BleepingComputer (1 hour ago)
Researchers found a malicious AGENTS markdown instruction file in a customer’s Downloads folder that tricked an AI coding agent into installing a rogue npm package.
Read the full story on BleepingComputer.
Ray-Ban Meta smart glasses have rightly been criticized for the many ways they can violate people’s privacy.
Your Mac comes with a fairly robust suite of built-in privacy tools.
Our ‘7 Days’ weekly tech roundup brings the juiciest announcements. Read about AV2 video support, unexpected Linux goofup, and iPod easter egg.
‘Session cookies’ are a primary target for hackers letting them hijack and use your accounts You’ve had a busy morning of life admin, logging into various accounts to check balances and make payments. At the end of a productive few hours you close your laptop and move on to your next job.
PingCAP recently confirmed unauthorized access to its internal systems and the theft of source code and customer-related data.
Cognition released the Devin Vulnerability Fixes plugin, 3 MIT-licensed agent skills that inventory, patch and test PHP, Node.js and self-managed GitLab deployments hit by this week’s critical RCE flaws, then open 1 PR per repo.
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
72 active sources
27 Turkish · 45 English
All sources
