Google reports more than $17 million in 2025 bug rewards
The March review includes dedicated rewards for AI-related vulnerabilities.
Capvise Media / Stories
Security
Privacy, identity and trust in a connected world.
110 storiesBrowse by month
Trivy compromise turns a security scanner into a credential risk
Microsoft’s March investigation examines poisoned scanner releases and actions.
Android outlines post-quantum signatures from boot to app updates
March plans bring ML-DSA into platform and app-signing workflows.
CTI-REALM tests whether AI agents can produce working detections
Microsoft’s March release evaluates investigation and rule-writing workflows.
Microsoft and partners disrupt Tycoon 2FA phishing service
The service targeted online accounts and was designed to evade additional sign-in protections.
Chrome proposes a different certificate system for the quantum era
A live experiment precedes the proposed wider rollout in 2027.
iPhone and iPad gain approval for NATO restricted information
The certification covers iOS 26 and iPadOS 26 at a specified classification level.
Google expands on-device scam warnings to more phones
The February update adds Samsung support and broader messaging coverage.
Fake Next.js assessments become a route into developer machines
Microsoft links malicious repositories to job-themed social engineering.
Microsoft advises isolating OpenClaw evaluations from workstations
The February guidance treats external skills and persistent credentials as a combined risk.
Google says Play rejected 1.75 million policy-breaking apps in 2025
The February report separates blocked listings from scanning on people’s devices.
Microsoft and Omdia report the cost of a fragmented security desk
The February survey concerns the work between tools as well as the tools themselves.