The Verge

This incredible exploit could have let hackers remotely own iPhones without even touching them

Posts from this topic will be added to your daily email digest and your homepage feed. is a senior editor and founding member of The Verge who covers gadgets, games, and toys. He spent 15 years ...
HotHardware

Google Project Zero Discloses Nasty Windows 0-Day Security Exploit Already In The Wild

Google’s Project Zero team, which is tasked with discovering 0-day vulnerabilities, has uncovered an exploit in the Windows kernel that can lead to sandbox escape or privilege escalation. The bug, ...
Ars Technica

Google’s Project Zero discloses Windows 0-day that’s been under active exploit

Google’s Project Zero says that hackers have been actively exploiting a Windows zero-day that isn’t likely to be patched until almost two weeks from now. In keeping with long-standing policy, Google’s ...
HotHardware

Scary Zero-Click iPhone Exploit With Silent Remote Access Disclosed By Google Project Zero Researcher

In May of this year, Apple patched a silent but deadly exploit that went after iPhones using specially crafted wireless payloads. This exploit is a simple memory corruption attack that allows any ...
9to5Mac

Project Zero researchers: Pegasus zero-click iMessage exploit ‘one of the most technically sophisticated exploits ever’

Apple announced last month that it had filed a lawsuit against NSO Group, the company behind the advanced “Pegasus” spyware that targets iPhone and Android devices. Now, researchers at Google’s ...
techtimes

Hope Finance DeFi Project Loses $2 Million to Exploit by Nigerian Scammer

A recent exploit in an Arbitrum-based decentralized finance (DeFi) project caused users of the platform to lose $2 million, CoinTelegraph reports. On Tuesday, Feb. 21, CertiK, a Web3 security bulletin ...
Bleeping Computer

Hackers exploit ProjectSend flaw to backdoor exposed servers

Threat actors are using public exploits for a critical authentication bypass flaw in ProjectSend to upload webshells and gain remote access to servers. The flaw, tracked as CVE-2024-11680, is a ...
Infosecurity-magazine.com

Malicious Actors Exploit ProjectSend Critical Vulnerability

Public-facing instances of ProjectSend, an open-source file-sharing web application, have been exploited by attackers, according to vulnerability intelligence provider VulnCheck. ProjectSend was ...
Dark Reading

Project Basecamp Releases New Metasploit Exploit Modules

Digital Bond has released three new Project Basecamp Metasploit Modules that exploit vulnerable PLC's used in critical infrastructure SCADA and DCS. These modules make demonstrating the ease of ...
CoinTelegraph

Base project RocketSwap shares emergency plan following $865K exploit

RocketSwap Labs plans on reaching out to the exploiter on-chain, who stole an estimated $865,000 from the protocol on Aug. 14. Base project RocketSwap Labs has outlined its emergency program to bounce ...
Investopedia

Binance Halts Withdrawals Following An Exploit On Crypto Project Ankr

Tobi is a crypto writer at Investopedia. He aims to simplify the complex concepts of blockchain and cryptocurrencies for the masses. Binance, the largest crypto exchange by trading volume, paused ...