FortiSIEM vulnerability CVE-2026-106173 is exploited in the wild after Horizon3 released details and a PoC exploit. Upgrade to 7.5.1 now.
PHP2Shell affected products list: vendor patch status for CVE-2026-109618 and CVE-2026-109619 across PAN-OS, QNAP, Cisco, Citrix, F5 and more.
A PoC and full details are public for CVE-2026-43501 (CVSS 9.8), a Linux kernel IPv6 vulnerability in RPL source routing. Update your kernel now.
Zscaler ThreatLabz exposes a global ARTEX AI hacking campaign. See how an operator used ARTEX AI hacking tools, DeepSeek, GLM, and Grok to steal data.
Apple launched the iOS 27.1 iPhone Duo update exclusively for its foldable smartphone, introducing adaptive layouts and dedicated SDK tools.
OpenAI offline world training replaces live internet access after a September 20 DNS escape paused frontier training for 11 days.
A Google privacy policy change adds an exception to its Gmail ad pledge via Personal Intelligence. See how to turn it off.
DOJ officials announced a Cambodia crypto scam extradition after Zheng Zhao allegedly helped launder $36.9M stolen from 174 US victims via USDT.
A Skynet LLMjacking agent hijacks exposed AI models to scan, hack servers and mine crypto for 100,000 steps, while victims pay the bill.
Palo Alto confirms PAN-OS PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 affect the firewall management interface. Restrict access and patch.
PHP warns of CVE-2026-115560, a PHP session vulnerability that follows PHP2Shell. Disable session.upload_progress until the next bugfix release.
The Switch 2 jailbreak NS2JB runs native code on firmware 23.0.1 through SmileBASIC 4, built with Codex. It is not permanent.
Qualcomm global layoffs will begin in November 2026 as smartphone shipments plunge 20 percent and memory costs strain device manufacturers worldwide.
The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now.
Three LiteSpeed Cache vulnerabilities, including stored XSS flaws CVE-2026-113499 and CVE-2026-113500, affect 7M+ WordPress sites. Update to 7.9.2.
The OpenBSD 8.0 release brings OpenSSH 10.6, kernel mitigations, and immediate day-one errata patches addressing critical IPsec memory corruption.
SOCRadar reveals 7 servers run by INC Ransomware affiliates, exposing an INC Ransomware affiliates AI workbench, Phantom, and 46 encryptors.
The Australian App Store ruling orders Apple to allow sideloading and outside payments by March 1, 2027. Apple will appeal.
A CAPCOM ID data breach exposed 11.77 million records, including emails and login activity. No payment data was leaked.
The Arc browser shutdown arrives December 22, 2026. Export your data now and move to Dia before accounts are deleted.