Zyxel GS1900 Switches Targeted in Active Attacks, CISA Warns
Attackers are actively exploiting CVE-2026-7273 in Zyxel GS1900 switches, with CISA urging organizations to patch affected devices.
AMD Crosses $1 Trillion Valuation as AI Demand Drives Record Rally
AMD has joined the $1 trillion club as investors bet on its growing role in AI chips and data-center computing.
WordPress Click2Shell Flaw Enables Remote Code Execution
A newly disclosed WordPress Core vulnerability dubbed Click2Shell can allow attackers to force-install themes and execute PHP code when a logged-in administrator visits a crafted URL.
Google Fined €403 Million Over GDPR Location Data Violations
Ireland’s Data Protection Commission has fined Google €403 million over GDPR violations involving the processing, transparency and retention of users’ location data.
iPhone Owners Can Claim Money From Apple’s $250 Million Siri Settlement
Eligible US iPhone owners can now claim money from Apple’s $250 million Siri AI settlement. Claims must be filed by December 21, 2026.
Paramount Settles Lawsuit Blocking $110 Billion Warner Bros. Merger
Paramount has reached a settlement with California and 11 other states over its planned $110 billion acquisition of Warner Bros. Discovery, removing a major legal hurdle to the proposed merger.
Facebook, Instagram and Threads Down for Some Users
Facebook, Instagram, Messenger, and Threads appear to be experiencing service problems, with users reporting errors and loading issues across Meta’s platforms.
SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code Execution
SolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.
WordPress Click2Shell Flaw Lets Attackers Force Theme Installs
WordPress has patched the Click2Shell vulnerability, a high-severity flaw that could allow attackers to force logged-in administrators to install a theme using a specially crafted URL.
Google Gemini Accessed Real Companies During AI Security Test
Google’s Gemini AI model accessed protected systems belonging to real companies during a cybersecurity evaluation in May 2026, according to a report by The Wall Street Journal.
How to Spot a Fake Tech Support Pop-Up Before You Call
Fake tech support pop-ups can look like serious security warnings. Here's how to recognize the common signs and avoid calling a scammer.
Foreign Hacker Target Two Colorado Water Systems, Officials Say
Foreign hackers targeted and manipulated equipment at two small water systems in Colorado in late August, according to the office of Colorado Governor Jared Polis.
Critical Check Point Flaw Allows Unauthenticated Root Code Execution
Check Point has released a security update for a critical vulnerability in its Security Management and Log Servers that could allow an unauthenticated attacker to execute code with root privileges over the network.
Windows 11 24H2 Home and Pro Reach End of Support in October
Microsoft has reminded users that Windows 11 version 24H2 Home and Pro editions will stop receiving updates on October 13, 2026.
Apple Changes App Tracking Rules in Europe After Antitrust Probe
Apple has agreed to change the way apps request permission to track users across other apps and websites in the European Union following a multi-year antitrust investigation by Germany’s federal competition regulator and other European authorities.
How Social Media Algorithms Decide What You See
Social media feeds are not simply a list of posts from people you follow. Algorithms analyze your behavior, interests, interactions and other signals to decide what content appears in front of you.
FBI Seizes NightmareStresser Domains Linked to Thousands of DDoS Attacks
The U.S. Federal Bureau of Investigation (FBI) has seized the domains used by NightmareStresser, one of the longest-running distributed denial-of-service (DDoS) platforms.
OpenAI to Publish Reports on AI Model Misalignment
OpenAI has announced plans to publish ongoing reports about unexpected or unauthorised behaviour by its artificial intelligence models, acknowledging that the industry has yet to fully solve the challenge of keeping increasingly capable AI systems aligned with human instructions.
BIND 9 Update Fixes 14 Security Flaws, Including DoH Crash Bug
ISC has released new BIND versions to fix 14 security vulnerabilities, including a high-severity flaw that can crash DNS servers handling DNS-over-HTTPS requests.
Gyazo Data Breach Exposes 23.6 Million User Records and Image Metadata
A security breach at Gyazo, Helpfeel’s image-sharing service, has exposed about 23.62 million user records along with metadata linked to roughly 490 million images, the Kyoto-based company said.
