Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

The Pwn2Own hacking competition has just wrapped up in Ireland, and it’s been a lucrative year for cybersecurity researchers. The event saw over $1.2 million in rewards paid out to participants who successfully exploited vulnerabilities in various devices, including phones, printers, smart speakers, and cloud databases. At the top of the leaderboard were exploits targeting … Read more

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

Citrix has issued a critical warning to users of its NetScaler appliances, urging them to patch a severe vulnerability that could allow attackers to execute malicious code or disrupt service. The company’s prompt notification comes on the heels of recent zero-day exploits targeting NetScaler, which have been used in attacks against various organizations. The vulnerability, … Read more

Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland

Cybersecurity Researchers Score Big at Pwn2Own Ireland, Collecting $1.26 Million in Rewards for Identifying Zero-Day Flaws A trio of cybersecurity researchers walked away with a whopping $361,000 and 42.5 Master of Pwn points after dominating this year’s Pwn2Own Ireland hacking contest, which concluded on October 7th. The competition, organized by Trend Micro’s Zero Day Initiative … Read more

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

The FBI has taken a significant step in disrupting the operations of cyber threat actors, seizing control of seven domains and disabling their tools used in attacks on critical infrastructure. These malicious tools, known as Flax Typhoon, have been linked to a string of high-profile intrusions that compromised sensitive systems and put lives at risk. … Read more

Security Awareness Training Isn’t Dead, but It Needs a Rethink

Cybersecurity Awareness Training: Time for a Reboot The effectiveness of cybersecurity awareness training has been a hotly debated topic in recent years. While many organizations continue to invest heavily in these programs, empirical evidence suggests that successful attacks are on the rise, leading some to question whether this type of training is truly making a … Read more

Cisco Patches a Dozen Critical Vulnerabilities

Cisco has just rolled out patches for a staggering 35 vulnerabilities across its product line, including over a dozen critical-severity bugs that could put users at risk of unauthorized access, data breaches, and even complete system crashes. This massive patch effort is a stark reminder of the ever-present threat landscape and the importance of staying … Read more

Formula Predicts When AI Chatbots Are at Risk of Turning Bad

Researchers at George Washington University have made a groundbreaking discovery that sheds light on the unpredictable behavior of artificial intelligence (AI) chatbots. The team has developed a mathematical formula that can predict when an AI is likely to turn rogue and produce undesirable outputs. This breakthrough has significant implications for the development and deployment of … Read more

Writing the Next Chapter

Dark Reading’s Editor-in-Chief Announces Departure, Marks End of an Era in Cybersecurity Journalism In a surprise move that has sent shockwaves through the cybersecurity community, Kelly Jackson Higgins, editor-in-chief of Dark Reading, has announced her departure from the esteemed media outlet after two decades at the helm. As Higgins prepares to embark on a new … Read more

Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland

$1.26 Million in Rewards Handed Out at Pwn2Own Ireland Hacking Contest The Pwn2Own Ireland 2026 hacking contest has wrapped up, with security researchers pocketing a substantial $1.26 million in rewards for exploiting 98 zero-day vulnerabilities in various products and devices. The competition, organized by Trend Micro’s Zero Day Initiative (ZDI), aims to identify and fix … Read more

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Threat actors have wasted no time in exploiting a critical vulnerability in Atlassian’s self-hosted Data Center products, just hours after technical details were made public. CVE-2026-21589 is a remote code execution flaw that affects multiple Atlassian products, including Bitbucket, Confluence, Jira Software, and others. The bug allows attackers to access specific files in the web … Read more