An unexpected feature buried within free Nintendo Switch 2 game Super Animal Royale caught the Internet's attention this week. Specifically, some web pages viewable within the game and Nintendo Switch ...

The easiest take after a $290 million exploit and a roughly $13 billion slide in DeFi total value locked is that decentralized finance is broken again. It is also probably the laziest. The KelpDAO ...

Google overhauls its Android and Chrome vulnerability rewards programs, offering bounties of up to $1.5 million for the most difficult exploits while scaling back payouts for flaws that artificial ...

After the arrest of a man in Maharashtra's Amravati for sexually exploiting minor girls, a similar case has now come to light from Kolhapur, where a pharmacy student has been accused of sexually ...

Lending protocol Purrlend confirmed Saturday that it detected irregular activity across its deployments on both the MegaETH and HyperEVM networks and has paused the protocol while it investigates. For ...

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe ...

Experts say until the distros release patches, CSOs have to beware of unauthorized privilege escalation; Kubernetes container escape is also a risk. CSOs must ensure their Linux-based systems block ...

Exploit code confirmed: Researchers have proof-of-concept code for CVE-2026-23918, enabling denial-of-service or remote code execution on Apache HTTP Server. Widespread server exposure: Apache serves ...

North Korean government-backed hackers are becoming more sophisticated, more precise and now account for more than 76% or nearly $600 million in crypto losses this year alone. The $285 Drift Protocol ...

An exploit has been published for a local privilege escalation vulnerability dubbed “Copy Fail” that impacts Linux kernels released since 2017, allowing an unprivileged local attacker to gain root ...

Two leaked iPhone exploit kits are now circulating beyond the hands of the surveillance vendors that originally built them, and every iPhone running software older than iOS 26.2 is a potential target.

On March 30, BeyondTrust proved that a crafted GitHub branch name could steal Codex’s OAuth token in cleartext. OpenAI classified it Critical P1. Two days later, Anthropic’s Claude Code source code ...