Imaginary Forces has unveiled a reimagined Marvel Studios logo alongside the premiere of Thunderbolts*. Produced under the creative direction of Tosh Kodama, the logo pays homage to Marvel Studios’ iconic comic book flip-intro imbued with the darker, edgier tone of Thunderbolts*. “The latest Marvel Studios logo builds on the rich creative history between Imaginary Forces and Marvel Studios,” said Kodama. “Our goal was to retain the iconic essence of the comic book flip while pushing it into new visual territory within the Thunderbolts* canon.” The sequence features thousands of comic book images from the pages of Thunderbolts*, projected onto a drifting 3D rendering of the Marvel wordmark. The camera pans in, around, and through the passageways of each letter. The logo is never fully revealed and eventually dissolves into blackness, foreshadowing of The Void, Sentry’s alter ego. “We wanted to create something truly epic and large-scale,” added Kodama. “The sequence tells a story, albeit a subtle one, evoking the gritty, morally complex world of the Thunderbolts*. Aesthetically, it’s also a notable departure from the warm and vibrant hues of the previous logo animations, with the black slowly creeping in and overtaking everything, creating a sense of mystery and unease.” To express The Void sonically, Imaginary Forces overlaid a haunting sound effect over Michael Giacchino’s iconic ‘Marvel Studios Fanfare,’ reflecting the character’s hollow, engulfing nature. “Fans get jazzed the minute they hear the fanfare and they know it well,” said Kodama. “So, sonically augmenting it was a simple but highly effective choice to subvert expectations and add intrigue.” As a long-time branding and storytelling partner, Imaginary Forces created its first Marvel logo animation for the 2002 release of Spider-Man. 10 years later, they partnered with Marvel Studios for a stereoscopic 3D reimagining that premiered before Thor: The Dark World (2012). “Back in 2002, no one could have predicted Marvel would grow into the expansive Marvel Cinematic Universe we know today,” concluded Kodama. “We’ve been thrilled to collaborate with Marvel on the evolving logo animations over the years. Being part of the MCU’s next chapter is always an exciting and rewarding experience.” Source: Imaginary Forces Journalist, antique shop owner, aspiring gemologist—L'Wren brings a diverse perspective to animation, where every frame reflects her varied passions.

Photogrammetric reconstruction of the submarine USS F-1 on the seafloor west of San Diego, California. CREDIT: Image by Zoe Daheron, ©Woods Hole Oceanographic Institution. Get the Popular Science daily newsletter💡 Breakthroughs, discoveries, and DIY tips sent every weekday. In 1917, two US submarines collided off the coast of San Diego and submarine USS F-1 sank to the bottom of the Pacific Ocean, along with 19 crew members aboard. The horrible accident, whose wreckage was discovered in 1975, represents the US Naval Submarine Force’s first wartime submarine loss. Now, researchers from Woods Hole Oceanographic Institution have captured new footage of the 1,300 feet-deep underwater archaeological site. “They were technical dives requiring specialized expertise and equipment,” Anna Michel, a co-lead of the expedition and chief scientist at the National Deep Submergence Facility, said in a statement. “We were careful and methodical in surveying these historical sites so that we could share these stunning images, while also maintaining the reverence these sites deserve.” The high-definition imagining and mapping of the USS F-1 took place during a deep-sea training and engineering mission in February and March. The missions aimed to train future submersible pilots and test the human-occupied vehicle Alvin and autonomous underwater vehicle Sentry.  The team captured never-seen-before images and videos and conducted a sonar survey, which essentially consists of mapping a region by shooting sound waves at it and registering the echo. Imaging specialists combined the 2D images into a 3D model of the wreck—a technique called photogrammetry. Using photogrammetry reveals measurements not just of the submarine but of the marine life that over the past century has claimed the vessel as its own.  Photogrammetric reconstruction of the submarine USS F-1 showing the sub’s stern and propeller. CREDIT: Image by Zoe Daheron, ©Woods Hole Oceanographic Institution. “As a Navy veteran, making this dive—together with another Navy veteran and a Navy historian—was a solemn privilege,” said Office of Naval Research Program Officer Rob Sparrock, who was in Alvin when it went down to the wreck. “There was time to contemplate the risks that all mariners, past and present, face. It also reminded me of the importance of these training dives, which leverage the knowledge from past dives, lessons learned and sound engineering.” The researchers also investigated a Navy torpedo bomber training aircraft that went down in the region in 1950. After the dives, they held a remembrance ceremony aboard the research vessel Atlantis during which a bell rang once for each of the crew members lost in 1917.  “History and archaeology are all about people and we felt it was important to read their names aloud,” said Naval History and Heritage Command Underwater Archaeologist Brad Krueger, who also dove in Alvin. “The Navy has a solemn responsibility to ensure the legacies of its lost Sailors are remembered.”

Cyber threats don't show up one at a time anymore. They're layered, planned, and often stay hidden until it's too late. For cybersecurity teams, the key isn't just reacting to alerts—it's spotting early signs of trouble before they become real threats. This update is designed to deliver clear, accurate insights based on real patterns and changes we can verify. With today's complex systems, we need focused analysis—not noise. What you'll see here isn't just a list of incidents, but a clear look at where control is being gained, lost, or quietly tested. ⚡ Threat of the Week Lumma Stealer, DanaBot Operations Disrupted — A coalition of private sector companies and law enforcement agencies have taken down the infrastructure associated with Lumma Stealer and DanaBot. Charges have also been unsealed against 16 individuals for their alleged involvement in the development and deployment of DanaBot. The malware is equipped to siphon data from victim computers, hijack banking sessions, and steal device information. More uniquely, though, DanaBot has also been used for hacking campaigns that appear to be linked to Russian state-sponsored interests. All of that makes DanaBot a particularly clear example of how commodity malware has been repurposed by Russian state hackers for their own goals. In tandem, about 2,300 domains that acted as the command-and-control (C2) backbone for the Lumma information stealer have been seized, alongside taking down 300 servers and neutralizing 650 domains that were used to launch ransomware attacks. The actions against international cybercrime in the past few days constituted the latest phase of Operation Endgame. Get the Guide ➝ 🔔 Top News Threat Actors Use TikTok Videos to Distribute Stealers — While ClickFix has become a popular social engineering tactic to deliver malware, threat actors have been observed using artificial intelligence (AI)-generated videos uploaded to TikTok to deceive users into running malicious commands on their systems and deploy malware like Vidar and StealC under the guise of activating pirated version of Windows, Microsoft Office, CapCut, and Spotify. "This campaign highlights how attackers are ready to weaponize whichever social media platforms are currently popular to distribute malware," Trend Micro said. APT28 Hackers Target Western Logistics and Tech Firms — Several cybersecurity and intelligence agencies from Australia, Europe, and the United States issued a joint alert warning of a state-sponsored campaign orchestrated by the Russian state-sponsored threat actor APT28 targeting Western logistics entities and technology companies since 2022. "This cyber espionage-oriented campaign targeting logistics entities and technology companies uses a mix of previously disclosed TTPs and is likely connected to these actors' wide scale targeting of IP cameras in Ukraine and bordering NATO nations," the agencies said. The attacks are designed to steal sensitive information and maintain long-term persistence on compromised hosts. Chinese Threat Actors Exploit Ivanti EPMM Flaws — The China-nexus cyber espionage group tracked as UNC5221 has been attributed to the exploitation of a pair of security flaws affecting Ivanti Endpoint Manager Mobile (EPMM) software (CVE-2025-4427 and CVE-2025-4428) to target a wide range of sectors across Europe, North America, and the Asia-Pacific region. The intrusions leverage the vulnerabilities to obtain a reverse shell and drop malicious payloads like KrustyLoader, which is known to deliver the Sliver command-and-control (C2) framework. "UNC5221 demonstrates a deep understanding of EPMM's internal architecture, repurposing legitimate system components for covert data exfiltration," EclecticIQ said. "Given EPMM's role in managing and pushing configurations to enterprise mobile devices, a successful exploitation could allow threat actors to remotely access, manipulate, or compromise thousands of managed devices across an organization." Over 100 Google Chrome Extensions Mimic Popular Tools — An unknown threat actor has been attributed to creating several malicious Chrome Browser extensions since February 2024 that masquerade as seemingly benign utilities such as DeepSeek, Manus, DeBank, FortiVPN, and Site Stats but incorporate covert functionality to exfiltrate data, receive commands, and execute arbitrary code. Links to these browser add-ons are hosted on specially crafted sites to which users are likely redirected to via phishing and social media posts. While the extensions appear to offer the advertised features, they also stealthily facilitate credential and cookie theft, session hijacking, ad injection, malicious redirects, traffic manipulation, and phishing via DOM manipulation. Several of these extensions have been taken down by Google. CISA Warns of SaaS Providers of Attacks Targeting Cloud Environments — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that SaaS companies are under threat from bad actors who are on the prowl for cloud applications with default configurations and elevated permissions. While the agency did not attribute the activity to a specific group, the advisory said enterprise backup platform Commvault is monitoring cyber threat activity targeting applications hosted in their Microsoft Azure cloud environment. "Threat actors may have accessed client secrets for Commvault's (Metallic) Microsoft 365 (M365) backup software-as-a-service (SaaS) solution, hosted in Azure," CISA said. "This provided the threat actors with unauthorized access to Commvault's customers' M365 environments that have application secrets stored by Commvault." GitLab AI Coding Assistant Flaws Could Be Used to Inject Malicious Code — Cybersecurity researchers have discovered an indirect prompt injection flaw in GitLab's artificial intelligence (AI) assistant Duo that could have allowed attackers to steal source code and inject untrusted HTML into its responses, which could then be used to direct victims to malicious websites. The attack could also leak confidential issue data, such as zero-day vulnerability details. All that's required is for the attacker to instruct the chatbot to interact with a merge request (or commit, issue, or source code) by taking advantage of the fact that GitLab Duo has extensive access to the platform. "By embedding hidden instructions in seemingly harmless project content, we were able to manipulate Duo's behavior, exfiltrate private source code, and demonstrate how AI responses can be leveraged for unintended and harmful outcomes," Legit Security said. One variation of the attack involved hiding a malicious instruction in an otherwise legitimate piece of source code, while another exploited Duo's parsing of markdown responses in real-time asynchronously. An attacker could leverage this behavior – that Duo begins rendering the output line by line rather than waiting until the entire response is generated and sending it all at once – to introduce malicious HTML code that can access sensitive data and exfiltrate the information to a remote server. The issues have been patched by GitLab following responsible disclosure. ‎️‍🔥 Trending CVEs Software vulnerabilities remain one of the simplest—and most effective—entry points for attackers. Each week uncovers new flaws, and even small delays in patching can escalate into serious security incidents. Staying ahead means acting fast. Below is this week's list of high-risk vulnerabilities that demand attention. Review them carefully, apply updates without delay, and close the doors before they're forced open. This week's list includes — CVE-2025-34025, CVE-2025-34026, CVE-2025-34027 (Versa Concerto), CVE-2025-30911 (RomethemeKit For Elementor WordPress plugin), CVE-2024-57273, CVE-2024-54780, and CVE-2024-54779 (pfSense), CVE-2025-41229 (VMware Cloud Foundation), CVE-2025-4322 (Motors WordPress theme), CVE-2025-47934 (OpenPGP.js), CVE-2025-30193 (PowerDNS), CVE-2025-0993 (GitLab), CVE-2025-36535 (AutomationDirect MB-Gateway), CVE-2025-47949 (Samlify), CVE-2025-40775 (BIND DNS), CVE-2025-20152 (Cisco Identity Services Engine), CVE-2025-4123 (Grafana), CVE-2025-5063 (Google Chrome), CVE-2025-37899 (Linux Kernel), CVE-2025-26817 (Netwrix Password Secure), CVE-2025-47947 (ModSecurity), CVE-2025-3078, CVE-2025-3079 (Canon Printers), and CVE-2025-4978 (NETGEAR). 