Blog

Supermarkets in seven European countries were hit after attackers altered refrigeration controls, spoiling food and exposing risks in legacy systems.

Russia-aligned Gorbag has targeted Ukrainian justice, local government and defense organizations since 2025, using infostealers and a patched WinRAR flaw.

Google and partners dismantled the XCPE botnet after finding a firmware backdoor in 1.3 million Android TV boxes and other connected devices.

Google Cloud adds a $250,000 bounty for research proving full administrative takeover without credentials, prior access or user interaction.

Polymarket will return $3.9 million after malicious JavaScript served through DebugBear drained traders’ wallets and disrupted international trading.

The FBI says North Korea’s TraderTraitor stole more than $6 billion from Binance and identifies 628 wallets linked to the laundering effort.

A fake Anthropic preview campaign bypassed Proofpoint and Microsoft email defenses using trusted services, shortened links and CAPTCHA-gated credential theft.

A critical Linux kernel TCP race flaw rated CVSS 9.8 can enable remote root access on multipath TCP servers, prompting urgent patching.

US election systems retain exploitable voting-machine and ballot-privacy weaknesses, while AI deepfakes threaten public trust despite paper-ballot safeguards.

Anthropic says an unreleased Claude model built exploit chains across Chrome, Safari, Android, Windows and Linux, prompting vendor fixes.