Category: Security
Cybersecurity news, vulnerabilities, scams, and data breaches, with practical advice to keep your devices and accounts safe.
-
Windows Flaw CVE-2026-21513, Patched in February, Now Hits Russian Firms
Attackers are using a Windows bug that Microsoft fixed in February 2026 to break into organizations in Russia. The flaw, CVE-2026-21513, sits in MSHTML, the old HTML engine that Windows still ships for apps such as Office. Any PC that missed the February update remains open to this trick. The cyber intelligence group at PT…
-
$11.4 Million Nvidia Shipment Stolen After Oakland Pickup, and Police Still Have No Arrests
Six pallets of Nvidia hardware, worth about $11.4 million, left Oakland on Aug. 29 and never reached Texas. More than two months later, no one has been arrested. Police also have not said how the cargo was taken. The case shows how cargo thieves now work. They are making fewer hits, but each one is…
-
US Memo Ties Jensen Huang to Suspected Chinese Spy as Congress Seeks Answers
Three US House committee chairs have asked Nvidia CEO Jensen Huang to answer questions behind closed doors on November 18. They want to know about his contacts with Alice Huang, a Megaspeed executive whom US intelligence reportedly believes worked for Beijing. Huang has until November 11 to accept or propose another date. The request came…
-
Claude Dispatch Flaw Lets a Browser Extension Run Code Through Claude Desktop
A browser extension with access to claude.ai can push Claude Desktop into installing software and running code. The target can be the same computer or a different one signed in to the same account. Gal Weizman, a researcher at Forever Security, described the Claude Dispatch flaw in a Forever Security write-up on the ThisBash attack…
-
Calif Beats iPhone Lockdown Mode With an AirDrop PDF, and the Hack Survives iOS 27.2
A malicious PDF sent over AirDrop was enough to jailbreak an iPhone 18 Pro with Apple’s Lockdown Mode switched on. Security firm Calif showed the attack in a video this week. The jailbreak also stayed on the phone after it updated to iOS 27.2, according to MacRumors’ report on the Calif demo. Lockdown Mode is…
-
Apple Spyware Alerts Reach 99 Countries: How to Check Yours and What to Do Next
Apple has sent a new round of spyware threat notifications to targeted iPhone users in 99 countries. Recipients include journalists and several members of Germany’s parliament. This is the second wave in less than three months, after an August round reached users in 110 countries. The alerts began arriving on October 29, 2026. Apple has…
-
16-Year-Old UEFI Firmware Vulnerability Exposes Servers
Critical 16-Year-Old UEFI Firmware Vulnerability Uncovered A dormant UEFI firmware vulnerability, which has remained undetected for approximately sixteen years, has recently been exposed to the public. Tracked officially as CVE-2026-97631, this critical security flaw commands a near-perfect CVSS 4.0 severity score of 9.5 out of a maximum 10. As reported by cyber security analysts at…
-
DHS Employee Data Leak Exposes 40,000 Sensitive Records
Massive DHS Employee Data Leak Exposes Covert Operations According to a detailed report by Reuters, Distributed Denial of Secrets published the personal records of over 40,000 employees of the United States Department of Homeland Security (DHS) on October 28. This non-profit organization dedicates itself to fostering data transparency. This massive trove includes individuals engaged in…
-
Linux Kernel Vulnerabilities Expose Systems to Root Attacks
Critical Security Flaws Uncovered Fourteen vulnerabilities in Linux and FreeBSD have paved the way for severe cyber attacks. These flaws allow root privilege escalation, container escapes, and virtual machine breaches. Functional exploits have already emerged for several of these severe flaws. Moreover, certain issues were disclosed before developers could issue appropriate patches. Researchers discovered multiple…
-
Pentagon AI Security Breach: Contractor Exposes DoD Network
Pentagon AI Security Breach Exposes Sensitive DoD Data According to a startling report by Wired magazine, an Accenture contractor allegedly connected a personal Claude Code account to a secure United States Department of Defense system. This unauthorized integration permitted an artificial intelligence agent to autonomously write and deploy software code within the secure environment. The…
Latest News
Stay Connected
Categories
AI Apple Apps & Games EVs Gadgets Google Linux Microsoft Security Smartphones
Search the Archives
Access over the years of investigative journalism and breaking reports
