Russian technology giant Yandex has restored operations across multiple data centers following physical drone attacks in October. Specifically, Ukrainian drone strikes inflicted severe structural damage on these facilities, prompting Yandex to mobilize emergency engineering...
TL;DR Maintainers of the Open Enclave SDK fixed three severe bugs that let a rogue host break Intel SGX enclave safety. Led by a critical use-after-free flaw (GHSA-2rx6-6737-vpgh, CVSS 9.3), the bugs allow code...
Popular productivity platform Notion recently disclosed a significant security incident affecting its artificial intelligence features. Specifically, the Notion AI data breach exposed private conversation histories across numerous corporate workspaces. Although compromised environments represent less...
A single deceptive permission grant can compromise an entire enterprise cloud tenant. Specifically, Proofpoint researchers uncovered the BluePhishing Entra Agent attack targeting corporate artificial intelligence deployments. Through this technique, adversaries spawn up to 250...
Threat actors are actively exploiting a critical vulnerability inside the Xen Orchestra management platform. Specifically, this severe Xen Orchestra authentication bypass allows attackers to enter virtualization consoles without passwords. Adversaries simply manipulate a browser...
Linux kernel maintainers observed an encouraging milestone in software security. Specifically, subsystem maintainers report that Linux AI bug fixes are finally overtaking the influx of automated defect reports. Linus Torvalds highlighted this positive trend...
TL;DR Maintainers of the React library fixed a critical unauthenticated remote code execution bug in React Server Components. Tracked as CVE-2026-126187 (CVSS 9.5), the flaw hits server DOM packages when responses send multiple typed...
TL;DR Security researchers discovered a modular .NET toolset called Turla Cereal malware targeting government Microsoft Exchange servers. The attackers compromised state agencies in Kazakhstan and Romania without setting up external command servers. Instead, this...
Apple recently released the macOS 27.2.1 software update for Mac systems. Specifically, this maintenance release enforces rigorous macOS eMudhra certificate revocation across native terminal utilities. Previously, security analysts discovered that an intermediate certificate private...
TL;DR ASUS released an urgent security update for ASUS router firmware to fix four bugs in its remote file access tool. Tracked as CVE-2026-88707 through CVE-2026-88710, the flaws let attackers run root commands or...
Malicious actors began exploiting a newly disclosed secure shell flaw in less than nine hours. Specifically, threat groups targeted the critical OpenSSH SSHole vulnerability across global internet infrastructure. Researchers confirmed active penetration attempts against...
Researchers recently discovered five zero-day vulnerabilities within the popular Ashlar-Vellum Cobalt computer-aided design software. Specifically, these critical flaws allow attackers to execute arbitrary code by manipulating complex drawing files. The Zero Day Initiative published...
GrapheneOS developers recently published a substantial software release for supported Google Pixel smartphones. Specifically, build 2026110700 delivers critical privacy enhancements, refined location controls, and vital kernel repairs. Furthermore, the firmware overhaul addresses hardware compatibility...
Security researchers recently uncovered three vulnerabilities affecting the Philips Hue Bridge Pro smart lighting controller. Specifically, these flaws allow remote adversaries to compromise internal system processes completely. Attackers can chain authentication bypasses directly into...
OpenAI recently deployed an autonomous artificial intelligence system to audit core open-source operating software. Specifically, the autonomous framework uncovered 948 unique Linux kernel vulnerabilities capable of achieving root privilege escalation. The intensive ten-day research...
