Research
Research the newsroom stands behind: contest results, explainers, and technical analysis with citable sources.
Research
Ikotas Labs took Master of Pwn with $361,000 after a $300,000 Pixel 10 exploit chain on day three. Apple’s iPhone 17 was eligible but saw no attempts — and vendors now have 90 days to ship patches before the Zero Day Initiative discloses.
Research
A CVE is an identifier, not a verdict. Here is how IDs are assigned, what the NVD adds on top, and why the same flaw can carry two different severity scores.
Research
An attacker’s claim is the start of an investigation, not its conclusion. This is the verification ladder HackedWire climbs before it calls a breach confirmed — worked through with the ASOS incident as the example.
Research
A vulnerability report starts a clock. Who gets told, how long they get, and when the details go public — the rules that turn private findings into patched systems.
