Jul 18, 2026 // 00:23

Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc […]

Jul 18, 2026 // 00:23

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. […]

Jul 16, 2026 // 22:57

A flaw in Anthropic’s Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing […]

Jul 16, 2026 // 16:37

n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it […]

Jul 16, 2026 // 13:56

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability […]

Jul 16, 2026 // 12:37

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people’s Shark vacuums across the […]

Jul 16, 2026 // 10:27

Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 […]

Jul 15, 2026 // 13:57

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no […]

Jul 14, 2026 // 21:27

SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application […]

Jul 14, 2026 // 20:37

Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks that read your Gmail, open your latest […]