Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming
Ravie LakshmananMay 16, 2026Vulnerability / Website Security A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come...
Security
Vibe Coding Cheat Sheet: Tools, Prompts, Security Tips, and More
Software development is undergoing a seismic shift as vibe coding turns plain English into functional applications in seconds. The era...
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
Ravie LakshmananMay 15, 2026Vulnerability / AI Security Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that...
OpenAI Warns Mac Users to Update Apps After Supply-Chain Attack
OpenAI is telling Mac users to update its apps by June 12 after a developer-focused supply chain attack exposed code-signing...
Two Unpatched Windows Exploits Target BitLocker, SYSTEM Access
Microsoft’s quiet Patch Tuesday did not stay quiet for long. Soon after Microsoft released a May security update with no...
Google’s Default 15GB Free Storage Is Ending for Some New Accounts
Google’s longtime 15GB free storage perk is no longer automatic for every new account. Under Google’s updated support page, affected...
6 Best VPNs for Canada in 2026 (Free & Paid Options Compared)
A virtual private network, more commonly known as a VPN, protects your online privacy by encrypting your internet activity. Many Canadians...
The First AI-Crafted Zero-Day Was Easy to Spot. The Next One May Not Be
AI-assisted hacking has crossed from theory into a documented incident. On May 11, Google’s Threat Intelligence Group reported the first...
What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface
The Hacker NewsMay 15, 2026Endpoint Security / Threat Detection In Your Biggest Security Risk Isn't Malware — It's What You...
Bypassing On-Camera Age-Verification Checks
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
Ravie LakshmananMay 15, 2026Microsoft / Vulnerability Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that...
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
Ravie LakshmananMay 15, 2026Vulnerability / Credential Theft The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed...
Apple’s iPhone Privacy Feature Expands to More Users Worldwide
Apple is widening access to its iPhone location privacy tool, bringing tighter control over user data to far more carriers...
How AI Hallucinations Are Creating Real Security Risks
AI hallucinations are introducing serious security risks into critical infrastructure decision-making by exploiting human trust through highly confident yet incorrect...
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE
Ravie LakshmananMay 14, 2026Vulnerability / Web Server Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open,...
