Blog

Google’s Gemini 4 Carbon leads vulnerability-finding, exploit-validation and patching tests, but access begins with selected cyber defenders.

A leak tied to the hacktivist group Department of Peace exposes data on more than 41,000 DHS workers as the agency investigates a potential breach.

Cisco patches an actively exploited ASA and FTD VPN flaw that lets unauthenticated attackers remotely reload firewalls and cause denial of service.

Telegram patched an Android flaw that could let ordinary account holders execute code after a victim answered a voice call, researchers say.

The FBI seized Virtualine’s domain after officials linked the bulletproof host to CSAM, ransomware, sextortion, money laundering and cybercrime services.

An unpatched Windows 7 server exposed a factory network to EternalBlue, letting a penetration tester use a real admin password to seize control.

CISA added two Ivanti Connect Secure flaws to its exploited-vulnerability catalog after attackers chained three bugs to gain unauthenticated root access.

Syrian hacker Ahmad Umar Agha was sentenced to 42 months for a pro-Assad campaign targeting 47 Western media, business and government entities.

Cloudflare mitigated 18.2 million network-layer DDoS attacks in Q3, as short bursts surged and attacks shifted from CLDAP to DNS and UDP floods.

A Socket investigation found 319 Chrome extensions routing searches through operator-controlled servers, exposing queries from 13.4 million installs.