'Decades-old' bugs found affecting Windows, Android, macOS and Linux — but the OS makers don't see it as a big deal
THE SO WHAT
Vendors downplaying decades-old cross-OS bugs is a reminder that “by design” doesn’t mean “safe for your threat model.” Security teams should independently assess exploitability in their environment rather than inheriting the vendor’s risk tolerance.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechThis Mac malware is somehow using iCloud calendar invites to try and steal your data
Malware piggybacking on iCloud calendar invites to drop an infostealer shows attackers are moving up the stack into trusted cloud-native channels. Security teams should treat calendar, contacts, and notification surfaces as active attack vectors and tighten detection around 'normal' Apple service traffic.
Deep & Emerging TechBitget suspects North Korean hackers in $351.6m theft from its hot wallets
A $351.6M hot-wallet drain tied to a state actor is a reminder that liquid digital assets are now geopolitical targets, not just cyber ones. If you hold customer funds or high-value keys, assume your threat model includes nation-states and move anything non-operational off hot infrastructure.
Deep & Emerging TechCreotech Quantum Prepares QKD System for Commercialization
QKD moving from EU project status to commercialization means some critical networks will start treating quantum-safe links as a procurement requirement, not a lab experiment. If you handle high-value data with 10–20 year sensitivity, start mapping where fiber upgrades and QKD endpoints could realistically land in your stack.
The Pentagon wants ultra-precise clocks that could help troops fight without GPS
DARPA’s push for ultra-precise, GPS-independent clocks is a bet that navigation and timing are now contested infrastructure. If your operations assume continuous GPS—logistics, finance, critical comms—start mapping what fails when GPS is jammed and where local timing sources could de-risk you.