Technology ❯ Research

Security Research

Vulnerability Assessment Vulnerability Disclosure Threat Analysis Ledger Findings University of Vienna Miggo Security Cybersecurity Techniques University Studies Research Teams

DEVCORE Wins Pwn2Own Berlin After $1.3 Million Awarded for 47 Zero-Days

Vendors now face a 90-day deadline to ship fixes under ZDI’s coordinated disclosure rules.

DEVCORE Wins Pwn2Own Berlin 2026 After 47 Zero‑Days Net $1.298 Million

Researcher Publishes YellowKey BitLocker Bypass and GreenPlasma Windows Exploit PoCs

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Ledger Uncovers MediaTek TEE Flaw Letting Attackers Extract PINs and Wallet Seeds in Under a Minute

Swiss Study Says Server Compromise Can Undermine ‘Zero‑Knowledge’ Promises in Major Password Managers

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations

WhisperPair Flaws Expose Bluetooth Earbuds to Hijacking as Vendors Issue Updates

WhisperPair Flaw Exposes Fast Pair Audio Devices to Hijacking and Tracking

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Microsoft Fixes 'Reprompt' Flaw That Enabled One-Click Data Theft From Copilot Personal

DroidLock Android Malware Locks Phones for Ransom With 24-Hour Threat

Researchers Unveil 'Pixnapping' Android Attack That Steals On‑Screen Data in Seconds

Google Won’t Fix Gemini ‘ASCII Smuggling’ That Hides Commands in Calendar and Email

CERT Confirms Critical RCE in DrayTek Vigor Routers as Updates Land

WireTap Attack Steals Intel SGX Attestation Keys via DDR4 Interposer

Researchers Detail Tile Tracker Flaws That Enable Covert Tracking and Replay Attacks

OnePlus Promises Mid-October Fix for OxygenOS Flaw That Lets Apps Read SMS

Google Fixes Gemini Calendar Bug That Let Malicious Invites Hijack Data

NVIDIA Releases Triton Server Version 25.07 to Patch Critical Python-Backend Flaws