A novel method to acquire total systemic hegemony over Windows has surfaced, and remarkably, it eschews complex kernel vulnerabilities in favor of exploiting the erratic behavior of the integrated antivirus suite. A researcher operating...
A vulnerability has been unearthed within the widespread EspoCRM customer management architecture, a profound frailty that transmutes administrative access into absolute, sovereign dominion over the host server. A mere half-dozen petitions are sufficient to...
Yearn Finance has suffered a serious attack on its yETH product, allowing an attacker to siphon off roughly one thousand ETH — nearly $3 million — by exploiting a flaw in the mechanics of...
Researchers from Team Z3 have withdrawn their planned demonstration of a WhatsApp vulnerability at the Pwn2Own Ireland 2025 hacking competition — an exploit that could have earned them a record $1 million prize. According...
The DeFi platform Abracadabra.money has once again fallen victim to cybercriminals—its third successful breach in just two years. This time, attackers exploited a vulnerability in outdated token pools on the Ethereum mainnet, allowing them...
The decentralized protocol New Gold Protocol (NGP), operating on the BNB Chain, has fallen victim to an attack in which perpetrators siphoned approximately $2 million from the liquidity pool of its native token. The...
Researchers at SySS GmbH have disclosed a critical vulnerability in the Windows Boot Manager dubbed BitPixie. The flaw permits attackers to bypass BitLocker protections and attain full administrative access to a system. At the...
The Yala protocol has suffered a devastating blow to its ecosystem: on September 14, its Bitcoin-backed stablecoin YU collapsed by nearly 80%—plunging from $1 to $0.20—after attackers exploited a vulnerability in the system. The...
Researchers from Doyensec, together with an independent author known as BitsByWill, have publicly demonstrated a working exploitation chain that enables remote execution of code in the Linux kernel via KSMBD — the in-kernel SMB3...
A new entrant from the United Arab Emirates has shaken up the tightly controlled vulnerability market. Advanced Security Solutions, launched in August, has announced its willingness to pay up to $20 million for smartphone...
Fortinet has disclosed a critical vulnerability in its FortiSIEM system, already accompanied by a working exploit circulating publicly. The flaw enables a remote, unauthenticated attacker to execute arbitrary commands on the targeted system, making...
The organizers of the world’s premier hacking competition, Pwn2Own, have announced a reward that has instantly shifted the industry’s spotlight: a staggering $1 million will be awarded for the successful demonstration of a full-fledged...
