With Siri Recap, Apple threw a punch at OpenAI no one saw coming
if ( !emtpy($headline_subheadline ) ) : ?> If it manages to force regulation to define appropriate use of ambient AI,...
Blog
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Swati KhandelwalSep 18, 2026Vulnerability / Web Security WordPress today released patches to fix a new set of vulnerabilities in its...
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
Ravie LakshmananSep 18, 2026Malware / Cyber Espionage The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan)...
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Ravie LakshmananSep 18, 2026Vulnerability / Cloud Security Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry...
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been...
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin...
Google Opens Google Home to Claude and Other AI Agents — Here’s What They Can Control
The smart home is becoming another place where AI agents can act, not just answer questions. Google began rolling out...
Meta’s Copyright System Is Being Weaponized Against Albanian Protesters
After three months of daily anti-government protests—dubbed the Flamingo Revolution—the sudden mass suspension of Instagram accounts has led to fears...
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat Turns Android Accessibility Into an Attack Weapon Pierluigi Paganini September 18, 2026 RatHat combines AI-driven screen control, Android debugging...
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution Pierluigi Paganini September 18, 2026 Check Point fixed CVE-2026-91843, a critical...
Are AIs Still Struggling with CAPTCHAs?
Are AIs Still Struggling with CAPTCHAs? Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude....
Why AI companies are really pumping the brakes on their models
if ( !emtpy($headline_subheadline ) ) : ?> They say it's because frontier AI development is advancing faster than their ability...
5 internet-improving Chrome extensions worth trying on Android
if ( !emtpy($headline_subheadline ) ) : ?> These free extensions will make your mobile browsing experience noticeably nicer (and yes,...
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Ravie LakshmananSep 18, 2026Malware / Web Security Cybersecurity researchers have discovered a cluster of 13 npm packages that have been...
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
Ravie LakshmananSep 18, 2026Malware / Cybercrime A financially motivated threat actor has been linked to the development and distribution of...