📰 Around the Cyber World Sandworm Drops New Wiper in Ukraine — The Russia-aligned Sandworm group intensified destructive operations against Ukrainian energy companies, deploying a new wiper named ZEROLOT. "The infamous Sandworm group concentrated heavily on compromising Ukrainian energy infrastructure. In recent cases, it deployed the ZEROLOT wiper in Ukraine. For this, the attackers abused Active Directory Group Policy in the affected organizations," ESET Director of Threat Research, Jean-Ian Boutin, said. Another Russian hacking group, Gamaredon, remained the most prolific actor targeting the East European nation, enhancing malware obfuscation and introducing PteroBox, a file stealer leveraging Dropbox. Signal Says No to Recall — Signal has released a new version of its messaging app for Windows that, by default, blocks the ability of Windows to use Recall to periodically take screenshots of the app. "Although Microsoft made several adjustments over the past twelve months in response to critical feedback, the revamped version of Recall still places any content that's displayed within privacy-preserving apps like Signal at risk," Signal said. "As a result, we are enabling an extra layer of protection by default on Windows 11 in order to help maintain the security of Signal Desktop on that platform even though it introduces some usability trade-offs. Microsoft has simply given us no other option." Microsoft began officially rolling out Recall last month. Russia Introduces New Law to Track Foreigners Using Their Smartphones — The Russian government has introduced a new law that makes installing a tracking app mandatory for all foreign nationals in the Moscow region. This includes gathering their real-time locations, fingerprint, face photograph, and residential information. "The adopted mechanism will allow, using modern technologies, to strengthen control in the field of migration and will also contribute to reducing the number of violations and crimes in this area," Vyacheslav Volodin, chairman of the State Duma, said. "If migrants change their actual place of residence, they will be required to inform the Ministry of Internal Affairs (MVD) within three working days." A proposed four-year trial period begins on September 1, 2025, and runs until September 1, 2029. Dutch Government Passes Law to Criminalize Cyber Espionage — The Dutch government has approved a law criminalizing a wide range of espionage activities, including digital espionage, in an effort to protect national security, critical infrastructure, and high-quality technologies. Under the amended law, leaking sensitive information that is not classified as a state secret or engaging in activities on behalf of a foreign government that harm Dutch interests can also result in criminal charges. "Foreign governments are also interested in non-state-secret, sensitive information about a particular economic sector or about political decision-making," the government said. "Such information can be used to influence political processes, weaken the Dutch economy or play allies against each other. Espionage can also involve actions other than sharing information." Microsoft Announces Availability of Quantum-Resistant Algorithms to SymCrypt — Microsoft has revealed that it's making post-quantum cryptography (PQC) capabilities, including ML-KEM and ML-DSA, available for Windows Insiders, Canary Channel Build 27852 and higher, and Linux, SymCrypt-OpenSSL version 1.9.0. "This advancement will enable customers to commence their exploration and experimentation of PQC within their operational environments," Microsoft said. "By obtaining early access to PQC capabilities, organizations can proactively assess the compatibility, performance, and integration of these novel algorithms alongside their existing security infrastructure." New Malware DOUBLELOADER Uses ALCATRAZ for Obfuscation — The open-source obfuscator ALCATRAZ has been seen within a new generic loader dubbed DOUBLELOADER, which has been deployed alongside Rhadamanthys Stealer infections starting December 2024. The malware collects host information, requests an updated version of itself, and starts beaconing to a hardcoded IP address (185.147.125[.]81) stored within the binary. "Obfuscators such as ALCATRAZ end up increasing the complexity when triaging malware," Elastic Security Labs said. "Its main goal is to hinder binary analysis tools and increase the time of the reverse engineering process through different techniques; such as hiding the control flow or making decompilation hard to follow." New Formjacking Campaign Targets WooCommerce Sites — Cybersecurity researchers have detected a sophisticated formjacking campaign targeting WooCommerce sites. The malware, per Wordfence, injects a fake but professional-looking payment form into legitimate checkout processes and exfiltrates sensitive customer data to an external server. Further analysis has revealed that the infection likely originated from a compromised WordPress admin account, which was used to inject malicious JavaScript via a Simple Custom CSS and JS plugin (or something similar) that allows administrators to add custom code. "Unlike traditional card skimmers that simply overlay existing forms, this variant carefully integrates with the WooCommerce site's design and payment workflow, making it particularly difficult for site owners and users to detect," the WordPress security company said. "The malware author repurposed the browser's localStorage mechanism – typically used by websites to remember user preferences – to silently store stolen data and maintain access even after page reloads or when navigating away from the checkout page." E.U. Sanctions Stark Industries — The European Union (E.U.) has announced sanctions against 21 individuals and six entities in Russia over its "destabilising actions" in the region. One of the sanctioned entities is Stark Industries, a bulletproof hosting provider that has been accused of acting as "enablers of various Russian state-sponsored and affiliated actors to conduct destabilising activities including, information manipulation interference and cyber attacks against the Union and third countries." The sanctions also target its CEO Iurie Neculiti and owner Ivan Neculiti. Stark Industries was previously spotlighted by independent cybersecurity journalist Brian Krebs, detailing its use in DDoS attacks in Ukraine and across Europe. In August 2024, Team Cymru said it discovered 25 Stark-assigned IP addresses used to host domains associated with FIN7 activities and that it had been working with Stark Industries for several months to identify and reduce abuse of their systems. The sanctions have also targeted Kremlin-backed manufacturers of drones and radio communication equipment used by the Russian military, as well as those involved in GPS signal jamming in Baltic states and disrupting civil aviation. The Mask APT Unmasked as Tied to the Spanish Government — The mysterious threat actor known as The Mask (aka Careto) has been identified as run by the Spanish government, according to a report published by TechCrunch, citing people who worked at Kaspersky at the time and had knowledge of the investigation. The Russian cybersecurity company first exposed the hacking group in 2014, linking it to highly sophisticated attacks since at least 2007 targeting high-profile organizations, such as governments, diplomatic entities, and research institutions. A majority of the group's attacks have targeted Cuba, followed by hundreds of victims in Brazil, Morocco, Spain, and Gibraltar. While Kaspersky has not publicly attributed it to a specific country, the latest revelation makes The Mask one of the few Western government hacking groups that has ever been discussed in public. This includes the Equation Group, the Lamberts (the U.S.), and Animal Farm (France). Social Engineering Scams Target Coinbase Users — Earlier this month, cryptocurrency exchange Coinbase revealed that it was the victim of a malicious attack perpetrated by unknown threat actors to breach its systems by bribing customer support agents in India and siphon funds from nearly 70,000 customers. According to Blockchain security firm SlowMist, Coinbase users have been the target of social engineering scams since the start of the year, bombarding with SMS messages claiming to be fake withdrawal requests and seeking their confirmation as part of a "sustained and organized scam campaign." The goal is to induce a false sense of urgency and trick them into calling a number, eventually convincing them to transfer the funds to a secure wallet with a seed phrase pre-generated by the attackers and ultimately drain the assets. It's assessed that the activities are primarily carried out by two groups: low-level skid attackers from the Com community and organized cybercrime groups based in India. "Using spoofed PBX phone systems, scammers impersonate Coinbase support and claim there's been 'unauthorized access' or 'suspicious withdrawals' on the user's account," SlowMist said. "They create a sense of urgency, then follow up with phishing emails or texts containing fake ticket numbers or 'recovery links.'" Delta Can Sue CrowdStrike Over July 2024 Mega Outage — Delta Air Lines, which had its systems crippled and almost 7,000 flights canceled in the wake of a massive outage caused by a faulty update issued by CrowdStrike in mid-July 2024, has been given the green light to pursue to its lawsuit against the cybersecurity company. A judge in the U.S. state of Georgia stating Delta can try to prove that CrowdStrike was grossly negligent by pushing a defective update to its Falcon software to customers. The update crashed 8.5 million Windows devices across the world. Crowdstrike previously claimed that the airline had rejected technical support offers both from itself and Microsoft. In a statement shared with Reuters, lawyers representing CrowdStrike said they were "confident the judge will find Delta's case has no merit, or will limit damages to the 'single-digit millions of dollars' under Georgia law." The development comes months after MGM Resorts International agreed to pay $45 million to settle multiple class-action lawsuits related to a data breach in 2019 and a ransomware attack the company experienced in 2023. Storm-1516 Uses AI-Generated Media to Spread Disinformation — The Russian influence operation known as Storm-1516 (aka CopyCop) sought to spread narratives that undermined the European support for Ukraine by amplifying fabricated stories on X about European leaders using drugs while traveling by train to Kyiv for peace talks. One of the posts was subsequently shared by Russian state media and Maria Zakharova, a senior official in Russia's foreign ministry, as part of what has been described as a coordinated disinformation campaign by EclecticIQ. The activity is also notable for the use of synthetic content depicting French President Emmanuel Macron, U.K. Labour Party leader Keir Starmer, and German chancellor Friedrich Merz of drug possession during their return from Ukraine. "By attacking the reputation of these leaders, the campaign likely aimed to turn their own voters against them, using influence operations (IO) to reduce public support for Ukraine by discrediting the politicians who back it," the Dutch threat intelligence firm said. Turkish Users Targeted by DBatLoader — AhnLab has disclosed details of a malware campaign that's distributing a malware loader called DBatLoader (aka ModiLoader) via banking-themed banking emails, which then acts as a conduit to deliver SnakeKeylogger, an information stealer developed in .NET. "The DBatLoader malware distributed through phishing emails has the cunning behavior of exploiting normal processes (easinvoker.exe, loader.exe) through techniques such as DLL side-loading and injection for most of its behaviors, and it also utilizes normal processes (cmd.exe, powershell.exe, esentutl.exe, extrac32.exe) for behaviors such as file copying and changing policies," the company said. SEC SIM-Swapper Sentenced to 14 Months for SEC X Account Hack — A 26-year-old Alabama man, Eric Council Jr., has been sentenced to 14 months in prison and three years of supervised release for using SIM swapping attacks to breach the U.S. Securities and Exchange Commission's (SEC) official X account in January 2024 and falsely announced that the SEC approved Bitcoin (BTC) Exchange Traded Funds (ETFs). Council Jr. (aka Ronin, Agiantschnauzer, and @EasyMunny) was arrested in October 2024 and pleaded guilty to the crime earlier this February. He has also been ordered to forfeit $50,000. According to court documents, Council used his personal computer to search incriminating phrases such as "SECGOV hack," "telegram sim swap," "how can I know for sure if I am being investigated by the FBI," "What are the signs that you are under investigation by law enforcement or the FBI even if you have not been contacted by them," "what are some signs that the FBI is after you," "Verizon store list," "federal identity theft statute," and "how long does it take to delete telegram account." FBI Warns of Malicious Campaign Impersonating Government Officials — The U.S. Federal Bureau of Investigation (FBI) is warning of a new campaign that involves malicious actors impersonating senior U.S. federal or state government officials and their contacts to target individuals since April 2025. "The malicious actors have sent text messages and AI-generated voice messages — techniques known as smishing and vishing, respectively — that claim to come from a senior US official in an effort to establish rapport before gaining access to personal accounts," the FBI said. "One way the actors gain such access is by sending targeted individuals a malicious link under the guise of transitioning to a separate messaging platform." From there, the actor may present malware or introduce hyperlinks that lead intended targets to an actor-controlled site that steals login information. DICOM Flaw Enables Attackers to Embed Malicious Code Within Medical Image Files — Praetorian has released a proof-of-concept (PoC) for a high-severity security flaw in Digital Imaging and Communications in Medicine (DICOM), predominant file format for medical images, that enables attackers to embed malicious code within legitimate medical image files. CVE-2019-11687 (CVSS score: 7.8), originally disclosed in 2019 by Markel Picado Ortiz, stems from a design decision that allows arbitrary content at the start of the file, otherwise called the Preamble, which enables the creation of malicious polyglots. Codenamed ELFDICOM, the PoC extends the attack surface to Linux environments, making it a much more potent threat. As mitigations, it's advised to implement a DICOM