Background In March 2025, cybersecurity researchers disclosed a highly sophisticated targeted attack campaign named “Operation ForumTroll.” Orchestrated by an unidentified state-sponsored APT group, ...

Vulnerabilities in PDF platforms from Foxit and Apryse could have been exploited for account takeover, data exfiltration, and ...

Two popular AES libraries, aes-js and pyaes, “helpfully” provide a default IV in their AES-CTR API, leading to a large number of key/IV reuse bugs. These bugs potentially affect thousands of ...

We don’t have clear answers, only clues – but those can still offer guidance on what can be done in the future ...

As the renegotiation of the U.S.-Mexico-Canada Agreement looms, game theory suggests Ottawa may have to accept higher American tariffs and make previously unthinkable concessions.