Security
Next.js Patches Two Critical Unauthenticated RCE Flaws
Next.js 16.4.1 and 15.5.28 fix two critical RCE flaws, including CVE-2026-96889 in SVG image optimization, plus a Server Actions DoS.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
Next.js Patches Two Critical Unauthenticated RCE Flaws
Next.js 16.4.1 and 15.5.28 fix two critical RCE flaws, including CVE-2026-96889 in SVG image optimization, plus a Server…
SiteGuard WAF Flaw CVE-2026-106931 Exploited in Attacks
CVE-2026-106931 in SiteGuard WAF Server Edition is exploited, letting attackers run OS commands as root. Fixed in Ver8.00…
Closing Security Gaps by Identifying Unmanaged Devices
The scan finished just before noon, and the number on the screen was wrong. Security had asked for…
PwnEscape Linux Kernel Flaw Lets Guests Escape to Host
CVE-2026-99999 (PwnEscape) is a critical Linux kernel flaw that lets a VM guest leak host memory and escape…
Skype for Business Server RCE CVE-2026-70297 Patched
Microsoft has patched a remote code execution flaw in Skype for Business Server that lets an ordinary logged-in…
Tor Relays Hacked to Intercept SSH Connections
The Tor Project is urging Linux relay operators to audit their servers after attackers broke into some volunteer-run…
AdFection Attack Hid Zero-Click Spyware Inside Online Ads
AdFection: Citizen Lab says Discover-Tech used targeted ads to deliver Candiru zero-click spyware to Al Jazeera devices.
Microsoft Defender for Endpoint Comes to Linux Desktops
Microsoft Defender for Endpoint now supports Linux desktops in public preview, using the server agent. Plan 2 or…
curl Patches High-Severity HTTP/2 Use-After-Free Flaw
curl 8.23.0 fixes CVE-2026-92392, a high-severity HTTP/2 upload use-after-free that a malicious server can turn into code execution.
6 Limits of AI Ad-Blocking Metrics That Researchers Should Know
What the Counters Actually Measure Counters of blocked AI ads are being read as threat intelligence, and nothing…
Low-Altitude Airspace Has an Identification Problem
Every drone is a device with a location, a controller, a signal, and a flight path. What is…
OpenAI Engineer Arrested Over Hidden Recording Device
OpenAI engineer Abdulrahman Alfozan is charged with planting an encrypted audio recorder behind a TV in an executive…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.