preamble whitelist. "DICOM's file structure inherently allows arbitrary bytes at the beginning of the file, where Linux and most operating systems will look for magic bytes," Praetorian researcher Ryan Hennessee said. "[The whitelist] would check a DICOM file's preamble before it is imported into the system. This would allow known good patterns, such as 'TIFF' magic bytes, or '\x00' null bytes, while files with the ELF magic bytes would be blocked." Cookie-Bite Attack Uses Chrome Extension to Steal Session Tokens — Cybersecurity researchers have demonstrated a new attack technique called Cookie-Bite that employs custom-made malicious browser extensions to steal "ESTAUTH" and "ESTSAUTHPERSISTNT" cookies in Microsoft Azure Entra ID and bypass multi-factor authentication (MFA). The attack has multiple moving parts to it: A custom Chrome extension that monitors authentication events and captures cookies; a PowerShell script that automates the extension deployment and ensures persistence; an exfiltration mechanism to send the cookies to a remote collection point; and a complementary extension to inject the captured cookies into the attacker's browser. "Threat actors often use infostealers to extract authentication tokens directly from a victim's machine or buy them directly through darkness markets, allowing adversaries to hijack active cloud sessions without triggering MFA," Varonis said. "By injecting these cookies while mimicking the victim's OS, browser, and network, attackers can evade Conditional Access Policies (CAPs) and maintain persistent access." Authentication cookies can also be stolen using adversary-in-the-middle (AitM) phishing kits in real-time, or using rogue browser extensions that request excessive permissions to interact with web sessions, modify page content, and extract stored authentication data. Once installed, the extension can access the browser's storage API, intercept network requests, or inject malicious JavaScript into active sessions to harvest real-time session cookies. "By leveraging stolen session cookies, an adversary can bypass authentication mechanisms, gaining seamless entry into cloud environments without requiring user credentials," Varonis said. "Beyond initial access, session hijacking can facilitate lateral movement across the tenant, allowing attackers to explore additional resources, access sensitive data, and escalate privileges by abusing existing permissions or misconfigured roles." 🎥 Cybersecurity Webinars Non-Human Identities: The AI Backdoor You're Not Watching → AI agents rely on Non-Human Identities (like service accounts and API keys) to function—but these are often left untracked and unsecured. As attackers shift focus to this hidden layer, the risk is growing fast. In this session, you'll learn how to find, secure, and monitor these identities before they're exploited. Join the webinar to understand the real risks behind AI adoption—and how to stay ahead. Inside the LOTS Playbook: How Hackers Stay Undetected → Attackers are using trusted sites to stay hidden. In this webinar, Zscaler experts share how they detect these stealthy LOTS attacks using insights from the world's largest security cloud. Join to learn how to spot hidden threats and improve your defense. 🔧 Cybersecurity Tools ScriptSentry → It is a free tool that scans your environment for dangerous logon script misconfigurations—like plaintext credentials, insecure file/share permissions, and references to non-existent servers. These overlooked issues can enable lateral movement, privilege escalation, or even credential theft. ScriptSentry helps you quickly identify and fix them across large Active Directory environments. Aftermath → It is a Swift-based, open-source tool for macOS incident response. It collects forensic data—like logs, browser activity, and process info—from compromised systems, then analyzes it to build timelines and track infection paths. Deploy via MDM or run manually. Fast, lightweight, and ideal for post-incident investigation. AI Red Teaming Playground Labs → It is an open-source training suite with hands-on challenges designed to teach security professionals how to red team AI systems. Originally developed for Black Hat USA 2024, the labs cover prompt injections, safety bypasses, indirect attacks, and Responsible AI failures. Built on Chat Copilot and deployable via Docker, it's a practical resource for testing and understanding real-world AI vulnerabilities. 🔒 Tip of the Week Review and Revoke Old OAuth App Permissions — They're Silent Backdoor → You've likely logged into apps using "Continue with Google," "Sign in with Microsoft," or GitHub/Twitter/Facebook logins. That's OAuth. But did you know many of those apps still have access to your data long after you stop using them? Why it matters: Even if you delete the app or forget it existed, it might still have ongoing access to your calendar, email, cloud files, or contact list — no password needed. If that third-party gets breached, your data is at risk. What to do: Go through your connected apps here: Google: myaccount.google.com/permissions Microsoft: account.live.com/consent/Manage GitHub: github.com/settings/applications Facebook: facebook.com/settings?tab=applications Revoke anything you don't actively use. It's a fast, silent cleanup — and it closes doors you didn't know were open. Conclusion Looking ahead, it's not just about tracking threats—it's about understanding what they reveal. Every tactic used, every system tested, points to deeper issues in how trust, access, and visibility are managed. As attackers adapt quickly, defenders need sharper awareness and faster response loops. The takeaways from this week aren't just technical—they speak to how teams prioritize risk, design safeguards, and make choices under pressure. Use these insights not just to react, but to rethink what "secure" really needs to mean in today's environment. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post.

You ever wonder who the first person to put peanut butter and chocolate together was? Part of me feels like whoever it was must be loaded; I mean, you’ve combined two already great flavors into something that Reese’s would more or less build a whole brand on. And then part of me thinks it plays out like the hypothetical guy who invented the Chicken McNugget in The Wire. A pat on the back from a big shot, and then it’s back to the basement to figure out a way to make the fries taste better. I don’t know the answer; I hope it's the former. But every now and then, you come across an idea, a combination of things, that’s so good that you wonder how nobody’s ever done it before. And every time my squad and I sprinted back to our time-traveling dropship, stopping only to deal with the Time Reapers that stood in our way, I wondered how the hell nobody had ever said “Hey, what if we combined Overcooked and Gears of War?” pre-Pizza Bandit.Pizza Bandit’s setup is pretty simple. You’re Malik, a former bounty hunter with dreams of being a chef who is pulled back into the bounty game when he’s scammed out of his pizza shop and his former crew needs his help to get out of a jam. Pizza Bandit’s writing is pretty silly, but that’s part of the charm. I can’t get mad when Albert, the android that upgrades your weapons, tells me he doesn’t know how to apologize for what happened to my pizza shop because he’s just an android, or when my pilot waxes nostalgic about how he misses the fog, or when someone utters the odd nonsensical line. It’s too silly, and the whole setup is just there to, well… set up Pizza Bandit’s wackiness.PlaySee, you’re not just any bounty-hunting crew. You’re a time-traveling bounty hunting crew, and that means you’ll be going all over space and time to get the job done. Don’t ask me how any of this works. All I know is that pizza heals and bullets kill, and that the Time Reapers — nasty little buggers that seem to be invading every timeline — don’t want this pizza shop owner to make any dough. And that’s not gonna fly. Pizza Bandit’s writing is pretty silly, but that’s part of the charm.“What makes Pizza Bandit unique is that you’re not just shooting stuff. You’re also, well, kinda playing Overcooked. After squading up, my first mission saw my crew (you can play with up to three friends) heading to the Restaurant from N owhere, a hidden outpost run by another bandit crew. Our job: fulfill the pizza orders for other bounty hunting teams, and send them off in time-traveling rocket pods. That meant putting together the right type of pizza, getting it to the oven, making sure we were getting their drink orders right, and adding some extra bullets for when things got spicy, cramming it all into a pod, and doing it on time while fighting off the Time Reapers, who really, really don’t like supporting small businesses.Pizza Bandit ScreenshotsAnd that’s where the other part of the Overcooked/Gears of War marriage comes into play. See, the Time Reapers mean business, and you’re not going to talk them out of some time reaping. That’s their whole bag. The only solution, fellow bandit, is incredible violence. I’ve played several builds of Pizza Bandit at this point, and let me tell you, your arsenal is up to the task. You start with your choice of assau lt rifle, minigun, and sniper rifle, but the fun really begins when you start unlocking your secondary weapons by completing jobs. They start simple: landmines, grenades, that sort of thing, but once you unlock the disco ball that attracts enemies and gets them dancing before it explodes? Whew, buddy. And the sentry turret? Perfection. You could slice and dice them Time Reapers with a katana, but have you ever considered using a pizza slicer as big as a man? It’ll change your life.And the Time Reapers will force you to use everything in your arsenal. You got your standard guys who will just run at you, but there are also Time Reapers that’ll crawl around on all fours, Terminator-looking ones that will leap at you, giant ones with hammers, guys who throw fireballs (these can really ruin your day), the works. You gotta prioritize.Pizza Bandit is at its best when you’re with a good team, calling out orders. A good match should be shouts of “We need a pepperoni pie!” and “I’m on the Coke!” and “I’m down!” interspersed with lots and lots of gunfire. Simple choices, like when to call down your own, once-a-mission rocket pod full of pizza and supplies, and more complex ones, like where to put it (you can block off a stairway, for instance), spice things up, too. And here’s the thing: so far, I’ve just talked about Restaurant from Nowhere, which is only the first level. Pizza Bandit isn’t a one-trick pony. One of my favorite levels has you taking over a sushi joint and making sure you have the right stuff on the delivery turntable for your customers. Sometimes that means running downstairs and grabbing a big ol’ tuna, taking that bad boy upstairs, and chopping him up before the Time Reapers whack you and you drop him. Other times that means frying an egg, or making a cucumber roll. You gotta stay ahead of the curve, because new customers are prioritized over old ones, and the Time Reapers aren’t gonna sit there and wait for you to plate your masterpiece.Sometimes, you’re not even cooking food at all. Another favorite level, Wizard’s Tomb, has you exploring a magically booby-trapped tomb in search of a sarcophagus. You’ll have to navigate the tomb’s traps, solve basic puzzles to reveal the way forward, and take out the arcane heart powering the whole enterprise before getting to the sarcophagus itself, which you’ll naturally transport with jetpacks before booking it back to your ship. It isn’t enough to get any given job done; you gotta get home, too. Just another day in the life of a pizza bandit.Pizza Bandit is always ludicrous, and its inspirations are obvious, but it’s never less than fun.“There are more, of course: in one, you’ll defend a cabin with Dr. Emmert Browne (Great Scott, Jofsoft, I see what you’re doing here, and I like it!) while he invents the time travel device that makes your whole business profitable. Winning it all means keeping him warm, satiating his hunger with rabbit or venison, and stopping all those nasty Time Reapers (and Wendigos?) who are trying to stop time travel from happening. You’d think that the Time Reapers would understand time paradoxes, but I guess not. Can’t reap time if there’s no time to reap, y’all. Or maybe you’ll break into an enormous safe with a laser drill, like you’re roleplaying the opening scene of Michael Mann’s Thief with a drill that’s constantly exploding. That seems safe, right? But hey, apparently there’s a magical cookbook in that vault whose recipes can alter reality, and we’re being paid to get it, exploding drill or not. A Pizza Bandit always gets the job done. And there’s always time to do your best Breaking Bad impersonation and help a couple of guys cook some “magic powder” and hide it inside some chicken. Oh, and you have to kill and cook the chickens. Only fresh, never frozen, baby. Pizza Bandit is always ludicrous, and its inspirations are obvious, but it’s never less than fun.Between missions, it’s back to Pizza Bandit (your restaurant), where you can acquire and upgrade your weapons, decorate Pizza Bandit itself, use the ingredients you find during missions to bake and share a pie for some stat boosts on your next run, or get some spiffy new duds for your bounty hunter. The milk carton backpack is a classic choice, if I do say so myself, but I’m still saving up for one of the cat ones. The things we do for fashion, am I right? Then it’s right back to it. A bandit’s work is never done.Sometimes, you don’t know you want something until you get it. I didn’t know I wanted Pizza Bandit until the first time I played it at PAX two years ago. It was one of those games that generated a lot of word of mouth, but it’s one of those concepts that doesn’t seem like it’ll work until you get a controller in your hands and everything makes sense. I don’t know why we’ve never gotten something like Pizza Bandit before, but once I played it, I knew I wanted more. Pizza heals, bullets kill, and Pizza Bandit rocks. If Jofsoft can stick the landing, we’re in for a tasty slice of New York pie.

