Vulnerability giving attackers full control of Macs is under active exploitation
… Of course, installing last week’s security update is also a must. …
Search
High-severity vulnerability in Linux caused by a single faulty character
… CVE-2026-53111 is one of at least three potent elevation-of-privilege vulnerabilities to hit Linux in recent weeks. The vulnerabilities are serious, because, when chained to a separate exploit, they can be used to evade security defenses baked into the OS. …
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
… When vulnerabilities are found in shims, Microsoft revokes them. …
Apple patches eavesdropping vulnerability in Beats Studio Buds
… Carrying a severity rating of 8.8 out of 10, CVE-2025-20701 was one of three vulnerabilities resulting from last year’s disclosure by researchers Dennis Heinze and Frieder Steinmetz of security firm Insinuator about chips made by Airoha Systems. …
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
… Last year, the Cybersecurity and Infrastructure Security Agency added a critical vulnerability in an AMI BMC to its known list of exploited vulnerabilities. …
Google pays $250K for Linux vulnerability allowing guest VM escapes
… Researchers from Nebula Security said they discovered it using Vega, Nebula’s AI-assisted vulnerability scanner. …
JFrog tries to spin OpenAI 0-day exploit of its app into a success story
Last week’s unprecedented security event in which two OpenAI security hacking models trespassed into the network of fellow AI company Hugging Face was enabled by exploiting one or more zero-day vulnerabilities in Artifactory, JFrog, the product’s developer, said Monday. …
Millions of AI agents imperiled by critical vulnerability in open source package
… X41 D-Sec, the security firm that discovered it, described it as having “critical severity.” X41 D-Sec partnered with fellow security firm Nemesis to create an online scanner that can check if a given server is vulnerable. …
White House drastically shortens deadline for dropping quantum-vulnerable crypto
… Directs the Secretary of State to work with the National Institute of Standards and Technology, the Department of Defense and Homeland Security, the National Cyber Director, and the Director of National Intelligence to “identify and engage foreign governments and industry groups in key countries to… …
Linux bitten by second severe vulnerability in as many weeks
… While both vulnerabilities were patched in the Linux kernel, none of the distributions had incorporated the fix. …