Security Boulevard

Fuzzing to Zero-Day: Pwning V8CTF With TurboFan Type Confusion, CVE-2025-2135

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...

GitHub developers targeted by fake VS Code alerts spreading malware

Socket uncovers large-scale GitHub spam campaign abusing “Discussions” notifications Fake advisories with bogus CVEs trick ...

Major compromise of the telnyx PyPI library could put millions of users at risk

JFrog reports Telnyx PyPI package was poisoned with malware by TeamPCP Malicious update delivered hidden .wav payload that ...
Cyber Daily

Scammers now imitate hold music and more in evolving tactics says AFP, CBA

Australians are being targeted by evolving and changing scam techniques which are being used to steal crypto and cash, ...
Techzine Europe

Major phishing campaign on GitHub using fake security alerts

A large-scale phishing campaign is currently targeting developers via GitHub. Attackers are exploiting the Discussions feature to spread fake security ...

Morning Update: The NDP has a new leader

Good morning. Avi Lewis has been elected as the new leader of the NDP during a period of turbulence for the federal party.

Leadership should be viewed like any skill, as a practice, not a title or destination

Making leadership a practice encourages you to experiment, mess up, learn and improve over time. It also takes the pressure off being perfect,” writes Lynn Harris ...