Check Point says Lazarus used Kyber/ML-KEM to set up its C2, then fetched a Windows zero-day, because subtlety is dead.

HP ThinPro’s TPM-sealed LUKS key falls to a tweak in the unencrypted boot partition, since PCRs miss initramfs and kernel.

Three unauthenticated FreeBSD kernel bugs in CTL HA, including read/write and heap overflow, ended up as a docs warning.