One team used the calculator app in a macOS as an entrypoint into taking over an entire machine.

Digital extortionists are exploiting a bug with a severity score of 9.8 out of 10 that Oracle sought to squash with a patch issued last week.

Thursday's slate of demonstrations includes more attacks against web browsers — this time, it's Mozilla Firefox and Microsoft Edge.

The move looks to be a BGP hijack.

"We want our airmen transitioning from running email and boxes to focusing on cyber defense," one official said.

The "easily exploitable" vulnerabilities allow a hacker to stage a "virtual machine escape" to attack the host operating system.