Engineer receives $30,000 for exposing a vulnerability affecting 7,000 robot vacuum cleaners — tinkerer just wanted to drive his robot vacuum with a PS5 controller

A software engineer gets access to 7,000 DJI Romo robot vacuum cleaners while tinkering with an idea to use a gamepad to control his robotic hoover. Gets $30,000 from DJI for an undisclosed discovery.
…

New ‘Powerful’ iOS Attack Warning Issued To Millions Of iPhone Users

An iOS warning has been issued by researchers after they discovered “a new and powerful” exploit kit targeting Apple iPhones. Here’s what you need to know.

TriZetto confirms 3.4M people’s health and personal data was stolen during breach

Health tech giant TriZetto has confirmed that more than 3.4 million people had personal and health information stolen in a 2024 cyberattack, which the company failed to detect for almost a year.

Hackers Don’t Need Malware Anymore And That Changes Everything

CrowdStrike’s 2026 report finds 82% of attacks are malware-free, breakout times average 29 minutes, and adversaries exploit trust in identities, cloud, and supply chains.

Google Confirms Trio Of Critical Chrome Security Vulnerabilities

Google has confirmed three new critical security vulnerabilities that could allow remote attacks on Chrome users as the latest browser update is released.

Nigerian Prince Scams Evolve To Exploit War In The Middle East

Scammers are exploiting the Israel/U.S.-Iran conflict with offers of huge payments in return for help with stranded veterans and fantastic “investment opportunities”.

FBI investigating hack on its wiretap and surveillance systems: Report

Hackers allegedly broke into the FBI’s networks, according to a report by CNN.

FYI: Impersonators are (still) targeting companies with fake TechCrunch outreach

Fraudsters are impersonating TechCrunch reporters and event leads, and reaching out to companies. Here’s what we’re doing about it, and what you can look out for.

Google says half of all zero-days it tracked in 2025 targeted buggy enterprise tech

Enterprise software was a major focus of zero-day activity during 2025, with security and networking devices, like firewalls, VPNs, and virtualization platforms among the most targeted by malicious hackers.