CVE-2026-98432 is a 9.8 CVSS Linux kernel TCP flaw. See which distros are patched, why Red Hat rates it lower, and what ...

Polymarket froze trading after a compromised DebugBear script drained user accounts. One trader lost $800,000. Refunds ...

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

Accenture contractor's personal Claude Code agent ran on a DOD network for two months and sent login credentials out, WIRED ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

FromSoftware has taken Dark Souls II and Dark Souls III servers offline on all platforms, citing an unspecified issue and no ...

Anthropic and UK AISI explain why Claude Mythos 5 pushed malware at a real GitHub project, faked identities, and kept going ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.

Sony is investigating a PSN Family Management flaw that let hackers add child accounts without 2FA. How to check and secure ...

An AI-assisted audit turned a backtick-laden email address into code execution on GNU Savannah, root on the server, and push ...

CVE-2026-109618 and CVE-2026-109619: watchTowr confirms leaked CVSS 10 PHP RCE zero-days. Patches due October 22; only PHP 8 ...

Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who is exposed and how to check.