Four more U.S. states sued TP-Link over allegedly misleading claims about router security and China ties, as 21 attorneys general contacted the FCC.
Day Three of Pwn2Own Ireland 2026 wrapsup with 17 attempts scheduled, roughly $1.33 million on the board. The headliner is the Google Pixel 10, which draws three separate attempts: Xint at 11:15 AM, Ikotas Labs at 2:00 PM, and the Valsamaras/Ken Gannon (Djini.ai)/Valsamara team closing things out a
Day Two of Pwn2Own Ireland 2026 has 24 attempts on the docket, with roughly $780,000 up for grabs, running 9:30 AM to 7:30 PM IST. Samsung's Galaxy S26 will be attempted three separate times — by Valsamaras/Ken Gannon (using Djini.ai)/Valsamara at 1:00 PM, Kyeongmin Kim at 3:15 PM, and PetoWorks at
Welcome to Day One of Pwn2Own Ireland 2026! Today, 21 entries took the Pwn2Own stage to target multiple categories - including multiple Samsung attempts and our first Pixel entry. Follow the action live! We’ll be posting real-time updates and results throughout the competition on our blog and acr
Attackers chained two RouterOS SSH flaws to gain full admin access on Internet-exposed MikroTik routers before patches shipped.
Check Point patched CVE-2026-91843, a critical login stack overflow that can let unauthenticated attackers run code as root on management servers.
INFO FRANCE INTER. La plateforme d’accompagnement de personnes atteintes d’un cancer Jinko.care a été victime d’une fuite de données. Les données de plusieurs centaines de personnes, dont certains documents médicaux, sont désormais dans la nature.
FreeIPA and 389 Directory Server flaws let an anonymous client create an attacker-chosen Kerberos identity in the administrators group.
In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more than 14,500 Dahua IP cameras mostly in Ukraine and Russia.
Australia’s Origin Energy Limited has confirmed suffering a data breach, and a hacker claims to have accessed the records of millions.
Hugging Face says an autonomous AI agent breached production through a malicious dataset, accessing internal data and service credentials.
Check whether your WordPress site is affected by the pre-authentication RCE in WordPress Core. A free checker from Searchlight Cyber.
Lidl warns customers after a data breach at a service provider. Learn what data was exposed, the risks, and how to stay safe.
A researcher says three patched OpenClaw flaws could enable credential theft, privilege escalation, and host code execution via WhatsApp.
Une fuite de 367 000 enregistrements internes chez Nextcloud relance les interrogations autour du service de stockage utilisé notamment par le ministère de l'Éducation nationale français via Apps.education.fr, malgré l'absence d'impact déclaré sur les instances clientes.
The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore – with major implications for EU-US Data Transfers.
Un pirate a compromis l'annuaire interne de l'INSEE. Identité et coordonnées professionnelles de 12 800 agents exposées, données sensibles épargnées. La série noire du service public numérique français compte un épisode de plus.
LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.
Surviving the surge of new Linux LPE : Defense in Depth not dead