News
-
PlayStation 2 Security Chip Cracked After 26 Years
After four years of work, Canadian enthusiast DiscoStarslayer has managed to read the contents of the MechaCon chip — one of the last unsolved secrets of the original PS2.
-
Global Salesforce Outage
Users around the world encountered an outage of Salesforce services. Information about the incident appeared on the company's official status page.
-
AI assistant session hijacked: the Shai-Hulud worm spread across a hundred repositories
Mandiant described an attack in which an attacker hijacked an active session of a developer's AI assistant and, through a poisoned package it had recommended, launched a self-propagating worm.
-
Mistral and Mozilla: A Private AI Assistant in Firefox
Firefox's Smart Window now runs on Mistral models. The companies promise privacy, support for local languages, and “zero data retention.”
-
Hackers Cracked Flock's Camera Software and Showed How It Tracks Cars and People
Activists took down a traffic camera made by Flock, copied its contents and extracted the encryption key. Analysis showed the device recognizes not just license plates, but people too.
-
A Critical ScreenConnect Vulnerability Is Already Being Exploited in Attacks
CISA warns of active exploitation of a critical flaw in ConnectWise ScreenConnect and orders federal agencies to fix it within three days.
-
Meta Preps a Camera-Free Smart Glasses Amid Surveillance Scandal
According to The Information, Meta may unveil camera-free glasses code-named Luna as soon as its Meta Connect conference — an attempt to shed the reputation of “creeper glasses.”
-
Critical WSO2 API Manager Vulnerability Allowing Admin-Token Forgery Is Already Being Exploited
Researchers at watchTowr have observed active attacks against WSO2 API Manager: attackers bypass JWT validation and gain administrator privileges. The vulnerability has been assigned the maximum severity rating.
-
Google Patches Actively Exploited 0-Day in Pixel
September's patch set for Pixel smartphones fixes 110 vulnerabilities, including a modem zero-day already being used in targeted attacks.
-
Apple Reference Image: teaching the iPhone to prove a photo is real
The iPhone 18 Pro will offer an optional camera mode that produces a cryptographically certified photograph — proof that the shot really was captured by a sensor rather than generated by AI.
-
Java 27 Is Out: Post-Quantum TLS and G1 by Default
OpenJDK 27 reached General Availability on September 15, 2026. The release is the reference implementation of the Java SE 27 platform and brings nine new features — ranging from finalized mechanisms to previews and incubators.
-
Ubuntu 26.10 Completes the Switch to Rust-Based coreutils
In the “Stonking Stingray” release, the last holdouts — cp, mv and rm — move to the memory-safe versions. Nothing changes for users; the gain is purely in security.
-
Linux 7.4 to Speed Up Software RAID: Optimizing xor_gen for AVX-512
The Linux 7.4 kernel will get an AVX-512-rewritten xor_gen() function that noticeably speeds up computing and verifying parity blocks for RAID5 and RAID6.
-
Jensen Huang: AI regulation isn't needed — companies will handle safety themselves
Speaking at the Dreamforce conference, the head of Nvidia declared that artificial intelligence is just “hardware and software,” and that its safety is a matter for engineering rather than legislation. The market, in his view, will punish anyone who ships an unsafe product.
-
The Neural Network That Decides Whether a Number Is Numberwang
Developer GraafHenk has posted a tiny neural network on GitHub that delivers a verdict for Numberwang, a fictional game from a British sketch show. The whole project is a 1.8 MB model file and about a hundred lines of pure Python.
-
A Linux GPU Driver for the M4 Mac mini Was Written in a Month with AI
Cody Ho and Niklas Sheth put together a driver fully compliant with OpenGL ES 3.0 for the Apple Silicon GPU in a little over a month—where it usually takes years. AI agents wrote the bulk of the code.
-
Acronis: Actively Exploited Vulnerability in cPanel Backup Plugin
Acronis has reported a high-severity local privilege escalation vulnerability in its plugins for cPanel, WHM and Plesk. According to the company, the flaw is already being used in limited, targeted attacks.
-
25 Minutes to Admin Access: How an AI Agent Found a Live Baseten GitHub Token
Strix was vetting the inference provider Baseten before entrusting it with the company's data — and its autonomous agent obtained a token with admin rights to key repositories in 25 minutes.
-
Hack of Admin Menu Editor Pro Developer Turned Updates Into a Backdoor on 1,500 WordPress Sites
The attacker gained access to the site of the developer behind a popular plugin and distributed malicious updates that create a hidden administrator account. At least 230 customers were affected.
-
The Leak of 153 Million US Driver's Licenses — a National Security Threat
The dark-web service Nexus traded access to 153 million driver's licenses belonging to US and Canadian citizens, along with 3 million travel documents. The Lawfare author warns: data like this fuels not only fraudsters but also the intelligence services of America's adversaries.
- More