Technology ❯ Research

Security Research

Vulnerability Disclosure Vulnerability Assessment Threat Analysis Ledger Disclosure Practices Findings Vulnerability Analysis Cybersecurity Techniques Rapid7 Incident Reports

OpenAI Codex Bug That Let Malicious Branches Steal GitHub Tokens Has Been Fixed

Public technical details now explain the exploit, highlighting the need to audit permissions and local token stores.

Ledger Uncovers MediaTek TEE Flaw Letting Attackers Extract PINs and Wallet Seeds in Under a Minute

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations

WhisperPair Flaws Expose Bluetooth Earbuds to Hijacking as Vendors Issue Updates

WhisperPair Flaw Exposes Fast Pair Audio Devices to Hijacking and Tracking

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Microsoft Fixes 'Reprompt' Flaw That Enabled One-Click Data Theft From Copilot Personal

DroidLock Android Malware Locks Phones for Ransom With 24-Hour Threat

Researchers Unveil 'Pixnapping' Android Attack That Steals On‑Screen Data in Seconds

Google Won’t Fix Gemini ‘ASCII Smuggling’ That Hides Commands in Calendar and Email

CERT Confirms Critical RCE in DrayTek Vigor Routers as Updates Land

WireTap Attack Steals Intel SGX Attestation Keys via DDR4 Interposer

Researchers Detail Tile Tracker Flaws That Enable Covert Tracking and Replay Attacks

OnePlus Promises Mid-October Fix for OxygenOS Flaw That Lets Apps Read SMS

Google Fixes Gemini Calendar Bug That Let Malicious Invites Hijack Data

NVIDIA Releases Triton Server Version 25.07 to Patch Critical Python-Backend Flaws

Lovense Deploys Patch for Account Takeover While Email Leak Fix Faces 14-Month Rollout

New Browser Extension Threat Can Impersonate Password Managers and Crypto Wallets

New Chrome Syncjacking Attack Threatens Billions of Users