Core Lightning Vulnerabilities Prompt CLN Offline Warning
Blockstream’s Core Lightning team has told node operators to install an embargoed security build or shut their nodes down, after a run of AI-generate…
Security
Signal Contact Discovery Enclave Flaws Allow Code Execution
Security research firm V12 has disclosed two vulnerabilities in Signal's Contact Discovery Service that allowed the untrusted server host to bre…
Log4j Deserialization Bypass Is Real but Not Log4Shell
A security researcher using the handle U-Sec (Wujie Security) published brief details of a deserialization filter bypass in Apache Log4j 2, reportin…
Apple Patches 122 Flaws including macOS Screen Sharing Flaw (CVE-2026-65400)
Apple shipped four security updates on August 17, 2026, fixing 122 vulnerabilities in iOS 18.7.10 and iPadOS 18.7.10, 29 in iOS 26.6.1 and iPadOS 26.…
Copilot Autofix Bug Exposed Snowflake's Internal Jira
Wiz Research's autonomous "Red Agent" found and exploited a script injection flaw in Snowflake's public snowflake-connector-net re…
Microsoft's SCCM Hotfix Fixes Only One of Four RCE Bugs
Security researcher Omri Baso has disclosed a remote code execution chain in Microsoft Configuration Manager (SCCM/ConfigMgr) that lets an ordinary…
Apple Warns iPhone Users of Mercenary Spyware Attacks
Apple sent a fresh round of mercenary spyware threat notifications to users in 110 countries on Thursday, and for the first time, the warning lands a…