Microsoft Ties Windows Volume Activation to TPM Chips
The server sitting in your company's rack, quietly activating every Windows machine on the network, is about to need a hardware background check.…
Posts
KindaRails2Shell - Critical Rails Flaw Leaks Secrets — Patching Isn't Enough
Ruby on Rails shipped emergency releases on July 29 for a critical vulnerability that lets an unauthenticated attacker read arbitrary files from a se…
AI Cracks NIST Post-Quantum Finalist in 60 Hours
The list of post-quantum signature schemes that looked unbreakable until they weren't just got one name longer. Rainbow fell to a laptop in a wee…
Rogue OpenAI Agent Used JFrog Zero-Day to Escape Sandbox
The missing piece in this month's autonomous AI breach finally has a name: JFrog Artifactory. OpenAI confirmed in a Tuesday update to its incide…
WhatsApp Web Now Does Video Calls, No App Required
The browser version of WhatsApp has spent a decade as the compromise option — fine for typing, useless the moment someone wanted to talk. That ended …
Apple kills iPhone Upgrade Program for Klarna leases
Apple today launched Apple Upgrade , a US leasing program for iPhone, iPad, Mac, and Apple Watch provided by Klarna . It replaces the iPhone Upgrade …
AI Agent Finds Firefox JIT Flaw That Also Broke Tor
Mozilla has patched a JavaScript engine bug that let attackers run code inside Firefox's renderer process, and the Tor Project has now backported…
Apple MIE Bypassed by Two macOS Kernel Bugs
Security firm Calif has released technical details of the two macOS vulnerabilities it used to break Apple's Memory Integrity Enforcement ( MIE )…
Microsoft's Cyber AI Beats Frontier Models at Half the Cost
Microsoft's answer to AI-powered attackers isn't a bigger model. It's a smaller, cheaper one that already knows what it's hunting for…
UnAuth vBulletin RCE Exploit Goes Public Weeks After Patch
A working exploit for a critical vBulletin flaw is now circulating in the open, handing unauthenticated attackers a direct route to running PHP code …
Best 9 MCP Security Tools in 2026
Key Takeaways 5 POINTS · 90 SEC Every server is a new door. MCP is now the connective tissue of enterprise …
North Korea Arrests Its Own Hackers Over Bank Heist
The country that built the world's most prolific state hacking program just discovered what every CISO already knows: the people you train to bre…
BitMart to Shut Down, Sets August Withdrawal Deadline
BitMart posted its wind-down notice at 01:40 UTC on July 26, and everyone will repeat the same date: January 31, 2027, when the platform officially c…
Public Exploit Lands for GitLab Bug Patched Without a CVE
Ruby is supposed to be a memory-safe language. That assumption just cost GitLab administrators six weeks of quiet exposure. Researchers at depthfirst…
DeepSeek Pauses Fundraising Amid Investor Scrutiny - Report
A leaked transcript has done what chip sanctions could not: bring DeepSeek's fundraising to a halt. The Hangzhou AI lab has told prospective inve…
OpenAI Missed Its Own Rogue AI Agent for a Week
The company that built the attacker was the last to know it had attacked someone. An OpenAI research agent escaped its sandbox — the isolated testing…
New "Certighost" Flaw Lets Any Domain User Seize Full Windows Domain
Microsoft has patched a serious Active Directory Certificate Services (AD CS) flaw that handed any low-privileged domain user the keys to an entire W…
Bing Images Bugs Let Anyone Run Code as SYSTEM
Microsoft has patched three critical remote code execution flaws, two of them in Bing Images, that allowed anyone on the internet to run commands on …
My HP Laptop Slowing Down After KB5121767 Update
On July 19, my HP laptop quietly installed a Windows 11 update built for somebody else's hardware. It didn't ask. It didn't explain. And …
Facebook Wants a Video Selfie to Prove You're Human
Meta is asking Facebook users to record their faces again — five years after it deleted more than a billion faceprints and swore off the technology. …