Bypassing the Code: A Compromise of Trust An unidentified threat actor effectively liquidated the entirety of the cryptocurrency protocol AFX Trade without exploiting a single vulnerability within…

According to a recent report by The Verge, the US robot ban sweeps up Chinese vacuums. The Federal Communications Commission (FCC) recently promulgated prohibitions targeting foreign-manufactured …

On July 17, 2026, researchers published KASS — Knowledge-Augmented Attack Synthesis and Simulation. The paper deals with a fairly specific…

Google has announced that Google Home will formally support the Model Context Protocol (MCP). This means that the home environment of the future will no longer answer to a single voice assistant a…

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

In the previous article, we discussed integer overflow in smart contracts and tried to correlate it with web-based vulnerabilities. In this…

Introduction

Meta Invites Makers to Build Muse Hardware Last week at Connect, Meta unveiled the Muse Charm, a Tamagotchi-like AI device. Now the company clearly harbors bigger ambitions for AI agent hardware. …

Stell dir vor, es ist Freitagabend, 17 Uhr, Hauptverkehrszeit. Auf der wichtigsten Kreuzung der Stadt steht der Verkehr still — doch auf…

TL;DR Cisco has published four advisories that cover 18 CVEs across License On-Prem, APIC and Meraki devices. The most severe Cisco License On-Prem vulnerabilities include a CVSS 10 signature veri…

How a simple garage appliance became a cybercriminal’s favorite backdoor into your private life—discover the crucial setup changes that…

In the previous articles, we discussed integer overflow and access control bugs in smart contracts and tried to correlate it with web-based…

Threat actors no longer need to encrypt classroom computers to disrupt academic instruction. In Idaho, cybercriminals seized control of connected security cameras, electronic door locks, and heati…

At a Glance Organization VIDAA OS and its ACR partner Unruly (exposure); Samsung Tizen and Vizio SmartCast (opt-out findings) Data exposed ACR detection results with device IDs, app names and cont…

Why I created the Smart Contract Security Research Handbook — a practical guide to adversarial auditing, DeFi vulnerability discovery…

Imagine asking an AI assistant to research three laptops, compare their prices and specifications, and recommend the best one for your…

For reasons I won’t go into, for a good part of the last 18 months I was forced to use television sets in places other than my home, and…

It’s not the code. It’s the human.