Getting back to zone after 3 days holiday!

Spotlight

FUZZING :
Finding vulnerabilities in applications and services is the first step toward developing your own zero-day exploit. Vulnerability Scanners good for KNOWN vulnerabilities, but to find zero-days —> Fuzzer.
Tool: American Fuzzy Lop plus plus (AFLplusplus)
DDRop: A new hardware attack, that breaks memory protection in intel and AMD confidential computing by silently dropping writes to a server’s memory, so the processor keeps reading old encrypted data as if it were current.

‘Sandworm’ — Threat actors — once again, proved how chaining of vulnerabilities can have severe effect. They combined CVE-2026-20079 and CVE-2026-20316 allowing the attacker to log in with a low privileged account.
A report got published by Anthropic called “Detecting & Countering misuse of AI: September 2026”, talking about recent cases of the risk of losing control of AI systems, misusing AI for Cyberattacks and ‘Bioterrorism’, scams & frauds, and the serious economic disruptions identified by their Threat Intelligence team.

Check out Fuzzing … try fuzzing some apps to replicate the known bug findings.
Self modifying malware: Imagine malware that automatically rewrites itself every time an antivirus program detects it—without a human coder lifting a finger.