Grafana Labs Refuses Ransom After GitHub CI Flaw Exposed Its Source Code
Grafana Labs publicly confirmed this week that attackers stole a GitHub access token through a misconfigured CI/CD pipeline, downloaded private sourc…
Latest Posts
Google's AI Search Guide Is Out — Explained Without the Hype
If you've been following the chatter around "Generative Engine Optimization" or "Answer Engine Optimization," you've prob…
Microsoft Exchange Zero-Day Exploited in the Wild — and Pwn2Own Researchers Just Made It Worse
Microsoft Exchange Server is having a very bad week. While threat actors are already exploiting a critical cross-site scripting vulnerability in the …
Linux Kernel Had a Six-Year Bug That Let Anyone Steal SSH Host Keys and Root Passwords
A logic flaw sitting quietly in the Linux kernel since at least 2020 — possibly longer — just got a working exploit, a public proof-of-concept, and a…
Google Quietly Cut New Account Storage to 5GB — Your Phone Number Is Now the Price of 15GB
Google has changed the rules on free storage for new accounts — and most users won't notice until it's too late. New Google accounts now defa…
Google's Security Team Built a Zero-Click Root Exploit for the Pixel 10
Google's elite Project Zero security team has done it again — this time turning the Pixel 10 into a case study for how hardware driver vulnerabil…
NGINX Rift: An 18-Year-Old Bug Lets Hackers Hijack One-Third of the Internet's Web Servers
A memory corruption flaw in NGINX's source code, hidden since 2008, now has a working exploit. An unauthenticated attacker anywhere on the intern…
Linux Kernel Strikes Again: "Fragnesia" Is the Third Root-Level Flaw in Two Weeks
Linux administrators have barely had time to recover from Copy Fail and Dirty Frag — and now there's a third exploit joining the same dangerous f…
Composer Bug Silently Dumped GitHub Tokens Into CI Logs — Patch Now
Millions of PHP developers who rely on Composer for dependency management were silently exposed to a token-leaking vulnerability this week — one that…
WhatsApp's New Incognito AI Chat Is Genuinely Private — But Read the Fine Print
WhatsApp today launched Incognito Chat with Meta AI, a mode where conversations are processed in a secure environment that even Meta cannot access, w…