Microsoft Shares Mitigation For YellowKey Windows Zero-Day
Microsoft races to patch YellowKey zero-day that breaks BitLocker encryption. Attackers can now access protected drives. Apply mitigations immediately.
Read More
Critical NGINX Flaw Enables Remote Code Execution
Critical NGINX vulnerability CVE-2026-8711 lets remote attackers execute malicious code via heap overflow. Unauthenticated exploitation possible. Patch now.
Pwn2Own Berlin 2026 Awards $1.3M For 47 Zero-Days
Pwn2Own Berlin 2026 wraps up: $1.3M paid out for 47 zero-days. DEVCORE takes Master of Pwn with $505K. Three intense days of enterprise exploits.
Discord Rolls Out End-to-End Encryption For All Calls
Discord just rolled out end-to-end encryption for ALL voice and video calls by default. Your conversations just got a whole lot more private.
Drupal Issues Emergency Security Update For May 20
Drupal drops emergency security update May 20. If you’re running a Drupal site, clear your calendar. The wording alone should have admins on high alert.
Americans Lost $388M To Crypto ATM Scams In 2025
Americans lost $388M to crypto ATM scams in 2025. Criminals are weaponizing Bitcoin kiosks to drain victims’ accounts. Know the red flags before you use one.
Microsoft Dismantles Fox Tempest Malware Signing Network
Microsoft just took down Fox Tempest, a criminal network that helped hackers sign malware with fake certificates to bypass security. Trust nothing.
GitHub Actions Workflow Compromised In Supply Chain Attack
GitHub Actions supply chain attack hits actions-cool/issues-helper. Attackers redirected ALL repository tags to malicious commits, stealing CI/CD credentials.
AI Model Builds Working Exploits From Chained Vulnerabilities
Anthropic’s Mythos AI isn’t just finding bugs—it’s chaining them into working exploits. Cloudflare’s tests show we’ve crossed a new threshold in automated vuln research.
AI Transforms OSINT As Social Tracking Tools Fade Away
AI is reshaping OSINT: automation powers modern investigations while legacy social tracking tools lose access. The game has changed for digital investigators.