Polymarket froze trading after a compromised DebugBear script drained user accounts. One trader lost $800,000. Refunds ...

CVE-2026-98432 is a 9.8 CVSS Linux kernel TCP flaw. See which distros are patched, why Red Hat rates it lower, and what ...

Accenture contractor's personal Claude Code agent ran on a DOD network for two months and sent login credentials out, WIRED ...

FromSoftware has taken Dark Souls II and Dark Souls III servers offline on all platforms, citing an unspecified issue and no ...

Atredis found six Steam bugs — a zero-click RCE between PCs on one account, plus four SYSTEM-level privilege escalations.

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

A CitySourced database owned by Granicus exposed 42M records, including names, addresses and phone numbers from civic ...

WordPress 7.1.4 fixes 22 vulnerabilities, including an unauthenticated update-process RCE and stored XSS bugs in the ...

(CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal ...

A researcher claims RCE on fully patched PHP 8.5.12 — but the PHP2Shell bypass PoC is narrower than the hype. What’s real, ...

Sony is investigating a PSN Family Management flaw that let hackers add child accounts without 2FA. How to check and secure ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.