> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
CTOS confirmed a limited subset of consumer data was accessed; password-reset notices are now reaching account holders. Here is what it means.
Tabung Haji suspended all services after a cyberattack, restored them within days and says savings are safe. What depositors should know and check.
CISA and partners warn China-linked actors combine automated scanning, botnets and hands-on exploitation to steal sensitive data from critical infrastructure.
Google is rolling out Gemini 4 Argon to trusted cyber defenders via its Fairwind Program with a planned guardrail-free variant for full defensive capabilities.
Microsoft ties NeedyMantis to China-linked Storm-3069 — DLL sideloading, custom archives and WebSockets C2 built to outlast the initial breach.
Park24 confirmed 6.6 million Times Car accounts were taken, licence images included. This is a data-model leak, not a credential leak.
Two NetScaler zero-days are now in CISA's exploited catalog with a 30 September deadline, and installing the fix can erase the evidence you will need.
Cisco Talos found CLOSEDQUORUM, a Windows implant that lets DeepSeek, Qwen, Mistral and Gemini vote on what it does next, with no human C2 panel at all.
Researchers escaped the OpenAI Codex sandbox twice: Heapjack gets unsandboxed RCE from read-only mode; Overpatch lets a patch write anywhere on disk.
Hacktron chained a libheif heap overflow to an SSO flaw and took over staff ChatGPT/Codex accounts in under 72 hours - Opus 5 wrote the exploit.
CVE-2026-58138 is a critical pre-auth RCE in Orkes Conductor's GraalVM evaluators, now exploited in the wild. This is how the chain works and what to patch.
A stranger re-registered netdna-ssl.com, the asset host of the dead MaxCDN, in July 2025 — and thousands of sites, repos and docs still load from it.