SparTech Software

Google and partners dismantled the XCPE botnet after finding a firmware backdoor in 1.3 million Android TV boxes and other connected devices.

Google Cloud adds a $250,000 bounty for research proving full administrative takeover without credentials, prior access or user interaction.

Polymarket will return $3.9 million after malicious JavaScript served through DebugBear drained traders’ wallets and disrupted international trading.

The FBI says North Korea’s TraderTraitor stole more than $6 billion from Binance and identifies 628 wallets linked to the laundering effort.

A fake Anthropic preview campaign bypassed Proofpoint and Microsoft email defenses using trusted services, shortened links and CAPTCHA-gated credential theft.

A critical Linux kernel TCP race flaw rated CVSS 9.8 can enable remote root access on multipath TCP servers, prompting urgent patching.

US election systems retain exploitable voting-machine and ballot-privacy weaknesses, while AI deepfakes threaten public trust despite paper-ballot safeguards.

Anthropic says an unreleased Claude model built exploit chains across Chrome, Safari, Android, Windows and Linux, prompting vendor fixes.

Google’s Gemini 4 Carbon leads vulnerability-finding, exploit-validation and patching tests, but access begins with selected cyber defenders.

A leak tied to the hacktivist group Department of Peace exposes data on more than 41,000 DHS workers as the agency investigates a potential breach.