vulnerabilities
National Vulnerability Database is due for further modernisation after cuts to CVE enrichment programme.
"Anauthenticated administrative account takeover" ftw, with attackers gaining persistence
'We can't build a secure sandbox nor monitor our own model tests properly' is not a flex - and Hugging Face's Thomas Wolf has views
"Issues that depend on compromised or malicious inputs already present in that context generally fall outside our bug bounty scope."
So far, the Gold Eagle vulnerability clearing house seems to be CISA with some extra bits.
watchTowr also credited after letting “our small pets walk across our keyboard, and watching what happens.”
Bug was exploited as a zero day for two weeks before a patch landed
AWS Continuum promises "machine speed" remediation for the post-Mythos era.