Here’s the deal: Only 4 days left to save up to $900 on your TechCrunch Disrupt 2025 ticket — and an additional 90% off for your +1. From October 27–29, San Francisco’s Moscone West transforms into the epicenter of tech innovation as 10,000 tech, startup, and VC leaders gather for the 20th anniversary of TechCrunch Disrupt — celebrating two decades of championing startups, driving innovation, and fueling growth across the ecosystem. The clock’s ticking. Lock in your ticket here before the price jumps on May 25 at 11:59 p.m. PT. What makes the 20th TechCrunch Disrupt unmissable Disrupt isn’t just a conference — it’s a catalyst. It’s where big ideas meet unexpected moments. In the middle of thousands of ambitious minds, it’s the personal connections that leave a lasting mark. A conversation that sparks a pivot. A speaker who reframes your thinking. A stranger who becomes your next collaborator. This is where momentum starts. Real talk, real insight These tech leaders didn’t just build the future — they’re here to show you how. Six stages packed with the insight and inspiration you need. With topics ranging from AI and space to startup launches, IPOs, and next-gen tech, there’s something for every innovator. Image Credits:Matthias Balk / Getty Images Adam Bain, 01 Advisors Astro Teller, X, The Moonshot Factory David Cramer, Sentry David George, Andreessen Horowitz Gale Wilkinson, VITALIZE Venture Capital Nikola Todorovic, Wonder Dynamics, an Autodesk Company Nirav Tolia, Nextdoor Ryan Petersen, Flexport Sangeen Zeb, GV (Google Ventures) Zeya Yang, IVP See the growing speaker lineup You’ll hear from technologists on the edge of AI breakthroughs. Investors who don’t just fund trends but shape them. Startup founders who somehow found the clarity to bet everything on a problem no one else thought to solve. SAN FRANCISCO, CALIFORNIA – OCTOBER 20: Audience members watch panels during TechCrunch Disrupt 2022 on October 20, 2022 in San Francisco, California. (Photo by Kimberly White/Getty Images for TechCrunch)Image Credits:Kimberly White / Getty Images The Disrupt difference This isn’t a spectator event — it’s three days of full-throttle innovation and real interaction. Techcrunch event Join us at TechCrunch Sessions: AI Secure your spot for our leading AI industry event with speakers from OpenAI, Anthropic, and Cohere. For a limited time, tickets are just $292 for an entire day of expert talks, workshops, and potent networking. Exhibit at TechCrunch Sessions: AI Secure your spot at TC Sessions: AI and show 1,200+ decision-makers what you’ve built — without the big spend. Available through May 9 or while tables last. Berkeley, CA | June 5 REGISTER NOW Dynamic breakout sessions built for real dialogue with today’s top tech leaders.  Interactive, deep-dive roundtables that go beyond the surface.  The energetic Startup Battlefield, our live global pitch competition where the world’s most promising early-stage startups compete for a $100,000 equity-free prize — and get real-time feedback from top VCs. Ready to compete? Submit your application before June 9. Cutting-edge demos and next-gen tech from around the world, all under one roof in our immersive Expo Hall. Startups: want in? Secure your table here before your competitor does. What happens at Disrupt isn’t just seen — it’s felt. Image Credits:Eric Slomonson, The Photo Group Lock in your savings before May 25 Now’s the moment to act. Early Bird pricing saves you up to $900 on your pass. Want to bring a colleague, cofounder, or friend? You can grab a second ticket at 90% off. These savings expire on May 25 at 11:59 p.m. PT. Secure your spot today and be a part of the Disrupt experience.

Old Enemies, New Alliances: Black Ops 6 Season 04 is Here! Though he once had the chance to end Vikhor “Stitch” Kuzmin’s reign of terror, Adler spared his nemesis after they met at the culmination of Black Ops Cold War. Latest intel reveals Kuzmin was later captured and locked up in an Icelandic CIA black site until he might prove useful. Following the events and evidence uncovered by the deceased CIA Agent Jason Hudson, that day has come, and in an unlikely team up, Adler and team have broken Stitch out from his confinement, seeking his help to crack the codenames needed to find the Pantheon moles. With Verdansk once again an area of operations for deployment, what other plans might Stitch have in store? For now, Adler needs him to complete the mission at hand.  To succeed, the two must put their past behind them in pursuit of a new goal. Get in on the action when this stacked offering of free and premium content comes to Call of Duty®: Black Ops 6, launching in Season 04 on Thursday, May 29 at 9AM PT across all platforms. Nomenclature Note: Throughout the blog, you’ll see references to when gameplay content launches. Here are what these various suffixes mean: “Launch”: Expect to access this content immediately at the Season launch “Launch Window”: Expect to access this content between launch and up to 72 hours after launch.  “In Season”: Expect to access this content during the season, but before either the mid-season or next season arrives. “Mid-Season”: Expect to access this content at Mid-Season or later. All content timing may be subject to change. Multiplayer Content Summary Five MP Maps: Drop into Icelandic AOs with three new maps at launch including the Shutdown and Fugitive 6v6 Core maps and the Blitz Strike map. In the mid-season, party it up in Eclipse and play a reimagined Fringe. New and Returning Modes: Pick up dog tags to drain the enemy’s reserves in Team Elimination, a fun new twist on the Kill Confirmed formula. Make every bullet count with the return of One in the Chamber and get festive in the Party Ops Limited-Time Mode. Additional Equipment: The Grim Reaper Scorestreak returns from the original Black Ops, offering an explosive payload that’s guaranteed to blow the competition sky high. Season 04 Ranked Play: Challenge the best of the best, get those wins, and climb the Ranks in a new season of Multiplayer Ranked Play, with all-new rewards and bragging rights. Shutdown (Launch) Brand-New, Core, 6v6, Small-Sized Before breaking out Stitch, Adler and team first need to cut off the power to the black site prison, bringing them to a hydroelectric plant built on the rugged volcanic terrain of Iceland. Fight in and around the central building housing the now wrecked Turbine or dive down the Sluice into the Lake, its waters hugging the plant’s south end by the Transformers. Jump up by the red container to target enemies from far out or swim back onshore to reach the Atrium and Parking. Head to the north side to fight in the rugged Yard, away from the shoreline and bookended by the Pumphouse and Canteen. It’s a quick run to the Turbine from here, giving you good map coverage down the middle. If things get too hot, you can always drop down the Chute and swim your way to safety.  Fugitive (Launch) Brand-New, Core, 6v6, Medium-Sized Deploy to a secret CIA black site in a remote part of Iceland, the very location where Stitch has been imprisoned until Adler brings him in as an unlikely ally for an urgent operation. With the power out, Adler and his crew seize their chance to infiltrate the prison, climbing, zipping, and battling their way through the frozen compound. Upon reaching their target, Adler and Stitch strike a deal. Following the jailbreak, the alarms are blaring and warnings of a power failure light up the Cell Block. Though the area may appear smaller than expected when first glancing at the minimap, the prison’s intricate layout presents multiple levels and shortcuts to the various outside areas including the Checkpoint, Courtyard, and Recreation Yard. In the upper Cell Block, newly opened cells present the danger of ambush. Be on guard and look for ziplines for quick access to your next target. Blitz (Launch) Brand-New, Strike, 6v6/2v2, Small-Sized Traffic comes to a halt as Pantheon reinforcements race toward the prison but get ambushed by the Rogue team. Leave the road and seek out targets over the rugged terrain of the Cliffside or move inland, ambushing enemies at the Waterfall. To approach the battle head on, move down the central Bridge, using the scattered convoy for cover. Jump down from the center to move underneath the Bridge, a great means of pivoting to a new location. Though a small map overall, Blitz’s long lanes leave room for marksmen to shine. Eclipse (Mid-Season) Brand-New, Strike, 6v6/2v2, Small-Sized Stitch and the team arrive in Avalon, slipping into the shadows of an underground nightclub to discuss business. The neon lights flicker as they form a plan to break the Pantheon codenames, but the meeting is cut short when Pantheon agents storm in. Show off your best moves on the dance floor, dodging shots and flanking targets down the sides where seating offers party goers a chance to rest and order a drink from the bar. Ambush passing enemies from the DJ booth and then break through the broken façades on the walls, escaping into the halls. Fringe (Mid-Season) Remaster, Core, 6v6, Medium-Sized Revisit Fringe from Call of Duty: Black Ops 3, reimagined for the first time ever in Black Ops 6. Attend the grand opening of the Rolling Hills distillery, established in an idyllic setting with several navigable buildings and the surrounding grounds. Battle along the main Road or dive into the Bar for a closer fight. Watch for sharpshooters in the upper Barn and along the Bridge and relive the thrill of trying to make it out alive through the narrow Loading route. The first half of Season 04 brings two exciting Multiplayer modes: Team Elimination and One in the Chamber. In the mid-season, loosen up in the Party Ops Limited Time Mode. Team Elimination (Launch) In this twist on Kill Confirmed, two teams are given a limited amount of lives each round as they fight to be the last surviving team. Players drop a dog tag on death that can be picked up by the enemy to confirm the kill or by a teammate to deny the opposing team. Survive longer than the other team or hold the most remaining lives when the timer ends to win the round. Balance aggression and defense as you seek out enemy dog tags while preserving your life. Dig in with your teammates to counter enemy attacks and then ask for cover while you collect the droppings. Picking up tags is a great way to earn your next Scorestreak, so stay aggressive and keep up the momentum. Once your team’s life pool is drained, your remaining teammates can still revive you where you were last killed in a last-ditch effort to snatch victory from the jaws of defeat. One in the Chamber (In-Season) Another Black Ops fan-favorite mode returns as One in the Chamber shows up in Season 04! In this free-for-all mode, each Operator is given one pistol, one bullet, a knife, and three lives. Precision is king, as bullets always eliminate on impact and the only way to earn another bullet is to get an elimination. Stay cool, aim true, and preserve your lives while aiming for the highest score. UAV scans keep the action moving, so don’t try to hide. At the end of the match, the top three scoring Operators will step up to the Winner’s Circle. Party Ops (Mid-Season) Get the party started with a new Limited-Time Mode arriving later in the season: Compete in a randomized set of party themed minigames. The player with the highest score at the end of the match wins it all. The devastating Grim Reaper Scorestreak is back from the original Black Ops, unleashing massive hits on other Operators and Scorestreaks alike. New Scorestreak Scorestreak: Grim Reaper (In-Season) Type: Lethal Score: 725 Mastery Badges: Yes Powerful semi-automatic launcher that can fire up to four rockets in one load. Wield the Grim Reaper, a quad tube loaded Launcher capable of inflicting heavy damage on enemies. Whether targeting Operators or locking on to enemy Scorestreaks, the Grim Reaper’s payload delivers a huge explosion. The weapon is lost if you’re taken out, so save it for the right moment and bring backup to ensure you have the protection needed to unleash havoc.  