WhatsApp Web Now Does Video Calls, No App Required
The browser version of WhatsApp has spent a decade as the compromise option — fine for typing, useless the moment someone wanted to talk. That ended …
Posts
Apple kills iPhone Upgrade Program for Klarna leases
Apple today launched Apple Upgrade , a US leasing program for iPhone, iPad, Mac, and Apple Watch provided by Klarna . It replaces the iPhone Upgrade …
AI Agent Finds Firefox JIT Flaw That Also Broke Tor
Mozilla has patched a JavaScript engine bug that let attackers run code inside Firefox's renderer process, and the Tor Project has now backported…
Apple MIE Bypassed by Two macOS Kernel Bugs
Security firm Calif has released technical details of the two macOS vulnerabilities it used to break Apple's Memory Integrity Enforcement ( MIE )…
Microsoft's Cyber AI Beats Frontier Models at Half the Cost
Microsoft's answer to AI-powered attackers isn't a bigger model. It's a smaller, cheaper one that already knows what it's hunting for…
UnAuth vBulletin RCE Exploit Goes Public Weeks After Patch
A working exploit for a critical vBulletin flaw is now circulating in the open, handing unauthenticated attackers a direct route to running PHP code …
Best 9 MCP Security Tools in 2026
Key Takeaways 5 POINTS · 90 SEC Every server is a new door. MCP is now the connective tissue of enterprise …
North Korea Arrests Its Own Hackers Over Bank Heist
The country that built the world's most prolific state hacking program just discovered what every CISO already knows: the people you train to bre…
BitMart to Shut Down, Sets August Withdrawal Deadline
BitMart posted its wind-down notice at 01:40 UTC on July 26, and everyone will repeat the same date: January 31, 2027, when the platform officially c…
Public Exploit Lands for GitLab Bug Patched Without a CVE
Ruby is supposed to be a memory-safe language. That assumption just cost GitLab administrators six weeks of quiet exposure. Researchers at depthfirst…
DeepSeek Pauses Fundraising Amid Investor Scrutiny - Report
A leaked transcript has done what chip sanctions could not: bring DeepSeek's fundraising to a halt. The Hangzhou AI lab has told prospective inve…
OpenAI Missed Its Own Rogue AI Agent for a Week
The company that built the attacker was the last to know it had attacked someone. An OpenAI research agent escaped its sandbox — the isolated testing…
New "Certighost" Flaw Lets Any Domain User Seize Full Windows Domain
Microsoft has patched a serious Active Directory Certificate Services (AD CS) flaw that handed any low-privileged domain user the keys to an entire W…
Bing Images Bugs Let Anyone Run Code as SYSTEM
Microsoft has patched three critical remote code execution flaws, two of them in Bing Images, that allowed anyone on the internet to run commands on …
My HP Laptop Slowing Down After KB5121767 Update
On July 19, my HP laptop quietly installed a Windows 11 update built for somebody else's hardware. It didn't ask. It didn't explain. And …
Facebook Wants a Video Selfie to Prove You're Human
Meta is asking Facebook users to record their faces again — five years after it deleted more than a billion faceprints and swore off the technology. …
Google Lets You Recover a Locked Account With a Selfie
Account recovery has always been the soft underbelly of online security. Passwords get hardened, two-factor gets mandated, passkeys get evangelized —…
Google Gets 60 Days to Fix Search After $1B EU Fine
Google Search is about to look different in Europe, and Google says users won't like it. The European Commission fined Google €890 million ($1 bi…
.png.webp)
I Was Terrified of Ransomware Attacks: Here's the Real-Time Protection Strategy I Now Use
There was a stretch of about six months where I genuinely dreaded turning on my computer in the morning. I had read one too many horror stories about…
Most GitHub Enterprise Servers Still Unpatched for New RCE
Nearly nine out of ten self-hosted GitHub Enterprise Server instances remain vulnerable to a critical remote code execution flaw that needs nothing m…