News
-
Hackers exploit SiteGuard WAF flaw to run commands as root and SYSTEM
A critical OS command injection flaw has been found in the statistics feature of the SiteGuard Server Edition firewall. Attacks are already underway.
-
Servo Brings CSS Grid to Life and Speeds Up With Threadboost
The belated August status report on the Rust-based Servo browser engine covers CSS Grid support and an experimental feature that lifts Speedometer scores by 50%.
-
Linux 7.4: Radeon HDMI 2.1 by Default, AMD iGPU AI Boost, and First Apple M4 Steps
As the Linux 7.3 kernel heads toward its stable release, Phoronix previews the next cycle. Highlights include HDMI 2.1 enabled by default on modern Radeon cards, big LLM performance gains on AMD integrated graphics, and initial Apple M4 support.
-
DeepSeek launches search API: $0.75 per 1,000 requests
DeepSeek has opened two web tools — Search and Fetch — built on its in-house search engine. Both carry the same price: $0.75 per 1,000 successful requests.
-
A U.S. Bill Wants Buying a Game to Mean Actually Owning It
New York Congressman Ritchie Torres has introduced the Power To The Players Act, which would turn buying a video game from renting a revocable license into real ownership and require publishers to keep games playable after servers shut down.
-
Meta Takes Down the «No Kings» Instagram Account on a Day of Mass Protest
Meta, the company led by Mark Zuckerberg, removed the «No Kings» movement's Instagram account on the very day of a large protest.
-
Pele: Mermaid Diagrams as Themeable SVG
Pele is a lightweight open-source library that turns Mermaid text into SVG and lets you recolor diagrams through CSS variables — with no re-rendering.
-
Replit makes OpenAI its default over Anthropic, CEO says
Replit CEO Amjad Masad told the TechCrunch Disrupt stage that the company is no longer working with Anthropic. Claude stays available to customers, but ChatGPT becomes the default model.
-
OpenCode Reports Breach: a 'Distillation Attack' Hit 1.4% of Users
OpenCode disclosed on X that it suffered an overnight breach tied to a large-scale 'distillation attack,' and says it has already emailed the affected users.
-
Nine Years to Hack an Xbox 360: How a £5 Pico Made the Impossible Trivial
A blogger recounts how a console-modding project that defeated him in 2017 became trivial in 2026 thanks to a five-pound microcontroller — and explains the fault injection that cracks even the sturdiest security.
-
MeshXFS: AI Turns XFS Into a Clustered File-System
The open-source MeshXFS project claims that "no human wrote any of its own code" — the job of extending XFS into a clustered file-system was handed to Claude Opus.
-
SpaceX Bets Big on Mobile, Taking Aim at AT&T, Verizon, and T-Mobile
Elon Musk's company is buying up spectrum and gearing up to become the fourth major US carrier. Analyst Walter Piecyk explains why the telecom giants are genuinely rattled.
-
The web is slamming its doors on AI agents
Tech giants promise autonomous helpers that book dinners, buy shoes, and clean your inbox. But major websites increasingly refuse to let them in.
-
Drupal patches two critical RCE flaws, warns exploits may come fast
Drupal has fixed two critical bugs that allow remote code execution on any supported version of the CMS and is urging administrators to update without delay.
-
Malicious npm Package imgdecode Hides a Shellcode Loader in a Windows Native Addon
SafeDep researchers flagged imgdecode, an npm package that is part of the long-running MALFEX campaign aimed at compromising Windows systems. Despite public exposure, it remains available and has already been downloaded 979 times.
-
DeepSeek rolls out its v4.1 Flash model
Chinese lab DeepSeek has published a new model, DeepSeek v4.1 Flash 1017, on the OpenRouter platform. For now, details are limited to the service's own listing page.
-
Stolen ConnectWise Credential Opens Door to 173 Microsoft 365 Tenants
Attackers abused a compromised ConnectWise Cloud Backup credential to sign in to its customers' Microsoft 365 environments, inheriting the legitimate app's sweeping permissions.
-
Apple tightens App Store rules against AI 'nudify' apps
Updated store rules now explicitly ban apps that use AI to generate intimate images of people without their consent. The changes follow criticism of Apple over deepfakes made with Grok.
-
Home Assistant checks your passwords against HIBP — and not everyone was pleased
A security researcher discovered that Home Assistant was checking his passwords against a breach database without his consent and filed an angry issue. The developer first brushed it off, then apologized and explained how the mechanism works.
-
OpenAI Models Hacked a Crypto Wallet and Breached New Websites
According to Ars Technica, OpenAI's neural networks independently carried out actions that could have led to criminal charges had a human been at the keyboard.
- More