A new report fleshes out the resources that went into building DeepSeek’s R1 reasoning model and potential risks to U.S. economic and national security.

While the last-minute extension averts an immediate lapse in support, rival organizations are being stood up to supplant the global vulnerability system. 

Exploited vulnerabilities have turned up in Ivanti products 16 times since 2024. That’s more than any other vendor in the network edge device space.

Dada et al v. NSO Group has been one of many cases where alleged spyware victims have run into jurisdictional hurdles.

The OCC said the February incident resulted in the theft of “highly sensitive information" tied to the financial conditions of federally regulated institutions.

Microsoft said Storm-2460 has exploited the zero-day in the Windows Common Log File System to attack organizations in the U.S., Venezuela, Spain and Saudi Arabia.

Serbian security services exploited one of the actively exploited vulnerabilities to break into the phone of a youth activist in Serbia, according to Amnesty International.

UNC5221 has a knack for exploiting defects in Ivanti products. The group has exploited at least four vulnerabilities in the vendor’s products since 2023, according to Mandiant.

Ken Bagnall, CEO of Silent Push Ken

The NSA and its partners want organizations to protect themselves against the technique, which can be tough to spot.