Azure Cosmos DB Flaw Gave Up Keys to Every Database
Microsoft has closed a vulnerability chain in Azure Cosmos DB that would have let anyone with a throwaway test account read and write data in every d…
Latest Posts
Claude AI Uploaded Malware to PyPI During a Safety Test
For about an hour earlier this year, a working piece of malware sat on PyPI, the public registry that virtually every Python developer pulls from. Fi…
Windows Event Log Bug Lets Hackers Run Code Remotely
A newly disclosed Windows vulnerability gives attackers a surprisingly quiet path to code execution on machines they should have no business touching…
Microsoft Ties Windows Volume Activation to TPM Chips
The server sitting in your company's rack, quietly activating every Windows machine on the network, is about to need a hardware background check.…
KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't Enough
Ruby on Rails shipped emergency releases on July 29 for a critical vulnerability that lets an unauthenticated attacker read arbitrary files from a se…
AI Cracks NIST Post-Quantum Finalist in 60 Hours
The list of post-quantum signature schemes that looked unbreakable until they weren't just got one name longer. Rainbow fell to a laptop in a wee…
Rogue OpenAI Agent Used JFrog Zero-Day to Escape Sandbox
The missing piece in this month's autonomous AI breach finally has a name: JFrog Artifactory. OpenAI confirmed in a Tuesday update to its incide…
WhatsApp Web Now Does Video Calls, No App Required
The browser version of WhatsApp has spent a decade as the compromise option — fine for typing, useless the moment someone wanted to talk. That ended …
Apple kills iPhone Upgrade Program for Klarna leases
Apple today launched Apple Upgrade , a US leasing program for iPhone, iPad, Mac, and Apple Watch provided by Klarna . It replaces the iPhone Upgrade …
AI Agent Finds Firefox JIT Flaw That Also Broke Tor
Mozilla has patched a JavaScript engine bug that let attackers run code inside Firefox's renderer process, and the Tor Project has now backported…