Technology (62)¶
Feed .
Top stories¶
Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Unauthenticated attackers can write arbitrary files and execute commands with root privileges on Cisco Secure Email Gateway systems.
Next.js releases critical security patches for RCE flaws in caching and SVG processing
Next.js released critical security updates on October 14 fixing two remote code execution vulnerabilities (CVSS 9.5 each) and one high-severity denial-of-service flaw. The RCE flaws affect caching in React Server Components and SVG rendering via the sharp library, with fixes available in versions 16
Palo Alto Networks patches critical PAN-OS RCE vulnerability under active exploitation
Palo Alto Networks released security updates for CVE-2026-0322, a high-severity remote code execution vulnerability in PAN-OS management interface currently under active exploitation.
NGINX releases patches for five vulnerabilities including critical RCE and TLS bug
NGINX released patches on October 14 in versions 1.30.6 and 1.31.7 addressing five vulnerabilities, including three critical memory bugs rated 9.2 on CVSS v4.0 that could crash worker processes or enable remote code execution, plus a TLS client-certificate verification flaw rated 8.3.
Hackers deploy PEERSTITCH malware on FortiGate firewalls via Fortinet vulnerabilities
Attackers exploited Fortinet vulnerabilities to install PEERSTITCH, a stealthy ARM64 malware on FortiGate firewalls in a telecom organization breach. The memory-resident malware leaves no disk artifacts, opens no ports, and communicates through legitimate process traffic, enabling long-term access t
Drupal patches critical Field UI vulnerability allowing unauthenticated RCE
Drupal released critical security patches on October 14 fixing a Field UI vulnerability (CVE-2026-108097) rated 19 out of 25 on Drupal's risk scale that enables unauthenticated remote code execution through contributed modules. Unpatched Drupal versions 11.2.x and below, 10.5.x and below, and versio
Israeli ad tech firm used spyware distribution through online advertisements
Security researchers at Citizen Lab and Confiant uncovered an Israeli ad tech firm collaborating with spyware companies to infect devices, including Al Jazeera networks, through malicious online advertisements without user interaction.
Chinese homegrown LLM solves world-class mathematics problem
Chinese researchers using domestically developed large language model Intern-S2 proved the three-dimensional Ghys conjecture, a world-class mathematics problem unsolved for over 30 years. The human-machine collaboration involved the AI performing recursive reasoning, literature review, and logical v
UK Legal Aid Agency breach exposed records dating to 1978
A cyberattack on Britain's Legal Aid Agency exposed records dating back decades, far more extensive than initially revealed.
Langflow critical RCE flaw exploited in 1,423 honeypot attacks
A critical authenticated remote code execution vulnerability in Langflow (CVE-2026-105740, CVSS 9.9) affecting versions prior to 1.9.0 has been exploited in 1,423 honeypot attacks since September 19, 2026. Non-admin authenticated users can inject malicious MCP servers to execute arbitrary OS command
International CSAM Crackdown Nets 95 Arrests Across 17 Countries
Law enforcement from 17 countries arrested 95 suspects in an INTERPOL-coordinated operation targeting child sexual abuse material distribution.
Zero-click spyware distributed via targeted online advertising
The Citizen Lab released technical evidence that sophisticated mercenary spyware is being distributed to users through targeted online advertisements without clicks required.
Topics¶
- Tech — 11 stories
- AI — 10 stories
- Anthropic — 10 stories
- OpenAI — 8 stories
- Security — 10 stories
- Email Security — 4 stories
- Golang — 0 stories
- Python — 2 stories
- Postgres — 0 stories
- Tech Research — 10 stories