Linux Kernel Had a Six-Year Bug That Let Anyone Steal SSH Host Keys and Root Passwords
A logic flaw sitting quietly in the Linux kernel since at least 2020 — possibly longer — just got a working exploit, a public proof-of-concept, and a…
Posts
Google Quietly Cut New Account Storage to 5GB — Your Phone Number Is Now the Price of 15GB
Google has changed the rules on free storage for new accounts — and most users won't notice until it's too late. New Google accounts now defa…
Google's Security Team Built a Zero-Click Root Exploit for the Pixel 10
Google's elite Project Zero security team has done it again — this time turning the Pixel 10 into a case study for how hardware driver vulnerabil…
NGINX Rift: An 18-Year-Old Bug Lets Hackers Hijack One-Third of the Internet's Web Servers
A memory corruption flaw in NGINX's source code, hidden since 2008, now has a working exploit. An unauthenticated attacker anywhere on the intern…
Linux Kernel Strikes Again: "Fragnesia" Is the Third Root-Level Flaw in Two Weeks
Linux administrators have barely had time to recover from Copy Fail and Dirty Frag — and now there's a third exploit joining the same dangerous f…
Composer Bug Silently Dumped GitHub Tokens Into CI Logs — Patch Now
Millions of PHP developers who rely on Composer for dependency management were silently exposed to a token-leaking vulnerability this week — one that…
WhatsApp's New Incognito AI Chat Is Genuinely Private — But Read the Fine Print
WhatsApp today launched Incognito Chat with Meta AI, a mode where conversations are processed in a secure environment that even Meta cannot access, w…
Microsoft's AI Just Found 16 Windows Vulnerabilities Humans Missed — And It's Only Getting Started
For decades, finding dangerous bugs buried deep inside Windows has been a job for elite human researchers armed with time and hard-won instinct. Toda…
Google Confirms Googlebook Adding Gemini Intelligence and Android apps
We called it. Now Google's made it official: the Chromebook era is over, and Googlebook is the intelligence-first laptop that replaces it — not w…
Exim Mail Server Has a Critical Unauthenticated RCE — And an AI Helped Build the Exploit
A critical security vulnerability in Exim — the mail server software running on roughly half of all internet-facing email servers — allows a remote a…
Hackers Used AI to Build a Real Zero-Day Exploit — And Almost Deployed It at Scale
For the first time, researchers have confirmed that a criminal threat actor used artificial intelligence to discover and weaponize a zero-day vulnera…
Googlebook: Google’s Android laptop platform for Gemini PCs
Update - Google Confirms Googlebook Adding Gemini Intelligence and Android apps Fifteen years after Chromebook redefined affordable laptops, Google …
TanStack Packages Hit by Sophisticated Supply Chain Attack
A self-propagating worm has torn through the TanStack JavaScript ecosystem, publishing 84 malicious versions across 42 widely used npm packages in a …
Google's Snapseed 4.0 Finally Released — Download Now
Google just reminded the mobile photography world that it has been sitting on a gem this whole time. Snapseed 4.0 is now rolling out on Android — and…
JDownloader Website Hacked — Malicious Installers Served to Windows and Linux Users
JDownloader, one of the most widely used free download managers with millions of users across Windows, macOS, and Linux, had its official website com…
React and Next.js Hit With 12 Security Flaws — Three Let Attackers Bypass Auth, Hijack Servers
Vercel and the React team have fixed 13 vulnerabilities affecting Next.js and React Server Components, with three high-severity flaws drawing the mos…
Dirty Frag — No Patch, No Warning — Root Access on Every Major Linux Distro
Discovered by Korean security researcher Hyunwoo Kim, Dirty Frag chains two separate kernel vulnerabilities to hand any local user a root shell on vi…