Search results for CVE
AI & Enterprise
No time to respond to ultra-fast AI attacks, \'patch gap\' alarm
Growing concern is emerging over a so-called patch gap, as AI can find vulnerabilities and write attack code within hours, leaving corporate security teams with less time to fix flaws. A Google M-Trends 2026 report cites cases where attacks occur before patches are deployed. Tests of Anthropic’s Mythos preview also showed rapid exploit generation for Windows kernel and Firefox vulnerabilities, while experts propose new prioritisation methods for patching.
AI & Enterprise
Rise of zero trust, zero CVE security requires zero ops strategy
Seong Hee-kyung (성희경), a director at Red Hat Korea, said regulatory changes and advances in AI are reshaping security, making zero trust and zero CVE increasingly important. He said the government’s request to scrap installed security software for financial firms is shifting responsibility from consumer devices to bank servers. He urged policy-based automation through a “zero ops” approach and cited JPMorgan’s post-2014 shift to zero trust and automation as an example.
Games & Commerce
18-year-old Excel bug still used in attacks, warning for legacy Office users
A Microsoft Excel security flaw first reported 18 years ago is still being exploited in real-world attacks, highlighting risks for organisations running unsupported software. The U.S. Cybersecurity and Infrastructure Security Agency added CVE-2009-0238 to its catalogue of known exploited vulnerabilities and told U.S. federal civilian agencies to complete mitigation by April 28. The bug affects older Excel and Office components, while newer Excel versions are not affected.