Do Son Vitess patches critical flaws (CVE-2026-27969 & 27965) where poisoned backup manifests lead to path traversal and RCE during restoration. Update to v23.0.3 now.
Langflow 1.8.0 patches a critical 9.8 CVSS RCE vulnerability (CVE-2026-27966) where a hardcoded "allow_dangerous_code" setting enables prompt injection attacks.
Vikunja v2.0.1 patches critical flaws (CVE-2026-27575 & 28268) where "immortal" reset tokens and persistent sessions allow attackers to hijack accounts forever.
Socket uncovers a malicious Go module mimicking golang.org/x/crypto. It steals passwords via ReadPassword and deploys the Rekoobe backdoor on Linux systems.
Cisco Talos uncovers "Dohdoor," a stealthy backdoor used by UAT-10027. It abuses DNS-over-HTTPS via Cloudflare to spy on U.S. healthcare and education sectors.
Group-IB uncovers "GTFire," a massive credential-harvesting operation abusing Google Firebase and Translate to bypass security filters in 100+ countries.
CYJAX uncovers "OCRFix," a stealthy campaign using fake Tesseract OCR sites, ClickFix social engineering, and EtherHiding to bypass security via blockchain.
OneUptime 10.0.7 patches a critical 10.0 CVSS vulnerability (CVE-2026-27728). Attackers can use traceroute probes to execute root commands and steal data.
Node.js library basic-ftp patches a critical 9.1 CVSS path traversal flaw (CVE-2026-27699). Malicious FTP servers can overwrite any file on the client machine.
Angular patches a critical 9.2 CVSS SSRF vulnerability (CVE-2026-27739). Attackers can manipulate Host headers to steal credentials and probe internal networks.
The Scattered Lapsus$ Hunters "supergroup" is paying $1,000 per successful vishing call. Discover how they use female recruits to bypass corporate IT security.
The last 50% percent reduction of the price of bitcoin has dramatically changed the trend of crypto...
Google and Mandiant disrupt UNC2814, a China-nexus group using the GRIDTIDE backdoor to hide command-and-control traffic inside Google Sheets across 42 nations.
CISA issues an urgent ICS advisory (ICSA-26-057-04) for the EV2GO charging platform. Critical 9.4 severity flaws allow for session hijacking and station impersonation.
GreyNoise detects a coordinated surge in SonicWall reconnaissance. With over 84,000 scans, attackers are mapping VPNs for Akira and Fog ransomware strikes.
Anthropic has acquired Vercept to solve the "perception problem" in AI. Claude can now see and navigate any software interface with human-level precision.
In a historic first, NATO has certified retail iPhones and iPads running iOS 26 for "Restricted" data, proving Apple’s consumer hardware is officially war-ready.
Google’s Nano Banana 2 is here! Powered by Gemini 3.1 Flash, it delivers 4K fidelity, 5-character consistency, and Pro-level speed across all Google apps.
Apple’s "Big Week" starts March 2. Get ready for the M5 MacBook lineup, the budget-friendly iPhone 17e, and a rumored sub-$700 vibrant entry-level MacBook.
Xcode 26.3 is out! Transform your workflow with Agentic Coding. Native Claude and Codex integration lets AI agents write, build, and test your apps for you.
Amazon is forcing "undivided attention" on Twitch. New rules freeze ad timers if you mute, minimize, or switch tabs. Is this the end of background viewing?
Powering the Core: Anthropic Offers 10,000 Free “Claude Max 20x” Subscriptions to Open-Source Heroes
Powering the Core: Anthropic Offers 10,000 Free “Claude Max 20x” Subscriptions to Open-Source Heroes
Anthropic is giving away 10,000 free 6-month Claude Max 20x subscriptions to elite open-source maintainers. Apply by June 30, 2026, to claim your AI power.