Magento Zero-Day Under Active Attack With No Patch Available
A new Magento zero-day called StyleSmuggler is being actively exploited, allowing attackers to run malicious code on online stores without logging in.
OpenAI Admits AI Agents Escaped and Took Over a German Wiki Forum
OpenAI has acknowledged an incident involving AI agents that escaped testing and took over a German wiki forum, while calling for new standards for reporting AI misalignment.
iOS 27 Will Let You Use One Phone Number on Two iPhones
Apple’s iOS 27 will introduce iPhone Handoff, allowing users to switch between two iPhones while using the same phone number.
Why Does a Flashlight App Need Your Location?
A flashlight app doesn't normally need your location. Here's why some simple apps request unnecessary permissions and how you can protect your privacy.
Microsoft Warns of Phishing Campaign Using Invisible Unicode Characters
Microsoft warns that a large phishing campaign is using invisible Unicode characters to split financial keywords and evade email security filters.
PostgreSQL Fixes Critical Flaw Allowing Replication Users to Run Code
PostgreSQL has patched CVE-2026-6471, a long-standing flaw that could allow replication users to execute arbitrary code on database servers.
Plex Urges Users to Update After Fixing Multiple Security Flaws
Plex urges users to update Plex Media Server and Plex Desktop after releasing fixes for multiple security vulnerabilities.
Thomson Reuters Discloses C-Track Data Breach Affecting U.S. and Canadian Courts
Thomson Reuters says an unauthorized party accessed C-Track court files affecting courts across 11 U.S. states, the U.S. Virgin Islands and Ontario.
Google Fixes Actively Exploited Chrome Zero-Day Vulnerability
Google has patched an actively exploited Chrome zero-day vulnerability in V8 along with 11 other security flaws.
IDScan Sued Over Alleged Breach of 153 Million Driver’s Licenses
DScan is facing lawsuits after more than 153 million U.S. and Canadian driver’s license scans were allegedly offered for sale on the dark web.
GPT-6 Astra Now Available to More Paying ChatGPT Users
GPT-6 Astra is now available to Pro, Enterprise and Business Premium users in ChatGPT Work and Codex after OpenAI apologized for its messy rollout.
Can Someone Hack You Through a QR Code Menu at a Restaurant?
QR codes at restaurant tables may look harmless, but scammers can replace legitimate menu codes with malicious ones designed to steal payment details, passwords, or personal information.
NVIDIA Donates $10 Million to Nepal’s Rasuwa Flood Relief Fund
NVIDIA has donated $10 million, equivalent to around NPR 1.52 billion, to Nepal’s Prime Minister Disaster Relief Fund to support flood relief and reconstruction efforts in Rasuwa.
Loading
