News
-
New Dell System Update flaw hands attackers root access
Dell is urging customers to patch its System Update tool as soon as possible: the flaw lets a remote attacker execute code with root privileges on unpatched systems.
-
Hackers steal records on 8 million people from Denmark’s central registry
Danish authorities have confirmed a breach of the Central Person Register: names, addresses, and state-issued ID numbers of some 8 million people were stolen, including residents abroad and the deceased.
-
Mold 3.0 Linker Released After C++-to-Rust Rewrite
The high-speed Mold linker has reached version 3.0 — the first release rewritten entirely from C++ to Rust. The developers aim to make Mold the default linker on Linux systems.
-
Attackers Hit Rejetto HFS: Weak RNG Opens the Door to Admin Session Forgery
A critical flaw in Rejetto HTTP File Server is already under attack: a predictable signing key lets intruders forge an administrator cookie and run arbitrary code.
-
From: anyone@icloud.com — Spoofing Any Apple iCloud Sender
A SEC Consult researcher found two ways to send email from any @icloud.com address through Apple's infrastructure — even tim.cook@icloud.com — while passing SPF, DKIM and DMARC checks.
-
Google Pauses Open-Source Bug Bounty as AI Spam Floods In
A surge of auto-generated reports has pushed Google to temporarily stop accepting submissions to its OSS VRP. Fixes to the program are promised for early 2027.
-
A bug stops Formula 1: cars frozen on the formation lap
At the Grand Prix held in Malaysia, a software glitch in the hybrid power units left several cars stranded. The start was delayed 50 minutes while the FIA hurriedly coded and pushed a patch to every team.
-
Black Boxes Didn't Help: Google Data Center Figures Leak via Copy-Paste
Google marked its Nebraska data centers' water and power usage as a trade secret, but a botched redaction let anyone read the hidden figures simply by selecting the text.
-
Citrix rushes out fix for exploited NetScaler zero-day
Citrix has shipped emergency NetScaler updates for CVE-2026-88779, already used in attacks. It is billed as a denial-of-service flaw, but researchers suspect remote code execution too.
-
Hacking the Go compiler to map IPv4 to IPv6 faster
netip.Addr has Unmap() but no To6(). Rather than wait for the Go maintainers to add one, Vincent Bernat tried to teach the compiler itself to optimize the pattern they recommend.
-
RemoveMacAI strips Apple Intelligence from macOS 27 with one command
macOS 27 no longer offers a single switch for Apple Intelligence, and its downloaded models linger on disk even after the features are off. RemoveMacAI promises to reclaim that space — reversibly.
-
OpenCourant: Community Revives OpenRadioss After Siemens Pulls the Plug
After Siemens abruptly shut down the open-source OpenRadioss project and deleted its repository, developers behind Rocky Linux launched a successor called OpenCourant.
-
GSoC 2026: a student tames NetBSD's racoon2 IKE daemon
As part of Google Summer of Code 2026, Artem Belan rewrote NAT traversal, fixed IPv6, and gave racoon2 its first automated test suite.
-
NVIDIA Measures X.Org vs. Wayland Latency: No Clear Winner
At XDC 2026 in Toronto, an NVIDIA engineer presented objective measurements of input latency in X.Org and Wayland. The difference turned out to be minimal.
-
openSUSE Adopts ZUPT for Post-Quantum Backups
openSUSE developers have integrated ZUPT into the distribution — a single utility that combines backup creation, compression, integrity verification, and encryption built to withstand future quantum threats.
-
Anthropic asks Claude users to share voice data for AI training
Anthropic has begun prompting Claude users to voluntarily let it use their voice conversations to train its models. The option is off by default.
-
TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A China-aligned cyber espionage crew is impersonating economists, policymakers and even an Anthropic employee to steal the credentials of experts shaping U.S. AI regulation.
-
Arm Brings TLBID to Linux to Boost High-Core-Count CPUs
Arm has posted an initial set of Linux kernel patches for TLBI Domains, a feature meant to cut overhead on server CPUs packed with cores.
-
The case for hard budget caps as a default setting
Simon Willison argues that in the age of AI agents, usage-based services should shut off at a budget ceiling by default — not merely send a warning.
-
Google Gemini may soon get full access to your Mac's files, apps and the web
Google is testing a desktop mode for Gemini that could let it read and modify any file on your computer, control apps, and act without asking permission every time.
- More