NGINX Rift: An 18-Year-Old Bug Lets Hackers Hijack One-Third of the Internet's Web Servers
A memory corruption flaw in NGINX's source code, hidden since 2008, now has a working exploit. An unauthenticated attacker anywhere on the intern…
Posts
Linux Kernel Strikes Again: "Fragnesia" Is the Third Root-Level Flaw in Two Weeks
Linux administrators have barely had time to recover from Copy Fail and Dirty Frag — and now there's a third exploit joining the same dangerous f…
Composer Bug Silently Dumped GitHub Tokens Into CI Logs — Patch Now
Millions of PHP developers who rely on Composer for dependency management were silently exposed to a token-leaking vulnerability this week — one that…
WhatsApp's New Incognito AI Chat Is Genuinely Private — But Read the Fine Print
WhatsApp today launched Incognito Chat with Meta AI, a mode where conversations are processed in a secure environment that even Meta cannot access, w…
Microsoft's AI Just Found 16 Windows Vulnerabilities Humans Missed — And It's Only Getting Started
For decades, finding dangerous bugs buried deep inside Windows has been a job for elite human researchers armed with time and hard-won instinct. Toda…
Google Confirms Googlebook Adding Gemini Intelligence and Android apps
We called it. Now Google's made it official: the Chromebook era is over, and Googlebook is the intelligence-first laptop that replaces it — not w…
Exim Mail Server Has a Critical Unauthenticated RCE — And an AI Helped Build the Exploit
A critical security vulnerability in Exim — the mail server software running on roughly half of all internet-facing email servers — allows a remote a…
Hackers Used AI to Build a Real Zero-Day Exploit — And Almost Deployed It at Scale
For the first time, researchers have confirmed that a criminal threat actor used artificial intelligence to discover and weaponize a zero-day vulnera…
Googlebook: Google’s Android laptop platform for Gemini PCs
Update - Google Confirms Googlebook Adding Gemini Intelligence and Android apps Fifteen years after Chromebook redefined affordable laptops, Google …
TanStack Packages Hit by Sophisticated Supply Chain Attack
A self-propagating worm has torn through the TanStack JavaScript ecosystem, publishing 84 malicious versions across 42 widely used npm packages in a …
Google's Snapseed 4.0 Finally Released — Download Now
Google just reminded the mobile photography world that it has been sitting on a gem this whole time. Snapseed 4.0 is now rolling out on Android — and…
JDownloader Website Hacked — Malicious Installers Served to Windows and Linux Users
JDownloader, one of the most widely used free download managers with millions of users across Windows, macOS, and Linux, had its official website com…
React and Next.js Hit With 12 Security Flaws — Three Let Attackers Bypass Auth, Hijack Servers
Vercel and the React team have fixed 13 vulnerabilities affecting Next.js and React Server Components, with three high-severity flaws drawing the mos…
Dirty Frag — No Patch, No Warning — Root Access on Every Major Linux Distro
Discovered by Korean security researcher Hyunwoo Kim, Dirty Frag chains two separate kernel vulnerabilities to hand any local user a root shell on vi…
Virtual IBAN for E-Commerce: Streamlining Global Payments for Online Stores
With the world increasingly turning into a global village through e-commerce, online stores are increasingly attracting customers who represent more …
Twitch Free View Bots: Do They Work or Are They a Waste of Time
No one wants to invest in a Twitch career until they see some signs that it might work. And before doing so, most people try all the free tools they …