Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Details of the vulnerabilities are below - CVE-2026-20320 (CVSS score: 7.5) - An improper restriction of XML external entity
Read full articleMore News
Giant UFO with dangling tentacles hovers near US military base before vanishing: 'Only God and the government know what it is'
A mysterious object was spotted soaring over a US military base. Eyewitnesses said it had dangling appendages and hovered from side to side.
What we know so far about Jensen Huang's affair with suspected Chinese spy
The billionaire tech executive finds himself mired in a personal and national security scandal.
Who Is Alice Huang, the Woman in the Middle of Nvidia’s Spy Scandal?
Alice Huang, who U.S. intelligence determined is a Chinese asset, emerged from the high-flying world of Shanghai finance to work with tech titans and obtain essential A.I. chips.
Tech Life
We investigate internet-connected device flaws worldwide, plus US election tech fallout.
What Is Congress’s Plan to Speed Up Energy Permits?
The sprawling bill, which has divided Democrats, would overhaul major environmental laws to streamline the permitting process.
From Climate Activism to the House of Representatives
William Lawrence, a co-founder of the Sunrise Movement, flipped a seat in Michigan for the Democrats.
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE
Urgent warning to Gmail users about new hacking threat exposing private messages: Act now
Gmail users are being warned about a disturbing new hacking threat that could allow cybercriminals to secretly access their private messages and banking details.
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST authentication passes that object to the
Claude chatbot maker set for $1.3tn stock market debut despite 'catastrophic' AI warning
The AI company behind the Claude chatbot will offer its shares at between $70 and $78, which is lower than what was expected.
Noah's Ark discovery revealed as first photos show wood buried 30 feet underground
The hunt for Noah's Ark has taken a dramatic turn as the first photographs emerge of wood unearthed deep beneath a mountainside in Turkey.
