Browsing Category
Featured News
24 posts
MSHTA Won’t Die, and Attackers Know It
Attackers continue abusing Microsoft’s decades-old MSHTA utility, exposing a familiar Windows problem: Legacy components often stay active because removing them could break something.
Pwn2Own Berlin 2026 Closes With $1.3M Paid, 47 Zero-Days and a New Champion
DEVCORE's Orange Tsai-led team dominated all three days to claim the 2026 Master of Pwn title, while STARLabs SG delivered the weekend's most technically significant moment with a memory corruption exploit that broke out of a VMware ESXi hypervisor and crossed tenant boundaries.
Researchers Return to Pwn2Own Berlin Stage With $1M+ Prize Pool Still in Play
Orange Tsai's $200,000 Exchange exploit added fresh bruises to one of enterprise security's most battered attack surfaces as AI tools kept falling across the contest stage.
Closing the Gap: Tackling ‘Configuration Drift’ in Modern Security
AI security tools ease tasks but increase configuration drift, compromising cybersecurity effectiveness.
The App You Forgot About Is Still Reading Your Email
AI agents are multiplying your OAuth footprint. A forgotten "Allow" click is all it takes. Here's what's at risk — and how to check your own exposure right now.
Palo Alto Firewall Flaw Lands on CISA Exploited-vulnerability List
Threat actors pounce on Palo Alto’s PAN-OS software firewall flaw as customers wait for full fix.
Iran-linked Hackers Used Ransomware Panic as Cover for Espionage
A Rapid7 report reveals suspected Iranian hackers, MuddyWater, utilized Chaos ransomware tactics for espionage, emphasizing social engineering and stealthy data exfiltration methods.
A Digital Home for Your Paper Passwords
New mobile tool attempts to bridge the gap between human messiness and digital security.
Utah Age-verification Law Puts VPNs in the Crosshairs
Utah’s new age-verification law brings VPNs into the fight over online child safety, privacy and website liability.
Canvas Maker Instructure Faces May 6 Leak Deadline After ShinyHunters Breach Claim
Edtech giant confirms breach exposing names, emails, student IDs, and private messages — the second Instructure incident tied to ShinyHunters in eight months.