Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Threat actors are increasingly abusing legitimate cloud services like Cloudflare Workers, Vercel, and GitHub Pages to host phishing campaigns, leveraging their trusted reputations and free-tier offerings to evade detection. These platforms enable attackers to quickly deploy malicious sites without KYC verification, while shared subdomains and CDN obfuscation make blocking difficult without disrupting legitimate traffic.
47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.
47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.
47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.
In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit
In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is.