Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Hackers breached the Pentagon's human resources management system in October 2025, stealing data of over 3 million military service members. The Defense Manpower Data Center is now notifying affected individuals, highlighting a major security incident affecting sensitive personnel records.
Two investigations raised concerns about DraftKings' use of AI to target problem gamblers with promotions that encourage more betting and losses. A journalist's experiment showed increased promotions as losses mounted, while DraftKings denied unfair targeting.
Google unveiled Gemini 4 Argon, a new frontier AI model for cyber defenders that excels at autonomously finding and patching vulnerabilities. The model outperforms previous versions and will be released without guardrails to trusted defenders, with enhanced safeguards against misuse.
This article discusses the public release of a proof-of-concept for an Apple CoreGraphics vulnerability that causes crashes via malicious PDFs. Apple patched the flaw on September 28, and CISA added it to the KEV catalog.
This article reports that cryptocurrency exchange Bitget suffered a $387.5 million theft due to a zero-day vulnerability in a third-party security product. The attacker exploited the flaw to gain internal credentials and bypass risk controls, affecting multiple blockchains.
MetaMask announced a security incident affecting its infrastructure, prompting proactive exit of affected Ethereum validators in its non-custodial staking service. The company stated no evidence of wallet compromise, and Lido confirmed the validator exit process.