Researchers published the second stage of a chain that turns a VoLTE video call into full Android kernel access on three Unisoc chipsets. The modem and application processor share memory with no hardware boundary, and the vendor has not answered.
19 million patients, 12,000 clinics, 2.5 terabytes — and a government that will not call it an attack.
Adopting ML-KEM cost the attacker one library. It costs a defence contractor its entire estate.
A CVSS 10.0 flaw in a reporting tool that stores the credentials for every warehouse behind it.
Conti’s leaked source is still producing operations four years on, and this one gets in through patched CVEs.
361 hosts in 47 countries, and 95% of them taken inside two days of the first exploitation.
A private network is still a network. Once anything inside it could reach anything else, the isolation was a route.
A dispute about volume is a dispute about the wrong axis. Ask instead which fields can be reissued.
Three compromised laptops, corporate data taken, and a filing that answers the shareholder question only.
Materiality asks whether an investor would want to know. Whether patients are harmed is a different question.
The resilience of a nation’s communications, held as a private company’s operational decision.
It does not mean SQL injection is rare. It means the disclosure regime records who was affected and not how.
Logs, timelines, and what the filing left out. Read by 41,200 examiners, counsel and reporters.