Season 04 Ranked Play Overview Prove you’re the very best by dedicating your Multiplayer match time to Ranked Play, using the same settings, maps, modes, and weapon restrictions used by the Call of Duty League™. Win matches to earn SR (Skill Rating) and progress through the Ranks while earning career rewards like Rank Skins and Win Challenge rewards. As usual, match wins ensure you progress through the Ranks throughout Season 04 to earn new seasonal rewards like a new Pro Issue Weapon Blueprint, Rank-themed Calling Cards, Ranked Charms, and more: Season 04 Ranked Play Rewards Get 10 Wins: “Pro Reissue AMES 85” AMES 85 Weapon Blueprint Get 100 Wins: “Ranked Season 4 – 100 Wins” Large Decal Silver: “Ranked Season 4 – Silver” Calling Card Gold: “Ranked Season 4 – Gold” Calling Card and Charm Platinum: “Ranked Season 4 – Platinum” Calling Card and Charm Diamond: “Ranked Season 4 – Diamond” Calling Card and Charm Crimson: “Ranked Season 4 – Crimson” Calling Card and Charm Iridescent: “Ranked Season 4 – Iridescent” Calling Card and Charm Top 250: “Ranked Season 4 – Top 250” Calling Card and Charm Season 04 Champion: “Ranked Season 4 – Top 250 Champion” Calling Card Note: Multiplayer Events: Check the General section later in this blog to uncover the full complement of events for this mode across Season 04. Zombies Content Summary Grief Returns! Drop into this epic 4v4 competitive battle on all maps, outlasting the opposition while securing Capture Zones to debuff and Grief your opponents. The last team still standing wins! Additional Gameplay Content: Crack open the armored undead and create area-of-effect explosions with the Shatter Blast Ammo Mod, chew over the impressive effects of three new GobbleGums, and create even bigger explosions with the Grim Reaper Support launcher. New Modes and More: Unlock hidden rewards with more Dark Ops Challenges, then prepare to face down a powered-up Abomination, survive as long as you can in the Starting Room LTM, and prove your Leaderboard worth by zombie slaying for bragging rights and rewards! 4v4 competitive mode where two teams outwit and outlast each other. Capture zones to debuff enemies. No damage against other players. Respawns every third round. Available Maps: Liberty Falls, Terminus, Citadelle des Morts, The Tomb, Shattered Veil. Restricted: Wonder Weapons, GobbleGums: Exit Strategy, Idle Eyes, Wonderbar!, Time Out, and Flavor Hex (Season 04 GobbleGum).  Not seen since Black Ops 2, Grief returns to Zombies! This fan-favorite mode pits two teams of four against each other, with both sides vying to out-survive the other. As the battlelines are drawn between S.A.M. and Director Richtofen, each team pledges their support to one of these rivals at the start of a match, subsequently receiving handler comms support from one of them throughout the ensuing chaos. Indirect PvP Combat The action is almost immediate as both teams drop into either side of the same Grief Arena within the chosen Zombies map, and indirect PvP combat comes into effect: The two teams of four players can’t outright kill members of the enemy team, but can interact with them by body-blocking, or slowing them  by using melee, bullet-based weapons, or projectiles.  Victory Conditions: The winning team is the one that manages to “Grief” their rivals into being killed or entering a downed state. As long as one or more team members are upright, the match continues! Grief Arena Features The action is constant and can get incredibly chaotic, due in part to your proximity to your opponents and the hordes of undead encroaching on your team, thanks to the Arena being a sub-section of the main Zombies map. These are known as “Grief Arenas.” Within a Grief Arena are a variety of features: An Open Environment: Grief Arenas are clearly defined areas where any critical doors have already been opened, and the power will already have been turned on. All other Door Buys are inactive. Both teams spawn on opposite sides of the Arena, each in a group of four. Player Respawning: Any team members that are downed – provided one or more of their team are still alive – can be revived at any time, though rival teams, undead enemies, and Shock Charges can hamper this action! Additionally, a Wave Respawner triggers every third round, automatically reviving any eliminated teammates from both teams. Join In Progress: Any player not in the game can join up until Round 10 has been completed and has a small grace period to orient themselves before they’re swarmed by zombies. Additionally, if a team has won back-to-back Capture Zones (see below), join-in-progress is not available. Essence and Salvage: Unlike in Standard playlists, Salvage pickups in Grief are worth 100 Salvage, visible to all players, and can only be picked up by the first player to grab it. Zombies: Rounds will progress faster than usual and the amount of zombies per round has been increased to account for 8 players! All undead entities – except for bosses – are to be expected. If players fail to kill zombies, the round will turn. Core Mechanics: The Arsenal, Pack-a-Punch, Mystery Box, Crafting Tables, Perk machines, GobbleGum machine (with Exit Strategy, Idle Eyes, Wonderbar!, Time Out, and Flavor Hex restricted), Armor Wall Buys, and Der Wunderfizz machine are available in a Grief Arena where they normally reside, or in a new location if they don’t normally exist in this portion of their respective maps. Note: While the current GobbleGum restrictions are in place to keep matches dynamic yet balanced, additional restrictions may be made in the future as the developers keep an eye on game balance, similar to Ranked Play. Capture Zones: Appearing at a regular cadence during a match, these are smaller areas within a Grief Arena where players are required to stand and earn specific types of kills to trigger a Grief  on the opposing team. Plan A: Survive! Plan B: Capture Zones! Keeping your team upright and focused on undead slaying for longer than your rivals is the main plan in this mode. However, there’s an important secondary focus you need to plan for: Capturing zones and “Griefing” your rival team! Capture Zones appear at regular intervals throughout a match, and after stepping through the glowing perimeter, you and your team can secure the Zone by staying inside it and dispatching zombies. Beckon your crew into a Zone to quicken the zombie slaying, and once your kill count meets the requirement, a Grief is triggered on the opposition. Note that if neither team reaches this requirement within the countdown inside a Capture Zone, the Grief is applied to both teams. What is a Grief? It’s a temporary debuff, penalty, or negative gameplay mechanic that you can inflict on your rival team at a Capture Zone. The type of Grief is shown at the objective tracker within a Capture Zone. Here are the possible Griefs you’re aiming to inflict on your foes: Weapon Nerf: The affected players inflict considerably reduced damage to zombie enemies. Ammo Drain: All ammo-based weapons, including those stowed, receive an ammo drain with bullets or shells being removed constantly while the Grief is active. Zombie Ambush: An Elite zombie is summoned, and it solely focuses its killing power on the enemy team until either the Elite or the team are defeated, or the timer runs out. Weapon Carousel: The rival players’ weapons are randomly swapped every few seconds. Frozen: This Grief reduces the enemy players’ movement, along with frost and ice coating the characters. Griefs and Capture Zones also introduce new score types, including: Capture Zone Kill: Awarded to a player who defeated a zombie type during a successful Capture Zone completion. Capture Zone Win: Awarded to all players on a team who successfully commandeer a Capture Zone. Capture Zone Elite Kill: Awarded to a player who slays an Elite spawned in a Capture Zone. Available Grief Arenas (11 Arenas, Launch) A total of 11 different Grief Arenas are available in this mode. Here’s a list along with a brief description of the points of interest within each one: Liberty Falls Arena 1: Pump & Pay, Motor Lodge, and Fuller’s Liberty Lanes Liberty Falls Arena 2: Dark Aether Church, Cemetery, Hilltop Terminus Arena 1: Bio Lab Terminus Arena 2: Crab Island  Citadelle des Morts Arena: Courtyard, Ramparts, and Entrance Hall The Tomb Arena 1: Dig Site, Mausoleum The Tomb Arena 2: Dark Aether Nexus Shattered Veil Arena 1: Garden Pond, Lower Terrace Shattered Veil Arena 2: Upper Terrace, Shem’s Henge, Motor Court Shattered Veil Arena 3: Mansion Foyer, Overlook, East Foyer, Library Shattered Veil Arena 4: West Hallways, Southwest Balcony, Bottlery Access the following new content within all five Zombies Maps (unless otherwise stated) throughout Season 04: Dark Ops Challenges (Launch) A mysterious new set of hidden Calling Cards and bounteous amounts of XP are available at the start of Season 04, thanks to a fresh drop of Zombies Dark Ops Challenges. Who knows... maybe there’s even one for Grief. All further information is [[REDACTED]]. New LTM: Starting Room (Mid-Season) Inspired by the starting room in the classic “Moon” Zombies map, drop in with up to three of your Zombies crew into a more straightforward but challenging experience where you’re locked into the first zone of a map. Raptor One is gone, and those undead hordes are only getting stronger, but all doors in the initial zone are locked. Survive to the highest round you can! New LTM: Abomination Challenge (Mid-Season) Enter a warped version of Liberty Falls during this new Mid-Season Event, and hunt down an ultra-powered-up Abomination. Perhaps it’s wise to bring backup. Wreck even the most battle-hardened undead threat with the explosive power of the Shatter Blast Ammo Mod, then drop even more devastating firepower on the hordes with the Grim Reaper Support launcher. There’s three new chewables, too! Ammo Mod: Shatter Blast (Launch) Available: Augments Menu, and In-Game (Pause Menu) “Bullets deal explosive damage. Each bullet has a chance to create an explosion that destroys armor.” Modify your ammunition to explode the toughened armor of certain normal and Special undead enemies. This mod also has a second benefit, creating an area-of-effect blast radius at the same time, whether any armor is shattered or not.  Due to the somewhat chaotic nature of this modification, there is a random chance of the Shatter Blast effect triggering, and it won’t happen every time you fire. Also expect a cooldown period after the effect. Note that Shatter Blast doesn’t directly affect Elite enemies (pending some Augment research!), but area-of-effect explosions can still damage them. You are wise to wrangle your undead into hordes so they’re near each other, to really inflict some damage! Shatter Blast: Major Augments Research the following Augments to further customize this Ammo Mod. Big Game Shatter Blast can be used against Elite enemies. Expect an impressively sized explosion. Blast Chain On explosion, three additional explosions occur in rapid succession. Blast Repair For every enemy that has its armor destroyed by Shatter Blast, armor health will be restored for the player. Shatter Blast: Minor Augments Blast Zone Increase the size of the explosion. Blast Boost Increase the explosion damage. Blast Wave Normal enemies are knocked down by the explosion. New GobbleGums (Launch) Crack your teeth on three new GobbleGums, available across all maps once you earn or unlock them and equip them in your GobbleGum Loadout Pack. Explosive Flourish (Epic): Reloading your weapon creates an explosion around you. GobbleGum lasts 2 minutes. Flavor Hex (Legendary): Activates a random Ultra GobbleGum. Rainburps (Whimsical): Zombies killed belch sparkly rainbow bubbles. Lasts 3 minutes. Additional Support Weapon: Grim Reaper (In-Season) Available: Rivals Event reward Salvage: 2000 Hammer away at the Crafting Table and assemble a powerful semi-automatic launcher known as the Grim Reaper, which deals out lethal damage to the undead with up to a quartet of missiles fired in one load. With a capacity to carry up to a dozen rockets, and the ability to fire them individually or as a quartet of devastation, this can level a courtyard of undead with a single launch! Unlock this Support weapon once you’ve earned it via the Rivals Event. Note: Zombies Events: Check the General section later in this blog to uncover a first look at events for this mode across Season 04, including the King of the Dead Leaderboard challenge! Call of Duty: Warzone Content Summary New Point of Interest: The towering skyscraper known as The Overlook comes to Downtown Verdansk, with ziplines, cranes, and an impressive interior to explore. New and Limited Time Modes: Clash mode – the massive 52v52 Verdansk Deathmatch – is back! Join 51 other Operators in a chaotic firefight to claim domination points and defeat foes. Then compete in a specially themed area of Verdansk in a match with rule-bending modifiers in Havoc Royale. And drop into Rebirth Island for a spot of Resurgence Casual human and bot combat. Doubling Down on Ranked Play: Call of Duty: Warzone doubles down – literally – with two separate Ranked Play modes; Battle Royale: Ranked (Verdansk) at launch running throughout the entire season, and the return of Ranked Play to Rebirth Island at Mid-season. New Features: Cranes and horizontal ziplines Downtown. Lobby Lockdown in The Overlook. Look up and look out!  