Israel’s Iron Beam: First Operational High-Power Anti-Drone Laser System
TL;DR Israel's Ministry of Defense and defense firm Rafael reported delivery of Iron Beam, described as a high-power laser designed…
L1TF Reloaded: Researchers demonstrate VM-to-VM data leaks in public clouds
TL;DR A research team published an end-to-end exploit called L1TF Reloaded that chains L1 Terminal Fault (L1TF) with Half‑Spectre to…
Two cybersecurity professionals admit running ALPHV-affiliated ransomware
TL;DR Two cybersecurity workers pleaded guilty to conspiring to extort victims using ALPHV/BlackCat ransomware after planting malware at five U.S.…
Research: Honey Detects Testers and Conceals Affiliate Network Violations
TL;DR A VPT blog post says new research found the Honey browser extension not only violated affiliate network "stand-down" rules…
Audit Shows ~50 Vulnerabilities Could Let Root Escape FreeBSD Jails
TL;DR A pair of researchers presented a 59-minute analysis of FreeBSD jails that identified roughly 50 kernel-level issues accessible from…
Former U.S. cybersecurity experts plead guilty in BlackCat ransomware case
TL;DR Two former incident-response specialists admitted guilt to conspiracy to obstruct commerce by extortion after using ALPHV/BlackCat ransomware against multiple…
Honey’s Dieselgate: Detecting When Testers Are Identified and Tricked
TL;DR The referenced blog post titled "Honey's Dieselgate: Detecting and Tricking Testers" on vptdigital.com could not be retrieved; the server…
Escaping Containment — Security Analysis Reveals Jail Escape Paths in FreeBSD
TL;DR Researchers Ilja and Michael Smith audited FreeBSD's jail attack surface and identified roughly 50 vulnerabilities across multiple kernel subsystems.…
Sword-wielding contractor runs private squatter-removal service in Oakland
TL;DR James Jacobs operates ASAP Squatter Removal, a privately run service that surveils properties and expels people living there without…
Holiday disruption: ‘MongoBleed’ zlib bug (CVE-2025-14847) in MongoDB now exploited
TL;DR CISA says a high-severity MongoDB Server flaw, CVE-2025-14847, is being actively exploited after proof-of-concept code surfaced over Christmas. The…