5 free resources on this topic. Everything here is free and hand-picked. You can also search within this topic.
Asaf Ezra and Steph Zhang argue that AI is reducing the expertise and time needed to turn vulnerabilities into exploits while patching remains slow. The essay discusses the gap between exploitation and remediation using incidents and historical comparisons.
Calif’s October 16, 2026 post presents videos of iPhone security demonstrations shown at Hexacon in Paris, including Signal and iMessage one-click exploits and a persistent jailbreak. These are the researchers’ demonstrations; the post says further technical material will be released later.
Evaluates open-weight and proprietary AI models on exploit generation, vulnerability repair and subsequent attacks in five nonpublic software environments, using researcher-developed deterministic graders rather than LLM judges. Repair scores exceed attack scores in two environments and fall below them in three. Preprint, not yet peer-reviewed.
The U.S. Cybersecurity and Infrastructure Security Agency's running feed of cybersecurity advisories and alerts: newly disclosed vulnerabilities, active exploits, and mitigation guidance for organizations and individuals.
Free Substack newsletter by a principal cybersecurity engineer sharing career tips and cybersecurity news, including a recurring 14-day U.S. cyber threat forecast (e.g. the September 22, 2026 VECTR-CAST report on actively exploited Cisco, ScreenConnect and VMware vulnerabilities).
Why I recommend it: Good for people moving into cybersecurity who want a practitioner's read on current threats. The threat levels and forecasts are the author's own analysis, not an official CISA rating — cross-check CVEs against the CISA KEV catalog.