Dominate foes with a gigantic new skyscraper point of interest, available to Operators within the vicinity of Downtown! The old tenement blocks, Burger Town, and SKN Comm tower have been demolished, and construction crews are finalizing a sprawling skyscraper that dominates the landscape! Look for a full recon tour below. Recon Tour: The Overlook As construction nears completion on this behemoth of a skyscraper (more than twice the height of any previous building within the Verdansk conurbation), it’s worth gaining a tactical advantage on this monolithic new point of interest. The Overlook Footprint: The “Diamond” and Perimeter Security Checkpoints Drop into the grounds of The Overlook, and you’ll immediately see the grounds of the new skyscraper under construction stretch in a rough diamond shape around the location of the old SKN Comm Tower. Flanked by two massive cranes, the building plot perimeter runs from the corner of the main bank, clockwise past the Post Office, passing the Rothwynn Donna building, northeast to the Museum/Art Gallery, and follows the road around to City Hall.  All the older structures (the Burger Town, low-rise tenement blocks, the building site, and the small coffee shop and bar across from the Museum) have been bulldozed in the name of progress! Perimeter Security Checkpoints Military-style security checkpoints have been set up on the corners and roads of the plot of land within the footprint of the structure. Most aren’t secure enough to impede vehicular progress, and some have ramps to allow airborne access. These serve as helpful visual cues that you’re entering the new POI, The Overlook.  Ground Level: Construction Sites Most of the groundwork around the skyscraper is in its final stages of completion, but there are plenty of barriers, fencing, canopies, and containers to use as cover in the area below each of the two giant cranes north and south of the structure. Ground Level: Restaurants Burger Town: Fans of the famous Burger Town Double Cheeseburger will be thrilled to know the fast-food chain has relocated a few meters further down the road from its previous location and is contained within the massive footprint of The Overlook. This outlet also serves as a lower entrance into the grand foyer interior of the building. Sushi Bar: Diagonally opposite the Burger Town, on the northwest side of the POI, is a small Sushi bar, within the footprint of the tower itself. Nestled in the stepped courtyard, you can quickly advance to the north crane or main lobby entrance. It’s also worth pointing out that the sight lines around this POI have significantly changed since Season 03, with much greater visibility across familiar POIs within Downtown and the surrounding districts. North and South Cranes Two huge cranes flank the north and south side of the monolith and are another way to traverse into The Overlook at great height. With five separate platforms attached to the mast to land on (two at ground, and three at height), use the vertical Ascender built into the crane’s mast and take an eight-second ascent to a platform just below the jib that extends out to the main winch, and the hoist allowing a jump to The Overlook roof. Operators who aren’t challenged by vertigo will have wild and panoramic views that extend to all of Verdansk’s POIs (except Quarry)! Both cranes are also functional, and providing you’ve found the necessary controls in the vicinity (both on and off the cranes’ superstructures), cargo on the hook block and hoist can be summoned and moved to various locations around the tower and nearby Downtown buildings, in case you or your team needs a daring lift! Zip Lines and Additional Rooftop Cover Increasing the ways you can quickly traverse and gain (or lose) great height in your tactical positioning near The Overlook exterior, zip-lines provide a diagonal route to and from the surrounding Downtown building rooftops.  Each also has a small billboard or other protective cover as you reach the zipline mechanism. Access to and from Overlook at the following locations: South: Post Office rooftop to Skydeck. West: Rothwynn Donna building rooftop to Skydeck. Northeast: Art Gallery/Museum rooftop to Skydeck. East: City Hall dome rooftop to Skydeck.  The Overlook: Entrance and Lobby Lockdown The Overlook has a substantial exterior and interior presence, mainly tiered fountains, planting, and stairs up to forecourts and shuttered entrances to the north, east, south, and west, all leading to a central interior lobby. If you find the main entrances shuttered, it means the lobby is experiencing a lockdown. Perhaps there’s a way to breach this security? Are there other ways to get in? The interior lobby has a coffee shop, mezzanine office, stairs, a variety of cover options, and other areas to investigate, not least the marginally terrifying 18-storey elevator ascenders to the northeast and southwest, and even those only get you halfway up the inside of the tower. The Overlook: Atrium and Skydeck (Interior, Exterior) Just above the midway point within The Overlook tower is a five-floor interior with exterior Skydeck. Depending on your use of ziplines, you’re able to access a large Atrium with concrete tile and planters and an abundance of plant life. Around the perimeter are rooms, stairwells, and two new elevator shafts, all enabling you to reach the exterior Skydeck. Known by some locals as the “cyclops” tower, due to this large central upper opening you can fly a helicopter through, the Skydeck features a small glass pyramid, some windswept seating, and infiltration to the floors above.  The large, rectangular holes on all four sides provide zipline access around Downtown, as well as daring helicopter maneuvers through the gaps. The ascent doesn’t end here; enter any of the four pillars holding up the roof of the skyscraper for another elevator ascender ride. The Overlook: Penthouse (Interior), Roof (Exterior) The remaining upper floors of The Overlook are nearing completion, meaning health and safety rules aren’t being observed as stringently as you’d like. Top floors up from the Skydeck is the roof. Missing windows, exterior gantries without railings, and exposed exterior ladders mean you’ll be thankful for your parachute.  Depending on which of the tower corners you’re fighting through, this offers another five floors to investigate, including rooms that are fully furnished.  These include a security and server room, a two-floor penthouse level with opulent bedroom, kitchen, and games area, and that’s before the more perturbed of Operators learn the secrets of the [[REDACTED]] room!  As well as the usual Battle Royale and Resurgence playlists across Verdansk and Rebirth Island, major modes – Clash and Battle Royale: Ranked Play – return to the game, with the intriguing Havoc Royale and the arrival of Resurgence: Ranked Play on Rebirth Island at mid-season! Clash LTM (Launch) 104 players (52v52), 15-minute matches 52v52 Team Deathmatch chaos is back in Call of Duty: Warzone! First introduced into Call of Duty: Warzone during Season Five of Black Ops Cold War back in September 2021 as a revamped version of the original “Rumble” mode, Clash is back, bigger than ever, and now includes some impressive, game-changing equipment and power-ups only available in this mode. But what is Clash Mode? This is Team Deathmatch and Domination on a massive scale! Overview, Win Conditions, and Scoring This action-packed team-based mode takes place in and around a specific POI within Verdansk, and pits two teams of 52 players (divided into 13 Quad Squads per side) against each other. With no Circle Collapse, no last stand benefit for the Survivor Perk, and your Loadouts available immediately, the plan is simple; your side needs to acquire 500 points by the end of the 15-minute time limit. These are mainly gained by slaying enemies (sometimes aided with power ups you can acquire within a match), completing contracts, and participating in the in-game Public Events, as well as the following: Scoring: 1 point per enemy elimination 2 points per enemy elimination with Double Down Power Up 5 points per Contract completed 10 points for capturing a Domination Point (Flag) 10 points for capturing a Bonus Crate or a Cash Crate Clash: Available Locations Expect Clash matches to occur across a sub-section of the main Verdansk map, incorporating several adjacent areas around the following POIs: Quarry Boneyard Farmland Promenade (East) Clash: Available Vehicles With the impetus to reach the enemy forces never more important, expect heavy use of vehicles throughout a Clash Match. The full complement of currently available ground and air vehicles are as follows: Heli Cargo Truck LTV (Light Tactical Vehicle) Polaris RZR Pro R 4 Available Contracts There are three available Contracts to complete in Clash Mode: Scavenger Search and Destroy Recon The Scavenger and Recon Contracts work in the same way as they do in Battle Royale Matches. In addition to the usual rewards and in-game cash, you receive five team points for each Contract completed. Search and Destroy Contracts (Clash Mode Only): Everything must go with this new contract, where one team plants a bomb on a Buy Station, and on detonation, they can earn impressive rarity weapons and items from the Buy Stations’ inventory. The other teams can defuse the bomb to earn a Fire Sale for a major discount from the Buy Stations.  Expect the Search and Destroy Contract to be available in Battle Royale, Resurgence, and Plunder Modes, at Mid-Season. In-Match Events and Domination Points During a Clash match, expect several in-match Events to occur. These are like those in Battle Royale Matches, though Clash Events are timed throughout the match rather than related to the Circle Collapse. The available Events are: Domination Points Bonus Points Crates Clash Firesale Cash Crates Power Surge Domination Points Event: Up to three single capture Dom Points (flags) appear on the map, and these respawn throughout the match. Much like the Multiplayer Mode of the same name, a team that reaches and captures one of the Dom Points receives a reward; in this case, 10 team points. Bonus Points Crates Event: A cargo plane flies across the center of the map, and up to four crates are dropped. Teams are likely to head to the crates as they float to the ground, as capturing a crate awards you with 10 team points. Clash Firesale Event: For the next two minutes, all players can take advantage of a Firesale as two Portable Buy Stations are dropped into the backfield of each team (a total of four). Additionally, all loot crates are restocked and cash found in crates is also increased.  Cash Crates: Capture one (or more) of the three Cash Crates that drop during this event also nets you 10 team points. Power Surge Event: For the next two minutes, there’s an increased drop rate of Power Ups when you dispatch an enemy player or loot any ground caches. Clash Mode Gameplay Features As well as the previously mentioned new Search and Destroy Contract, Clash comes loaded with features unique to the mode. Here’s the full run-down of what to expect: Buy Stations (Clash Mode only): Expect Buy Stations to be scattered across a Clash map and roughly split between each team’s area of operations. Portable Buy Stations are also available during the Firesale In-Match Event. Here’s what you can purchase: Armor Plate: $500 Munitions Box: $1,000 Trophy System: $1,500 Counter UAV: $3,000 Sentry Turret: $3,000 Hand Cannon: $4,000 Bunker Buster: $4,000 Cluster Strike: $4,000 Precision Airstrike: $6,000 Specialist Perk: $10,000 New Field Upgrade: Door Barricade (Clash Mode at Season Launch): Control access points more easily during mid or close-quarter combat scenarios and delay enemy incursions with the Door Barricade. Fit a barricade to a close single or double door, and a heavy-duty lock attaches to (and is visible on) both sides, preventing the opening or access through the door. This is until the barricade is either removed (only by the Operator or squadmates who fitted it), or destroyed, usually by using explosives, though gunfire and melee equipment is also an option. Expect the Door Barricade to be loot in Battle Royale and Battle Royale Casual Modes, via the new Care Package Killstreak, all coming at Mid-Season. New Killstreak: Hand Cannon (Clash Mode at Season Launch): This high-powered pistol Killstreak, originally available in Multiplayer during Season 01, is available in ground cache as rare loot. Expect a slow rate of fire and finite ammunition, but good handling, and improved hip fire accuracy with faster hip-fire shooting speed. Expect the Hand Cannon to be rare loot in Battle Royale, Battle Royale Casual, Resurgence, and Plunder Modes, via the new Care Package Killstreak, all coming at Mid-Season. Feature: SAM Turrets (Clash Mode only): Chopper and drone pilots take note; Clash mode maps feature SAM Turrets in various tactical positions across the environment. Spend $1,500 of in-match cash to activate these anti-air missile batteries and use them up to four times to target any aircraft and drones in the area. If you’re flying in the Heli on the receiving end of a SAM barrage, now’s the time to utilize flares