3+ day, 4+ hour ago   (487+ words) Tencent has since deployed patches and server-side mitigations that block the specific exploit for all users. No exploitation in the wild has been reported. The attack's simplicity is what makes it alarming. An attacker needed only a WeChat account on…...

3+ day, 21+ hour ago   (605+ words) The Exchange Server situation warrants front-of-queue treatment over the two named zero-days. CVE-2026-55007 allows a remote, unauthenticated attacker to execute code on an affected Exchange server by sending an email containing a malicious Visio attachment. The code runs when the…...

5+ day, 1+ hour ago   (619+ words) The incident is the largest publicly disclosed Bitcoin sidechain security breach on record: approximately 3,996 BTC, worth roughly $316 million, drained from the Liquid Federation's reserve wallet in a single transaction, recovered in part within about 26 hours through an entirely on-chain negotiation....

5+ day, 1+ hour ago   (572+ words) StyleSmuggler is a two-stage server-side template injection attack (CWE-1336) that exploits Magento's template rendering engine through a specific input property called styles. Server-side template injection is a class of vulnerability in which user-supplied input triggers remote code execution — a distinction…...

5+ day, 13+ hour ago   (394+ words) This is not a design flaw in HAProxy. The filter API is working as intended. The exploitation is the binary replacement itself: an attacker who can install a recompiled version of a trusted application inherits all of that application's privileges…...

1+ week, 1+ day ago   (298+ words) The agents were running multi-round timed web-lookup tasks — information-retrieval exercises structured as five sequential questions, with a generous first window and extremely short answer deadlines (sometimes 13 seconds) for the rounds that followed. Their environment gave them read access to the…...

1+ week, 1+ day ago   (613+ words) The vulnerability targets a specific Falcon capability: the automatic removal of malicious macros from Microsoft Office files. That Falcon macro removal feature is a core part of Falcon's active protection suite and runs as a Windows service with SYSTEM-level privileges…...

1+ week, 1+ day ago   (321+ words) What Japan has built into the FY2027 request is not just another surveillance satellite. It is an architectural decision about where intelligence analysis happens — and who, or what, makes the call before a missile leaves its platform. Conventional military satellites work…...

1+ week, 1+ day ago   (363+ words) That is the situation as of September 4, 2026: OpenAI has committed to building a kill switch. It has not built one yet. And Congress, which asked for the evidence to audit OpenAI's safety practices, is still waiting. Rep. Casar called the…...

1+ week, 3+ day ago   (506+ words) Security firm Wordfence published its full technical disclosure on September 2, 2026. Developer ServMask shipped a patch in version 7.110 on August 20 — thirteen days before the public advisory — but as of September 2, only about 35 percent of the install base had applied it. The…...