Security researchers have uncovered massive data exposure and remote hijacking vulnerabilities in Eiliko robot toys, which store millions of user conversations on unprotected Chinese servers.
A massive hack of refrigeration controllers across Europe caused millions in damages, highlighting critical security failures in store infrastructure.
AMD has urged owners of Radeon RX 7000 series graphics cards to update their firmware to address newly identified security vulnerabilities.
Developers have patched a decade-old critical vulnerability in the XRP Ledger that could have allowed for the unauthorized creation of XRP tokens.
A decade-old integer overflow bug in the XRP Ledger could have allowed the creation of new tokens, prompting RippleX to bypass standard voting protocols to deploy an immediate fix.
A critical vulnerability in the Telegram desktop client allowed attackers to remotely steal files, including session data, by exploiting improper link handling.
UserGate Factor has identified a critical vulnerability in Atlassian Data Center products that allows unauthenticated file access, prompting the release of new security signatures.
Dell has issued a critical patch for its Dell System Update software to fix a path traversal vulnerability that could allow remote attackers to gain root access.
Security researcher Syed Anas Mohiuddin discovered that AI agents inherently trust one another, creating a critical vulnerability that allows attackers to spread malicious instructions across networks.
Researchers have identified critical security flaws in AI agents using the Model Context Protocol, allowing attackers to exploit trust between internal systems.
GitLab has patched a critical 9.9-rated vulnerability in its AI Gateway that could allow remote command execution on self-managed servers.
Asus has patched two critical vulnerabilities in its routers that could allow attackers to gain root access or execute arbitrary commands.
Cisco has patched a critical zero-day vulnerability in its Catalyst SD-WAN Manager that allowed attackers to gain administrative access to network management systems.
Researchers have discovered a new Spectre v2 variant called Branch Target Reuse that affects Intel, AMD, and Arm processors, potentially exposing sensitive data through JIT compiler exploitation.
Apple has released iOS 26.7.1 and iPadOS 26.7.1 to patch a critical CoreGraphics vulnerability already being exploited in targeted attacks.
A security researcher discovered a privilege escalation chain in OnePlus and Oppo software that allows standard Android apps to gain full root access.
Researchers have discovered a privacy vulnerability in the file change notification systems of major operating systems, allowing attackers to monitor user activity through file metadata.
Researchers have discovered that file notification subsystems in major operating systems allow unauthorized tracking of user activity without requiring file read permissions.
A security flaw in Telegram Desktop allows malicious proxies to trigger silent NTLM authentication, potentially leading to system-level compromise.
Security researcher NightmareEclipse has introduced a proof-of-concept tool called BigDiskBuster that prevents Microsoft Defender from receiving automatic updates.
