KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't Enough
Ruby on Rails shipped emergency releases on July 29 for a critical vulnerability that lets an unauthenticated attacker read arbitrary files from a se…
Latest Posts
AI Cracks NIST Post-Quantum Finalist in 60 Hours
The list of post-quantum signature schemes that looked unbreakable until they weren't just got one name longer. Rainbow fell to a laptop in a wee…
Rogue OpenAI Agent Used JFrog Zero-Day to Escape Sandbox
The missing piece in this month's autonomous AI breach finally has a name: JFrog Artifactory. OpenAI confirmed in a Tuesday update to its incide…
WhatsApp Web Now Does Video Calls, No App Required
The browser version of WhatsApp has spent a decade as the compromise option — fine for typing, useless the moment someone wanted to talk. That ended …
Apple kills iPhone Upgrade Program for Klarna leases
Apple today launched Apple Upgrade , a US leasing program for iPhone, iPad, Mac, and Apple Watch provided by Klarna . It replaces the iPhone Upgrade …
AI Agent Finds Firefox JIT Flaw That Also Broke Tor
Mozilla has patched a JavaScript engine bug that let attackers run code inside Firefox's renderer process, and the Tor Project has now backported…
Apple MIE Bypassed by Two macOS Kernel Bugs
Security firm Calif has released technical details of the two macOS vulnerabilities it used to break Apple's Memory Integrity Enforcement ( MIE )…
Microsoft's Cyber AI Beats Frontier Models at Half the Cost
Microsoft's answer to AI-powered attackers isn't a bigger model. It's a smaller, cheaper one that already knows what it's hunting for…
UnAuth vBulletin RCE Exploit Goes Public Weeks After Patch
A working exploit for a critical vBulletin flaw is now circulating in the open, handing unauthenticated attackers a direct route to running PHP code …
Best 9 MCP Security Tools in 2026
Key Takeaways 5 POINTS · 90 SEC Every server is a new door. MCP is now the connective tissue of enterprise …