Polymarket froze trading after a compromised DebugBear script drained user accounts. One trader lost $800,000. Refunds ...

CVE-2026-98432 is a 9.8 CVSS Linux kernel TCP flaw. See which distros are patched, why Red Hat rates it lower, and what ...

A CitySourced database owned by Granicus exposed 42M records, including names, addresses and phone numbers from civic ...

WordPress 7.1.4 fixes 22 vulnerabilities, including an unauthenticated update-process RCE and stored XSS bugs in the ...

Orange Tsai detailed a Microsoft Edge sandbox escape chaining five logic bugs with no memory corruption — patched in Edge 148.0.3967.70.

Under Ethereum’s ERC-20 token standard, an approval can authorise another address to spend cryptocurrency from a wallet ...

Sony is investigating a PSN Family Management flaw that let hackers add child accounts without 2FA. How to check and secure ...

Roblox is accused of scraping 145.5GB of 3D models, including adult content, from Open3DLab, SFMLab and SmutBase via a ...

Rocket.new says an attacker obtained the encrypted API keys of 0.2% of users on 27 October 2026. All users are told to rotate their keys.

Sony Network Communications, the Sony Group subsidiary that runs the Japanese internet service provider So-net, said on 27 ...

GoAhead, the embedded web server behind the management pages of routers, printers, firewalls, and industrial controllers, has ...

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...