vulnerability research news
4 stories
Metasploit Wrap Up: Lot of summer shells and fit http profiles
Metasploit has released a significant update, introducing thirteen new modules that address a variety of vulnerabilities, including several remote code execution (RCE) flaws. The update also brings enhancements to the framework's capabilities, such as support for HTTP malleable profiles and improved functionality for Windows on ARM architectures.
Indian Cybersecurity Firm Uses Homegrown AI to Discover Three Security Flaws in Enterprise Linux
An Indian cybersecurity company has disclosed three previously unknown vulnerabilities in one of the most widely deployed identity components in enterprise Linux, and says all three were surfaced by an artificial intelligence model it built in-house for offensive security research.
Felons, Fraudsters Flog Offensive Cybersecurity Startup
IRIS C2, a cybersecurity startup actively seeking zero-day exploits with promises of substantial payouts, is reportedly led by individuals with a history of felony convictions and fraudulent operations. The company, which operates under the guise of IRIS C2 and is linked to Calvexa Group LLC, advertises on platforms like X (formerly Twitter) and its own website, irisc2[.]com, offering between…
Formalizing Red Teaming Offensive Methodology as a Multi-Agent AI Architecture
Threat actors are increasingly leveraging artificial intelligence to accelerate their offensive operations, from reconnaissance and vulnerability discovery to social engineering. In response, Rapid7's Red Team has developed a formalized, multi-agent AI system designed to mirror their end-to-end penetration testing methodology. This production system, built over the past year, aims to automate…