Do Son A critical 9.3 CVSS reflected XSS flaw (CVE-2026-29183) in SiYuan's dynamic icon API lets attackers steal private notes via SVG injection. Update now.
Apache ZooKeeper vulnerabilities (CVE-2026-24281, CVE-2026-24308) allow PTR record spoofing and sensitive data leaks in logs. Update clusters immediately.
Researchers uncover a massive campaign by a Vietnamese operator using GitHub and Polygon blockchain smart contracts to distribute the StealC infostealer.
A critical 9.3 CVSS XSS vulnerability (CVE-2026-29191) in ZITADEL's SAML endpoint allows unauthenticated 1-click account takeover. Upgrade immediately.
Unit 42 reveals the first real-world cases of Indirect Prompt Injection (IDPI), where hackers weaponize website content to bypass AI security filters.
Zscaler ThreatLabz uncovers Dust Specter, an Iran-linked cyber campaign hijacking Iraqi government infrastructure to deploy custom AI-assisted malware.
A critical 9.8 CVSS flaw (CVE-2026-27944) in Nginx UI lets hackers download and decrypt full system backups via an open API. Update and rotate secrets!
OpenAI launches Codex Security, an advanced AI agent that uses reasoning to find and fix complex vulnerabilities without the noise of false positives.
Apple overhauls its hardware lineup amidst a global DRAM famine. Discover why the 512GB Mac Studio is extinct and how the MacBook Air is being reborn.
The US Supreme Court denies AI-generated copyright, while the UK suspends its controversial "opt-out" data bill. Is the era of free AI training over?
Identity is now the primary target in cyberattacks. Attackers go after authentication systems—especially Microsoft Active Directory (AD)....
X launches "Exclusive Threads," a masterful 2.0 upgrade that lets creators paywall the climax of their stories. See how suspense is the new currency for 2026.
A dormant ruwiki script triggered a global Wikipedia lockdown. Discover how a 23-minute JavaScript worm compromised admins and forced a read-only mandate.
YggTorrent infrastructure falls to unknown hackers. Discover the massive 54,000 credit card leak, the "Turbo" tier scandal, and the new ygg.gratis clone.
Researcher @goyaramen reveals how PRC threat actors like Mustang Panda use expired domains and Cloudflare to mask their PlugX C2 infrastructure.
IAS Threat Lab unmasks Genisys, a massive AI-powered mobile ad fraud scheme hijacking smartphones to generate fake traffic and steal from advertisers.
CERT/CC reveals a major privacy flaw (CVE-2025-13476) in Viber's Cloak mode, allowing network censors to easily identify and block proxy traffic. Update now.
OpenAI launches GPT-5.4, featuring native computer control that beats human benchmarks and a 1M token context window. See the new "Professional" AI in action.
Broadcom unveils VMware Telco Cloud Platform 9 at MWC 2026, promising a 40% TCO reduction through AI-native architecture and sovereign cloud-ready infrastructure.
Discover why Apple's new MacBook Neo is stuck with 8GB of RAM. We dive into the A18 Pro chip constraints and the trade-offs of this $599 ultra-entry laptop.
OpenAI is pulling the plug on ChatGPT's native checkout. Discover why the "Amazon killer" is pivoting to an ad-based discovery model after a Shopify slump.
A new Check Point Research report reveals how Iranian-nexus threat actors compromise IP cameras in the Middle East for real-time missile reconnaissance.