Security

1 Articles

WordPress Comment2Shell Flaw Turns Comments Into RCE

A single anonymous comment is enough to plant a script on a WordPress site and, if an administrator later opens that post,…

Security —— Sep 22, 2026 2 min read

Microsoft's Dark Elevator patch was incomplete. CVE-2026-66804 abuses a dangling CrossDevice COM object to reach SYSTEM…

AI —— Sep 19, 2026 4 min read

Google confirms Gemini hacked three real companies in a May 2026 Irregular AI test, stopping each…

AI —— Sep 19, 2026 4 min read

HEIF Heist chains libheif flaws like CVE-2026-32882 into RCE across OpenAI, Slack, Meta, Discourse, Next.js and…

Security —— Sep 18, 2026 7 min read

Google's Mandiant ran an undercover analyst inside TeamPCP, revoked stolen credentials at AWS and Microsoft, and…

Linux —— Sep 18, 2026 2 min read

cups2root is a new CUPS zero-day that escalates lpadmin users to root on Ubuntu — and…

AI —— Sep 11, 2026 4 min read

Anthropic published its fourth threat intelligence report on 10 September 2026, documenting misuse of its Claude…

Android —— Sep 9, 2026 5 min read

Security firm Calif has disclosed WeWorm, a zero-click worm that hijacks WeChat accounts via a regular…

Security —— Sep 5, 2026 3 min read

A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges…

NPM —— Aug 31, 2026 3 min read

Jared Wray, founder and CEO of Hyphen AI and maintainer of the Keyv and Cacheable npm…