Defcon's new badge is a security key you can see inside

Ars Technica security feed covering active exploitation of critical Microsoft Exchange and Windows vulnerabilities, Secure Boot bypasses, Linux guest VM escapes, state-sponsored router targeting, ransomware, ClickFix social engineering, AI-agent and LLM-enabled attacks, supply-chain risks, and emerging cryptographic weaknesses. Several reports describe zero-days or vulnerabilities under active exploitation with potential for persistent access, privilege escalation, sandbox escape, or large-scale botnet creation.