Android modem exploit disclosed August 17: answering a video call can hand a remote attacker complete kernel control of any budget Android phone running a Unisoc chipset. No patch exists for either ...

The latest Google Chrome update fixes 4 new non-exploited critical memory vulnerabilities. Here’s what they are and why the increasing volume of updates is a good thing.

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

A federal judge has ordered a public iPhone exploit taken offline after Magnet Forensics argued it wasn't independent security research at all, but instead a stolen trade secret. U.S. District Judge ...

A proof-of-concept exploit for “Certighost,” a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows ...

Magnet Forensics is suing Paradigm Shift Technology over its publication of usbliter8, alleging that the unpatchable exploit affecting several Apple SoCs was developed using trade secrets ...

This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.

Use left and right arrow keys to seek audio. Nintendo's latest security push for the Switch 2 may have just been undermined by a developer who cracked a universal exploit that works entirely offline.

AFX, a decentralized perpetual exchange operating on Arbitrum, reportedly lost $24.15 million on Wednesday, while the Verus Ethereum bridge was attacked hours later. [Update 7:20 am UTC, July 23: Adds ...

Last week’s unprecedented security event in which two OpenAI security hacking models trespassed into the network of fellow AI company Hugging Face was enabled by exploiting one or more zero-day ...

Attackers are exploiting two recently patched vulnerabilities affecting WordPress core software. Image: Deng Xiang/Unsplash Security researchers warn hackers are actively exploiting two patched ...

Security researchers demonstrated that Claude Cowork could escape the sandbox intended to control the access it gets to your Mac. The exploit, dubbed ShareRoot, could allow an attacker to read and ...