New CVE-2025-8671 technique bypasses Rapid Reset defenses; patches rolling out for Tomcat, Netty, F5 as vendors coordinate with CERT/CC. A newly disclosed HTTP/2 vulnerability dubbed “MadeYouReset”...
A new Chrome security feature, Device Bound Session Credentials (DBSC), links session cookies to specific hardware, blocking malware-driven hijacks. Google’s transparency push via Project Zero further...