Researcher Breaks Microsoft Edge Without AI, Logic Bugs Only
Orange Tsai detailed a Microsoft Edge sandbox escape chaining five logic bugs with no memory corruption — patched…
All Post
Android ‘SMS of Death’ Zero-Click Flaw That Drops Emergency Calls Fixed in November Patch
SMS of Death: Google fixed the zero-click Android WAP Push bug in June despite calling it a non-security…
WordPress 7.1.4 Fixes 22 Flaws Including Update-Process RCE
WordPress 7.1.4 fixes 22 vulnerabilities, including an unauthenticated update-process RCE and stored XSS bugs in the Interactivity API.
Claude Found 62 Chrome CVEs and a Zero-Click Linux RCE
Anthropic’s Claude model built five exploit chains in Chrome, Safari, Android, Windows and Linux, including zero-click root via…
Rocket.new Data Breach: Encrypted API Keys Exposed
Rocket.new says an attacker obtained the encrypted API keys of 0.2% of users on 27 October 2026. All…
Token Approvals Need Separate Rules in AI Agent Wallets
Under Ethereum’s ERC-20 token standard, an approval can authorise another address to spend cryptocurrency from a wallet without…
Critical GoAhead Flaw Accepts Revoked mTLS Certificates
GoAhead, the embedded web server behind the management pages of routers, printers, firewalls, and industrial controllers, has patched…
Roblox Accused of Scraping 145.5GB of 3D Models
Roblox is accused of scraping 145.5GB of 3D models, including adult content, from Open3DLab, SFMLab and SmutBase via…
PSN Family Hack: Sony Investigates Child Account Exploit
Sony is investigating a PSN Family Management flaw that let hackers add child accounts without 2FA. How to…
Sony Network Data Breach: 2.58 Million Customers’ Data Exposed
So-net data breach exposes 2.58 million Sony ISP and Docomo plala customers, plus 54,401 email passwords.