vulnerabilities...
- News
The Boring Stuff Is Dangerous Now
AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of potentially flawed...
- News
Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws
Anthropic's new Project Glasswing initiative uses a preview of its frontier model Claude Mythos to autonomously discover thousands of previously unknown...
- News
GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables
Researchers from the University of Toronto have demonstrated GPUBreach, a novel attack that induces Rowhammer bit-flips in GPU GDDR6 memory to bypass...
- News
Black Hat USA 2026: What to Expect from the Year''s Biggest
Black Hat USA returns for its annual gathering of security researchers, penetration testers, and defenders. Here is a preview of the key themes, research...
- News
Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech
Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities actively exploited in 2025, with enterprise software and appliances accounting for...