A 9.8 Linux Kernel Bug Can Hand Over Root Remotely on Some Servers: Your Questions on CVE-2026-98432, Answered
A newly disclosed Linux kernel vulnerability has drawn two very different severity ratings, and the gap between them is the...
Year: 2026
One Click on a Shared ChatGPT Link Was Enough to Read Someone’s Private Chats. OpenAI Has Fixed It. Here Is How the Trick Worked
Shared ChatGPT conversations get passed around all the time: in email, in team chats, in support tickets and on social...
All Three Links Now Patched: How the Ivanti Connect Secure Attack Chain Went From Zero-Day to Full Fix, and What the Attackers Were After
Earlier this month, Ivanti Connect Secure customers learned that attackers had a way into their VPN gateways that needed no...
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners
Most security bugs live in code that runs all the time. This one lives in a moment: the few seconds...
A Name, an Email Address and a Convincing Voice: How Fake IT Help Desk Callers Talked Their Way Into Remote Sessions, and One Into Ransomware
Here Is How Layered Defenses Help When the Caller Says They Are From ITThe caller does not need to know...
Applied for College Aid in Florida? A Breach of the State’s Student Aid Website May Have Exposed Social Security Numbers for 4.9 Million People
The Florida Department of Education announced on Thursday that its student financial aid website was breached and that personal information...
The Remote Session That Bites Back: A TeamViewer Flaw Could Let a Rigged Computer Take Over the Technician Connecting to It
Remote support normally carries risk in one direction: the technician has control and the customer’s computer is the one exposed....
Eleven Hours, Up to 5,000 Developers: A Tampered Claude Code Extension Quietly Opened an SSH Back Door. The Timeline and the Cleanup
Developers who use AI coding assistants inside their editors got an unwelcome reminder on Thursday that extensions are software too,...
Twenty Minutes, Ten Blockchains, $6.3 Billion: Binance Says the Biggest Crypto Theft on Record May Have Started on One Engineer’s Laptop
At 20:05 UTC on Thursday, October 29, which was just after 4 p.m. on the U.S. East Coast, money started...
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today
Drupal’s security team published an advisory on Wednesday with a warning store owners should not ignore: the bug it fixes...
