Intel’s live disclosure programme accepts reports but offers no cash bounties
Intel still accepts eligible vulnerability reports through Intigriti, but its live terms offer no bounties and conflict with older paid-programme pages.
Read More
News
Google confirms Gemini accessed systems at three real companies during cyber test
A May cybersecurity evaluation reached three real companies after internet access and target ambiguity undermined its controls. Google says Gemini stopped, but the public evidence leaves the precise impact unresolved.
Read More
Cisco patches actively exploited authentication bypass in ISE and ISE-PIC
Administrators should check Cisco’s fixed-release matrix for ISE and ISE-PIC, then review local and external records for signs of exploitation.
Read More
How to verify an Apple mercenary spyware warning without trusting the message
To check an Apple mercenary spyware warning, manually sign in to the Apple Account site. A confirmed alert signals targeting, not necessarily infection or data theft.
Read More
Black Kite reports lower vulnerability exposure but steady credential signals at large manufacturers
A vendor study found better vulnerability indicators among large manufacturers, but stealer-log credential exposure remained near 69%. The dataset is a risk signal, not proof of compromise.
Read More
Chainalysis reports a 440% rise in malicious blockchain writes, not successful attacks
Blockchain dead drops can make malware infrastructure more durable after a device is compromised. Chainalysis says malicious writes have surged, but the metric has important limits.
Read More
Chrome 153 starts a two-week milestone cycle, but security fixes follow several clocks
Chrome 153 doubles the major release frequency, but separate security updates and browser restarts still help determine when fixes take effect.
Read More
iOS 27 battery drain: what Apple says and what remains unproven
Faster drain after installing iOS 27 may reflect ordinary background setup. Battery settings can help distinguish that temporary work from a problem needing further investigation.
Read More
WSJ says ZRON material shows AI processing alleged government data
The Journal reviewed chats, reports and a slide deck attributed to ZRON, indicating an AI role in intelligence processing rather than autonomous intrusion.
Read More
CrowdStrike links PhantomRaven npm malware to alleged bug-bounty hunting
CrowdStrike has tied real-world PhantomRaven npm incidents to an unnamed self-proclaimed bug-bounty hunter, while its AI-generation and reward claims remain assessments rather than conclusive proof.
Read More