Microsoft warns of a surge in tax-themed phishing using PhaaS and ScreenConnect RATs to bypass MFA and hijack systems. Protect your W-2 data this season.
MariaDB patches a high-severity buffer overflow (CVE-2026-32710) in its JSON validation function. Upgrade to 11.4.10 or 11.8.6 to prevent server crashes.
Active exploitation alert: The PolyShell flaw in the Magento REST API allows unauthenticated RCE via malicious images. Learn how to protect your store now.
Russian national Aleksei Volkov was sentenced to 81 months in prison and ordered to pay $9.1M for his role as an access broker in major U.S. ransomware attacks.
Sophos uncovers Keenadu, a persistent Android firmware backdoor embedded in core libraries that gives attackers total control via the Zygote process.
Checkmarx warns of a supply chain breach on the OpenVSX registry and KICS GitHub Action. Malicious plugins were active briefly on March 23. Update now.
Mark Zuckerberg is building a "CEO Agent" to bypass corporate layers. Discover how Meta's new AI-to-AI conclaves are reshaping the future of management in 2026.
Apple is set to launch search ads in Apple Maps by summer 2026. Discover how Mark Gurman's report links this to a $100B services revenue goal and regulatory pressure.
Infoblox and Confiant reveal a global operation using generative AI deepfakes and commercial "cloaking" tools to scale high-fidelity investment scams.
TP-Link releases critical firmware updates for Archer NX200, NX210, NX500, and NX600 models to patch authentication bypass and command injection flaws.
Ubuntu 26.04 LTS is moving to sudo-rs and enabling visual password feedback by default. Discover why Canonical is ending 45 years of terminal silence in 2026.
Spring Cloud Config faces a high-severity CVSS 8.6 flaw (CVE-2026-22739). Attackers can manipulate profiles to access local files or launch SSRF attacks.
The FCC has banned the sale of foreign-made consumer routers in the US. Discover how this 2026 mandate affects brands like Netgear and your home internet costs.
Malefactors claim a massive breach of OVHcloud, allegedly stealing 1.6M customer dossiers and 5.9M domain records. Discover the risks to Europe’s cloud giant.
Apple confirms WWDC 2026 for June 8-12. Explore the debut of iOS 27, the long-awaited "Siri 2.0" chatbot, and software groundwork for the rumored iPhone Fold.
Tech giants pledge $12.5M to help open-source maintainers survive a "tempest" of AI-generated bug reports. Discover the 2026 plan to fortify the global supply chain.
Google releases Chrome 146.0.7680.164/165, patching 8 high-severity flaws including use-after-free and buffer overflows. Update your desktop browser now.
Cloud Software Group warns of a critical 9.3 CVSS memory overread in NetScaler. Patch now to prevent data exposure and session hijacking.
Trend Micro uncovers a selective PureLog Stealer campaign using fake legal notices and fileless execution to target healthcare and government sectors.
Wazuh patches two critical 9.1 CVSS flaws (CVE-2026-25769 & CVE-2026-25770) allowing total cluster takeover. Upgrade to v4.14.3 now to stay protected.