Profile

Balancer hack analysis and guidance for the DeFi ecosystem - TL;DR The root cause of the hack was a rounding direction issue that had been pr...

The Trail of Bits Blog

Balancer hack analysis and guidance for the DeFi ecosystem

A retrospective on the $100M Balancer hack that occurred in November 2025, including long-term, strategic guidance on how to avoid similar bugs.

Malicious NuGet packages drop disruptive 'time bombs' - Several malicious packages on NuGet have sabotage payloads scheduled to activate in 2027 ...

BleepingComputer

Malicious NuGet packages drop disruptive 'time bombs'

Several malicious packages on NuGet have sabotage payloads scheduled to activate in 2027 and 2028, targeting database implementations and Siemens S...

#security

Microsoft testing faster Quick Machine Recovery in Windows 11 - Microsoft is testing a faster version of Quick Machine Recovery (QMR) and updated Smart A...

BleepingComputer

Microsoft testing faster Quick Machine Recovery in Windows 11

Microsoft is testing a faster version of Quick Machine Recovery (QMR) and updated Smart App Control (SAC), allowing users to toggle it without requ...

#microsoft

QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own - QNAP has fixed seven zero-day vulnerabilities that security researchers exploited to hack...

BleepingComputer

QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own

QNAP has fixed seven zero-day vulnerabilities that security researchers exploited to hack QNAP network-attached storage (NAS) devices during the Pw...

#security

New LandFall spyware exploited Samsung zero-day via WhatsApp messages - A threat actor exploited a zero-day vulnerability in Samsung's Android image processing l...

BleepingComputer

New LandFall spyware exploited Samsung zero-day via WhatsApp messages

A threat actor exploited a zero-day vulnerability in Samsung's Android image processing library to deploy a previously unknown spyware called ...

#security #mobile

Cisco: Actively exploited firewall flaws now abused for DoS attacks - Cisco warned this week that two vulnerabilities, which have been exploited in zero-day at...

BleepingComputer

Cisco: Actively exploited firewall flaws now abused for DoS attacks

Cisco warned this week that two vulnerabilities, which have been exploited in zero-day attacks, are now being abused to force ASA and FTD firewalls...

#security

ID verification laws are fueling the next wave of breaches - ID laws are forcing companies to store massive amounts of sensitive data, turning complia...

BleepingComputer

ID verification laws are fueling the next wave of breaches

ID laws are forcing companies to store massive amounts of sensitive data, turning compliance into a security risk. Acronis explains how integrated ...

#security

Leak confirms Google Gemini 3 Pro and Nano Banana 2 could launch soon - Google is planning to ship two new models. One is Gemini 3, which is optimised for coding...

BleepingComputer

Leak confirms Google Gemini 3 Pro and Nano Banana 2 could launch soon

Google is planning to ship two new models. One is Gemini 3, which is optimised for coding and regular use, and the second is Nano Banano 2 for gene...

#artificialintelligence #technology

U.S. Congressional Budget Office hit by suspected foreign cyberattack - The U.S. Congressional Budget Office (CBO) confirms it suffered a cybersecurity incident ...

BleepingComputer

U.S. Congressional Budget Office hit by suspected foreign cyberattack

The U.S. Congressional Budget Office (CBO) confirms it suffered a cybersecurity incident after a suspected foreign hacker breached its network, pot...

#government #security

AI-Slop ransomware test sneaks on to VS Code marketplace - A malicious extension with basic ransomware capabilities seemingly created with the help ...

BleepingComputer

AI-Slop ransomware test sneaks on to VS Code marketplace

A malicious extension with basic ransomware capabilities seemingly created with the help of AI, has been published on Microsoft's official VS ...

#artificialintelligence #security