Research

An editable range can change without changing Word text A Word document can store an editable-range marker around text and associate that marker with an individual editor. The covered text can remain exactly the same while the stored editor assignment changes. Text-only review sees no change, while package-level review can report the marker without pretending […]

Germany's Energy Revolution: Wind and Solar Overtake Fossil Fuels for the First Time In 2026, Germany crossed a historic threshold: for the first time, wind and solar photovoltaic (PV) systems generated more electricity than fossil fuels across the year. This isn't just a statistic—it's a fundamental shift in how Europe's largest economy powers itself. According […]

Celebrating 45 Years of Kermit: The Protocol That Refuses to Die, Now Reborn in C In the pantheon of early network protocols, few have enjoyed the staying power of Kermit. Born in the early 1980s at Columbia University, Kermit was a simple, robust file transfer protocol that conquered the world of dial-up modems, serial ports, […]

Ten Breakthroughs in Mathematics and Theoretical Computer Science (2026) The year 2026 has already witnessed a remarkable confluence of human intuition and machine intelligence, reshaping the landscape of pure and applied mathematics. From formal proof verification to quantum complexity, these ten advances are not just incremental—they are paradigm shifts that will echo for decades. Here's […]

Your Secrets Need a VDP, Not Just a Bug Bounty Bug bounty programs are valuable — until they replace disclosure policies. Learn how unreasonable PoC demands or scope exclusions create security blind spots when it comes to leaked secrets. By Gaetan Ferry • 6 Feb 2026 • 8 min read In recent years, more and […]

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of the packages in question is "lib-mtop," an unscoped package with the same name as a […]

Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim's screen. Unit 42 detailed three attack paths against Chrome's Google Password Manager cloud authenticator, which it calls Pass-ta-key, Silver Pass-ta-key and Golden Pass-ta-key; the strongest […]

The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. In a report published over the weekend, Resecurity said it observed the INC Ransomware accelerating its activity since the beginning of August 2026, listing multiple victims on its […]

This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended. Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, […]

AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation has evolved from whether AI belongs in the SOC, to where each type of AI […]