The Hacker News (3 hours ago)
A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli.
Read the full story on The Hacker News.
I’d rather keep my files to myself.
There’s some great open-source apps for managing passwords, playing podcasts, and more.
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package.
Apple’s first folding phone is inspiring indie developers to create fun, quirky apps that take advantage of the screen and the hinge. Here are a few to try as you explore the Duo.
Malaysia could extend its ban on the Waze maps app from civil servants to the whole country, Prime Minister Anwar Ibrahim said on Friday. A full ban would come only after officials look at other apps, he said. Anwar spoke to reporters in Kuala Lumpur, according to Bernama, the national news agency.
Microsoft Teams is getting new tools that could change how developers collaborate and how meetings are managed, but not everyone will get access to every feature.
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services.
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild.
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX.
72 active sources
27 Turkish · 45 English
All sources