to counter the incoming missiles! Train (Clash Mode only): If a Clash map features a portion of the large, circular railroad track that the train travels along, then this hulking engine and loot-filled carriages are parked and available to use as added cover and looting opportunities. UAV Towers (Clash Mode only): Providing you have the $2,000 in-match cash to activate them, teams can head to and capture a few scattered UAV Towers, allowing pinging of enemy movement across the local area. Clash Mode Powerups  Clash Mode features five differently hued in-match Powerups that are automatically used when found. Available as a possible loot drop or sometimes appearing as dropped loot near the body of an eliminated enemy Operator, these Powerups are color-coded and offer temporary benefits to the Operator who grabs them. All five can be obtained in a single match and expect the frequency of available Powerups to be significantly increased if the in-match Power Surge Event activates (usually in the final stages of a match). Here’s what each of the five Clash Powerups grant you: Hunter (Red Aura): Highlights enemies and allies in red and blue respectively. Allies are visible through walls. Applies Tracker and High Alert Perks. Speed Boost (Yellow Aura): Prevents fall damage and provides approximately 20 percent speed boost to your movement. Regeneration Aura (Green Aura): Refills your health and armor at roughly 20 percent per second. Allies within a small radius around you also receive this benefit. The effect does not stack. Double Down (Blue Aura): Grants you two points per enemy Operator elimination instead of one. Kill Mag (Purple Aura): Refills your active weapon magazine after a kill and quickens your reload. Havoc Royale LTM (Mid-Season) 44 players (Quads), 15-minute matches Compete in a Call of Duty: Warzone match like no other, where rule bending modifiers twist the realities of the usual Resurgence gameplay in chaotic and game-changing ways.  Drop into a specially themed area of Verdansk with your Loadout. Every new gas circle activates a different modifier. Adapt fast to sudden changes as Havoc modifiers may impact you, the environment, and even the gameplay rules. Survive the Havoc, be the last team standing, and claim victory! Expect a full rundown of this game mode in the Season 04 Reloaded blog, just prior to Mid-season. Resurgence Casual (Mid-Season) 44 Players, Players & Bots Infil into Rebirth Island with your squad and commit to winning using the regular Resurgence ruleset, but with one important twist; some of your adversaries aren’t human! Whether facing down a bot or not, Resurgence Casual is a great mode to drop into whether you’re warming up, teaching a new player about the game, or you’re wanting a Resurgence match that isn’t quite as extreme as normal. As with Battle Royale Casual or Call of Duty: Warzone Bootcamp, game progression is limited in this mode and results will not count towards or against your stats. This mode also doesn’t count towards your eligibility to accessing Resurgence Ranked Play when it arrives at Mid-Season. Grind your way towards a coveted position in the Top 250 as Battle Royale: Ranked Play becomes the first of two Ranked Play variants to drop in Season 04 within Call of Duty: Warzone. Harness the competitive spirit and earn new rewards for ranking up and advancing through the Skill Divisions, unlocking the following rewards as you go: Season 04 BR Ranked Play Rewards First Season Win: Weapon Charm Get 25 Eliminations: Elimination Sticker Get 100 Eliminations: Elimination Weapon Camo Get 250 Eliminations: Elimination LR 7.62 Weapon Blueprint Silver: “Ranked Season 4 – Silver” Emblem Gold: “Ranked Season 4 – Gold” Emblem and Decal Platinum: “Ranked Season 4 – Platinum” Emblem and Decal Diamond: “Ranked Season 4 – Diamond” Emblem and Decal Crimson: “Ranked Season 4 – Crimson” Emblem and Decal Iridescent: “Ranked Season 4 – Iridescent” Emblem and Decal Top 250: “Ranked Season 4 – Top 250” Emblem and Decal Season 04 Champion: “Ranked Season 4 – Top 250 Champion” Emblem Ranked Play: Resurgence (Mid-Season) Trios, Rebirth Island Craving some real competition on Rebirth Island? Then squad up with your winning Trio, and attempt dominance over the very best players as Resurgence Ranked Play makes its triumphant return! Expect the same rules set you remember during the Call of Duty: Modern Warfare® III era, and an expanded look at this returning, fan-favorite mode in the Season 04 Reloaded blog, just prior to Mid-season. Ranked Play Notes: Battle Royale: Ranked Play (Verdansk) runs from Launch Window throughout the entirety of Season 04. Resurgence: Ranked Play (Rebirth Island) begins at Mid-Season, and runs alongside Battle Royale: Ranked Play, meaning you can play one or both Modes when they are active. The ranking is separate from Battle Royale: Ranked Play. A new Contract, Field Upgrade, Killstreak, Perk, and ATV are all set to drop into Verdansk during Season 04: Clash Mode Features Expansion (Mid-Season) After an evaluation period in Call of Duty: Warzone’s Clash Mode, expect the following new equipment to become available across additional modes at mid-season. Here’s what to expect: Contract: Search & Destroy: Battle Royale, Resurgence, Plunder. Field Upgrade: Door Barricade: Battle Royale, Battle Royale Casual Modes. Available via Care Package. Killstreak: Hand Cannon: Battle Royale, Battle Royale Casual, and Plunder Modes. Available via Care Package. Killstreak: Care Package (Mid-Season) Open ground loot caches for a rare chance to obtain the Care Package, a throwable Killstreak that, when lobbed, explodes into trail of smoke, after which a loadout-sized crate falls from the skies. Open this crate for a chance to obtain rare loot including rare equipment, the Specialist Perk, and more. New Perk: Loot Master (Mid-Season) Available only as Ground Loot during Resurgence and Plunder matches, the Loot Master Perk allows you to maximize your scavenging potential and gear up faster by increasing the amount of loot you find while opening caches. Gain the early advantage or sustain yourself during prolonged engagements. Expect an increased drop rate for equipped weapon ammo, a higher chance to find tacticals and lethals, more cash, and a greater chance at field upgrades, killstreaks, and other high-tier gear. ATV: Polaris Sportsman XP 1000 (Launch) Added to the vehicle pool is the Polaris Sportsman XP 1000, a real wild ride allowing you to hit the Verdansk goat trails in comfort with legendary suspension, great clearance and traction, and versatility for positioning up to three Operators on the surface of the vehicle. Compared to the current ATV, the wheelbase and size of the Sportsman XP 1000 offers more stability than ever before.  Note: Call of Duty: Warzone Events: Check the General section later in this blog to uncover the full complement of events for this mode across Season 04. General Content (MP, ZM, WZ) Call of Duty: General Content Summary (All Modes and Games) Weapons Detail: Five new weapons arrive in Season 04, including two at launch: the LC10 SMG and FFAR 1 Assault Rifle. Later in the season, get your hands on the , Essex Model 07 Marksman Rifle, Olympia Special weapon and Pickaxe Melee weapon, and change up your playstyle with new attachments. The Events Horizon: Season 04 is packed with Events, including Rivals, Ballerina (From the World of John Wick), and even more coming mid-season.. Plus, prove your worth across the Zombies leaderboards and become King of the Dead! Battle Pass and BlackCell: The Season 04 Battle Pass brings Stitch and brutal BlackCell Operator Omen to the forefront alongside new Weapon Blueprints, Operator Skins, Calling Cards, Finishing Moves, Emotes, and more in a mix of free and premium tiers. Free tiers include two new base weapons and the G-Grip Tactical Foregrip. Season 04 Operators: Stitch returns after being freed from prison, headlining the new Battle Pass next to the sinister Omen leading BlackCell. Plus, deploy as assassin Eve Macarro in a collaboration with Ballerina, followed by much more at the mid-season. CDL Announcements: Major IV is almost here! Find out where to watch, plus the in-game rewards you can unlock, just for tuning in! Primary Weapon: LC10 (Launch) SMG, Battle Pass Page 3, Page 14 Battle Pass Blueprint Levels: 38 MAGS: 4 MAG SIZE: 34 Mastery Badges: Yes Attachments: Optic, Muzzle, Barrel, Underbarrel, Magazine, Rear Grip, Stock, Laser, Fire Mods Customize Options: Skins, Camos and Reticle Unlocks (MP, ZM, WZ), Accessories (1), Decals (1), Stickers (3). Full-auto submachine gun. Excellent accuracy and range, with a moderate rate of fire. Average mobility and very slow handling for its class. Returning after its debut in Call of Duty: Black Ops Cold War, the LC10 SMG spits out rounds fast coupled with good accuracy and range, moderate damage, and a quick reload to get you back into the fight. The weapon performs well off the hip or down sights, with 34 rounds in the base magazine for a hefty ammo supply. Via Gunsmith, equip a variety of improvements such as a Laser for improved hipfire spread and an updated Barrel to further extend the weapon’s respectable damage range. Primary Weapon: FFAR 1 (Launch) Assault Rifle, Battle Pass Page 6, Page 11 HVT Tier Battle Pass Blueprint Levels: 42 MAGS: 3 MAG SIZE: 30 Mastery Badges: Yes Attachments: Optic, Muzzle, Barrel, Underbarrel, Magazine, Rear Grip, Stock, Laser, Fire Mods Customize Options: Skins, Camo and Reticle Unlocks (MP, ZM, WZ), Accessories (1), Decals (1), Stickers (3).  Full-auto assault rifle. Very high rate of fire and excellent CQB power, but slower handling and mobility. Boasting a blazing fast fire rate that rivals the SMG weapon class, this bullpup Assault Rifle is designed for taking down targets fast. The somewhat unpredictable recoil favors burst fire when tackling distant targets, but once you’re locked on it’s all over for them. Supporting a variety of Underbarrel Launcher attachments, use Gunsmith to add greater versatility to the weapon. Running low on ammo? Grab an Extended Mag while you’re at it. Primary Weapon: Essex Model 07 (In-Season) Marksman Rifle, Event Reward Levels: 38 MAGS: 3 MAG SIZE: 8 Mastery Badges: Yes Attachments: Optic, Muzzle, Barrel, Underbarrel, Magazine, Lever, Stock, Laser, Fire Mods Customize Options: Skins, Camo and Reticle Unlocks (MP, ZM, WZ), Accessories (1), Decals (1), Stickers (3). Lever-action marksman rifle. High damage potential. Balanced by slower rate of fire and handling. Inflict heavy critical point damage with this lever-action tactical rifle. An ideal tool for the new sheriff in town, this classic armament offers smooth handling with shots that quickly recenter after kicking up. Choose from a variety of Levers to further customize the weapon’s action, improving ADS speed, sprint to fire speed, and other movement abilities.  Special Weapon: Olympia (Mid-Season) Special, Event Reward Levels: 30 MAGS: 8 MAG SIZE: 2 Mastery Badges: Yes Attachments: Barrel, Stock Customize Options: Skins, Camos (MP, ZM, WZ), Accessories (1), Decals (1), Stickers (3). Double-barrel shotgun. Very high damage and respectable range but requires frequent reloading. The double-barrel Olympia – not seen since Black Ops 3 – makes its debut in Black Ops 6, returning as a Special Weapon that makes for the perfect backup when entering tight spaces. The Olympia holds two shots at a time, each spraying multiple pellets when your Operator pulls the trigger. Light customization via the Short Barrel and Cut-Off Stock attachments gives you some control over the weapon’s playstyle, but the fundamentals remain the same: get up close and make your shots count. Fire down the sight for a tighter pellet spread or shoot off the hip to inflict damage over a wider area. Melee Weapon: Pickaxe (Mid-Season) Melee, Event Reward Levels: 30 Mastery Badges: Yes Attachments: None Customize Options: Skins. One-hit kill. Medium attack speed. Short range. Without a Pickaxe, you’ll be lost in the tundra. Bring the right tool for the job when deploying to Iceland in Season 04’s Multiplayer maps, starting with this deadly Melee weapon that downs unarmored enemies with brutal severity. Though its range is short, the Pickaxe’s combination of rapid slashes and overhead swipes will keep enemies frozen in their tracks. Close the distance and say farewell. G-Grip (Launch) SMGs (except PP-19), Assault Rifles, Battle Pass Page 7 Reward Vertical foregrip with integrated laser for improved firing stability, horizontal recoil control, and tightened spread when transitioning between hipfire and aiming down sights. Beam: Blue. Blocks Laser attachments. Stryder .22 3-Round Burst Mod (Launch) Stryder .22 Pistol, Event Reward Convert the Stryder .22 into a 3-round burst. Drastically improves fire rate and maintains manageable gun kick but alters the weapon’s damage profile outside