The Hacker News (2 hours ago)
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker’s code then runs as root, according to advisories that Debian, Ubuntu, and APT’s developers published on November 4.
Read the full story on The Hacker News.
A cozy habit tracker, a smarter snippet library, and a rooster that wants you out of bed: this year’s Shipaton winners offer plenty of new apps to explore. RevenueCat’s annual app-building competition drew 3,985 project submissions in 2026, according to its winner announcement.
Pangram launched Pangram Image 1.0 for AI images and the faster Image Flash 1.0 for video. It claims near-perfect scores on its own tests and 98.7% on the DF26 academic benchmark. Both are in its web app and API, and Image 1.0 is in its Chrome extension.
Santa Monica Studio has delayed its PlayStation 5 exclusive God of War Laufey by three months, pushing back Faye’s standalone adventure.
Apple will start checking iCloud items that are accessible to anyone who has the link for “harmful content” starting with iOS 27.3 and other 27.3 updates, the company says.
Mark Lanier led the first social media addiction case to go to trial, winning a verdict against Meta and Google in March. It’s just the beginning.
A major price drop is making Google’s premium wireless audio experience far more accessible for everyday listening, workouts, and hands-free voice tasks.
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.
Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that’s designed to modify an artificial intelligence (AI) agent’s trusted instructions to insert advertisements for a third-party AI gateway. The phenomenon has been codenamed prompt adware by Check Point Research.
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2.
69 active sources
24 Turkish · 45 English
All sources
