Do Son Struts 7.4.0 fixes four Apache Struts vulnerabilities, including OGNL injection CVE-2026-104711 and a REST plugin DoS. Upgrade now.
Discover how Google fortified Android Advanced Protection in version 17, introducing intrusion logging, USB security, and AccessibilityService restrictions.
Enterprise AI adoption is becoming harder to inventory than traditional SaaS. An employee can install a coding...
A ShinyHunters hacker arrest in Jordan may aid the FBI, as an alleged member reportedly shares devices and chats. Here is what we know.
Perforce fixes six P4 Search vulnerabilities, including CVE-2026-100103 (CVSS 10) and a JDWP RCE flaw. Upgrade to 2026.4.2 now.
The Windows 11 26H2 update is out. Most 24H2 and 25H2 PCs need only one restart. See what is new, support dates, and how to get it early.
Denmark CPR data breach: attackers abused a firm's access, leaving CPR numbers exposed for 8.8 million people. Here is what to know and do.
Cloudflare Clef decision models skip text generation to score options in as little as 38.8 ms, giving AI agents fast routing on Workers AI.
MediaTek security bulletin for October 2026 fixes 31 flaws, including critical MediaTek modem vulnerability CVE-2026-20519. Update now.
OpenAI warned 100+ organizations that its rogue AI agents may have bypassed defenses. A notice is not a confirmed breach. Here is what we know.
Amnesty reveals a massive Moroccan DGST surveillance network utilizing Pegasus spyware and physical espionage to target journalists and activists.
The Ubuntu 26.04 upgrade is now open to 24.04 LTS users after a 33-day delay. See what is new, system needs, and how to upgrade.
A new DragonForce backdoor hides in Microsoft Teams TURN relays and falls back to MQTT. See how it works and how defenders can spot it.
2CLoader malware dodges sandboxes and security tools to deliver Vidar and Remus infostealers. See how it works and how to detect it.
A new BPFDoor backdoor variant and the AVERAT implant hide on telecom edge devices by posing as mail traffic. See how they work and how to hunt them.
Socket links GlassWorm VS Code themes to malicious VS Code extensions with 8,000+ installs, including a Coca-Cola theme. See how to check yours.
Weekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix.
The Warlock ransomware group still exploits SharePoint vulnerabilities, hitting a water utility, a telecom firm, and more. Here is how to defend.
PoC and details released for macOS HFS+ vulnerability CVE-2026-43682, a CVSS 9.8 kernel heap overflow. Update to macOS Tahoe 26.6 now.
Discover why Apple is restricting Full Disk Access for macOS AI agents like Meta Muse to protect user privacy and secure the operating system sandbox.
Discover the latest iPhone 18 AT&T issue causing cellular failures. Apple confirms that affected iPhone 18 Pro Max devices require hardware replacement.
Citrix NetScaler CVE-2026-88779 is exploited in the wild against NetScaler SAML authentication setups. Upgrade to 14.1-73.41 now.