of the effective range. SVD Full Auto Mod (In-Season) SVD Sniper Rifle, Event Reward Convert the SVD from semi-auto to full-auto functionality, ramping up the speed of your damage output and drastically improving recoil and handling. TR2 CQB Auto Conversion (In-Season) TR2 Marksman Rifle, Event Reward Alter the TR2 Marksman Rifle to fire handgun caliber rounds, resulting in a Marksman Rifle with a compact frame and fully automatic capabilities that rival fire rates of an SMG! Stitch Returns to Action in the Season 04 Battle Pass Stitch returns to the fray, leading this season’s Battle Pass content in a shocking team up with Adler. Purchase the Season 04 Battle Pass for 1,100 COD Points or the Season 04 Battle Pass Bundle for 2,400 COD Points to immediately unlock the Instant Rewards Page of the Battle Pass, including the following items: 10% Battle Pass XP Boost The new “Supermax” Stitch Operator and “Supermax BlackCell” Stitch Operator Skin for those who purchase BlackCell The “Lock Up” Legendary Blueprint for the Feng 82 LMG The “Try Me!” Emote The “Untamable” Large Decal Start to unlock up to 1,100 COD Points as you progress through the Battle Pass The Season 04 Battle Pass includes over 110 pieces of unlockable content (excluding BlackCell) including two new Base Weapons, the G-Grip Tactical Foregrip Attachment, and several unlockable mil-sim style skins for Bailey, Payne, Grey, Caine, Brutus, Toro, Adler, Nazir, and Marshall. Stay tuned for the BlackCell, Battle Pass and Store Bundles blog prior to Season 04 launch for more details. BlackCell Offerings When the job needs to get done, summon Omen, the otherworldly Operator leading BlackCell content in Season 04. The menacing Operator and his three-headed guard dog are joined by a cast of infected, black and purple-hued Operator Skins and Weapon Blueprints earned exclusively through BlackCell. BlackCell owners can access the Season 04 Battle Pass via the exclusive BlackCell Page, instantly unlocking the following items: The “Omen” BlackCell Operator and Skin 10% XP Boost 1,100 COD Points The “Guard Dog” Companion Finishing Move The “Hellblock” Mastercraft Blueprint for the Ladra SMG The “Kill Tally” Gun Screen The “BlackCell” Clan Tag (showcased in Lobbies and Winner’s Circles) BlackCell owners get access to page after page of additional exclusive rewards within the Season 04 Battle Pass, including: Seven BlackCell-exclusive skins for Stitch (two skins), Bailey, Payne, Caine, Brutus, and Adler.  Seven BlackCell-exclusive Weapon Blueprints for the Krig C (Assault Rifle), XMG (LMG), SWAT 5.56 (Marksman Rifle), ASG-98 (Shotgun), FFAR 1 (Assault Rifle), Model L (Assault Rifle), LC10 (SMG) Over 130 item rewards (Battle Pass and BlackCell related) for those who fully complete the Season 04 BlackCell Battle Pass. As usual, players who upgrade to BlackCell after purchasing the Battle Pass will also receive back the COD Points they spent. BlackCell Daily Challenges: Players with BlackCell will receive additional Daily Challenges throughout Season 04 for Multiplayer, Zombies, and Call of Duty: Warzone, giving even more chances to rake in the XP during your play sessions! BlackCell Loyalty Bonus: Players who purchased BlackCell in a previous Black Ops 6season and go on to purchase Season 04 BlackCell will earn a permanent 10% Player and Weapon XP Loyalty Bonus, up to 30% for players who purchased Season 01, Season 02, and Season 03 BlackCell! The return of Stitch signals a shift in the battles ahead, requiring new Operators to meet the demands of the intensifying conflict. Predict a swift demise for your opponents with Omen leading BlackCell, joined by Stitch at the head of the Battle Pass plus a special appearance by Eve Macarro from Ballerina. Omen (BlackCell, Crimson One, Launch) “Omen” Operator: BlackCell Instant Reward Page It’s time for lockdown. Omen is a presence who strikes fear even in the world’s most dangerous criminals, with an almost preternatural ability to keep even the most sinister prisoners in line. Stitch (Battle Pass, Rogue Black Ops, Launch) “Supermax” and “Yard Dog” Skins: Battle Pass Instant Reward Page, Battle Pass Completion Page Until recently, Stitch was assumed dead. Instead of eliminating his enemy, however, Adler sent him off to a black site prison. Now the time has come, and following a daring jailbreak, Stitch is once again free. Adler needs his help cracking the codenames that will finally lead to the Pantheon moles, but at what cost? Ballerina (Bundle, Crimson One, In-Season) Store Bundle Seeking revenge for her slain father, Eve Macarro embarks on a relentless mission against the High Table’s most feared opponents in Ballerina, the highly anticipated new action film from the World of John Wick. Deploy as the elite assassin in one of two looks in the Ballerina Bundle arriving in Season 04. Participate in a new round of scheduled Events across Multiplayer, Zombies, and Call of Duty: Warzone. Earn rewards like new weapons, special attachments, and more. Here’s a first look at the Events to come (with more announcements in the Season 04 Reloaded blog): Event: Ballerina (MP, ZM, WZ, In-Season) Activation Dates: June 5 to June 12 Total Rewards: 10 (+ One BlackCell reward) Enter the world of John Wick with the new Ballerina Event. Prove your capabilities as a supreme assassin by slaying your way across Multiplayer, Zombies, and Call of Duty: Warzone. Rewards include the new Essex Model 07 Marksman Rifle and a Ballerina-themed Nunchuck Melee Blueprint for BlackCell Owners. Event: Rivals (MP, ZM, WZ, In-Season) Activation Dates: June 12 to June 26 Total Rewards: 15 (+ One BlackCell reward) Enemies become allies in the Rivals Event, when Stitch brings his code-cracking expertise to help uncover the real names of the final Pantheon moles in the CIA. The goal is simple; prove you’re the most proficient Operator by earning XP across all game modes and unlock a plethora of impressive free items. Dominate your enemies to become the first to unlock rewards including the Stryder .22 3-Round Burst Mod (Attachment) and Grim Reaper (Scorestreak). Events: King of the Dead, Master of Grief (Zombies, Mid-Season) Activation Dates (King of the Dead): June 26 to July 3 Activation Dates (Master of Grief): July 10 to July 17 King of the Dead: “Eliminate zombies in any Zombie mode to earn points to climb the leaderboard.” Master of Grief: “Collect Essence in Grief to earn points to climb the leaderboard.” Earn points by slaying all types of undead! As you’d expect, you receive more points for dispatching the harder zombie types. This, in turn, causes you to climb the Zombies leaderboard, and once the Event is over, rewards will be granted based on your leaderboard position. Everyone receives some kind of reward, but to obtain the really good stuff, it’s time to perfect your Special and Elite Zombies slaying!  Season 04 brings new Bundles to the Store, including a special crossover event with Ballerina. Get more intel in the Season 04 BlackCell, Battle Pass, and Bundles blog arriving before launch. Tracer Pack: Ballerina Choose one of two Operator Skins for Eve, a red sequin dress as “Eve Macarro” or a sleek black professional fit as the “Ruska Rogue.” Bring light to the darkness with three Legendary Weapon Blueprints featuring High Table Coin Tracers and High Table Coin Death FX: the “Relevé” AK-74 Assault Rifle, “Plié” Saug SMG, and the “Arabesque” 9MM PM Pistol. For a snazzier elimination, take them out with the “Dance With Death” Finishing Move. Balance lethality and elegance with additional Ballerina themed content, including the “Pirouette” Emote, “Keepsake” Weapon Charm, animated “Caged Grace” Emblem, animated “Pas de Duex Calling Card, and the “Take a Bow” Loading Screen. Tracer Pack: Ink and Smoke Reactive Ultra Skin Add some class to your deployments with the cel-shaded, black and greyscale “Hardboiled” Ultra Operator Skin for Weaver, accompanied by the Reactive “Lethal Inspection” AMES 85 Assault Rifle and “Personal Detective” ASG-89 Shotgun Weapon Blueprints, both featuring Noir Tracers and Ink Annihilation Death FX. For a closer finish, leap for their throats using the “Wire Cut” Finishing Move. When taking on the undead, equip the “Search Engine” Wonder Weapon skin for the Thrustodyne M23 and show off your Zombies credentials with the “Sidepiece” Weapon Charm, “Dead Noir” Weapon Sticker, “Evidence” Spray, “Greyscale” Loading Screen, and the consumable Time Out GobbleGum. Other Incoming Bundles There’s plenty more awesome new content arriving in the Season 04 Store, including the “Tracer Pack: Olympus Bolt Mastercraft Ultra Skin” Bundle, featuring an electrifying Mastercraft Weapon Blueprint for the new LC10 SMG alongside a divine Ultra Operator Skin for Caine. Also incoming is the “Tracer Pack: System Breach” Bundle, and the “Tracer Pack: The Goat Ultra Skin” Bundle with a Goat Companion Finishing Move. See more of the season’s upcoming Bundles and more in the Season 04 BlackCell, Battle Pass, and Store Bundle blog. Call of Duty League, the pinnacle of competitive Call of Duty, is bringing its fourth and final Major of the season to the DreamHack Dallas show floor. Guests with a CDL add-on ticket can watch Major IV live, where the 12 Call of Duty League teams will battle it out for the final CDL points to qualify for 2025 Call of Duty League Championship in June. Ensure you get into the action by tuning in and watching Major IV live on YouTube. Be sure to link your YouTube account with your Activision ID Account to earn some special viewership rewards (shown above). Click here for more intel. The event starts at 10:300 AM PT Friday, May 23, and continuing at 10:30 AM PT Saturday May 24 with the Finals beginning at 10:30 AM PT Sunday May 25.  Black Ops 6 is available now, and now’s definitely the time to experience the spy action thriller Campaign, the in-depth tactical chaos of best-in-class Multiplayer, and to soak in the gory glory of an incredible round-based Zombies experience with five maps and the brand-new Grief mode! Click here to Purchase Black Ops 6. © 2025 Activision Publishing, Inc. ACTIVISION, CALL OF DUTY, CALL OF DUTY WARZONE, MODERN WARFARE, CALL OF DUTY LEAGUE, and CALL OF DUTY BLACK OPS are trademarks of Activision Publishing, Inc. All other trademarks and trade names are the property of their respective owners. For more information, please visit www.callofduty.com and www.youtube.com/callofduty, and follow @Activision and @CallofDuty on X, Instagram, and Facebook. For Call of Duty Updates, follow @CODUpdates on X. ®, TM & © 2025 Lions Gate Entertainment Inc. and related companies. All Rights Reserved.

May 14, 2025Ravie LakshmananVulnerability / Endpoint Security Ivanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote code execution. The vulnerabilities in question are listed below - CVE-2025-4427 (CVSS score: 5.3) - An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials CVE-2025-4428 (CVSS score: 7.2) - A remote code execution vulnerability in Ivanti Endpoint Manager Mobile allowing attackers to execute arbitrary code on the target system The flaws impact the following versions of the product - 11.12.0.4 and prior (Fixed in 11.12.0.5) 12.3.0.1 and prior (Fixed in 12.3.0.2) 12.4.0.1 and prior (Fixed in 12.4.0.2) 12.5.0.0 and prior (Fixed in 12.5.0.1) Ivanti, which credited CERT-EU for reporting the issues, said it's "aware of a very limited number of customers who have been exploited at the time of disclosure" and that the vulnerabilities are "associated with two open-source libraries integrated into EPMM." The company, however, did not disclose the names of the impacted libraries. It's also not known what other software applications relying on the two libraries could be affected. Furthermore, the company said it's still investigating the cases, and that it does not have reliable indicators of compromise associated with the malicious activity. "The risk to customers is significantly reduced if they already filter access to the API using either the built-in Portal ACLs functionality or an external web application firewall," Ivanti noted. "The issue only affects the on-prem EPMM product. It is not present in Ivanti Neurons for MDM, Ivanti's cloud-based unified endpoint management solution, Ivanti Sentry, or any other Ivanti products." Separately, Ivanti has also shipped patches to contain an authentication bypass flaw in on-premise versions of Neurons for ITSM (CVE-2025-22462, CVSS score: 9.8) that could allow a remote unauthenticated attacker to gain administrative access to the system. There is no evidence that the security defect has been exploited in the wild. With zero-days in Ivanti appliances becoming a lightning rod for threat actors in recent years, it's imperative that users move quickly to update their instances to the latest versions for optimal protection. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE    