SecurityWeek (1 hour ago)
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
Read the full story on SecurityWeek.
Browsers designed to help agencies are being abused to launch scam campaigns at scale.
The attack uses malicious Google search results related to Amazon and leverages the ‘finger’ utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements.
Apple has blocked eight web security certificates that could have been used by scammers to impersonate legitimate websites. However, one cryptography engineer has warned that Macs may continue to trust the compromised certificates because macOS does not check for revocation … more…
Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.
In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.
Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
72 active sources
27 Turkish · 45 English
All sources
