Security Boulevard

Fuzzing to Zero-Day: Pwning V8CTF With TurboFan Type Confusion, CVE-2025-2135

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...

This powerful Android tool lets me search anything on my screen fast - here's how

I can tap, scribble, or circle anything on my Android phone to learn more in seconds. It even identifies songs.

TurboQuant Has The Potential To Fundamentally Change How Search (And AI) Works

Learn why Google’s TurboQuant may mark a major shift in search, from indexing speed to AI-driven relevance and content discovery.
Morning Overview on MSN

Study finds thousands of sites exposed API keys and other credentials

Researchers scanning 10 million webpages have found that nearly 10,000 pages contained live API credentials left in plain ...