Apache fixed CVE-2026-119618, a critical HTTP/2 flaw reported by Anthropic and Google that could enable unauthenticated code execution.

Microsoft patched a Windows Active Directory vulnerability enabling authorized attackers to execute code remotely on affected systems.

N-able takes hosted N-central offline and urges on-premises shutdowns after 30-plus Able2Shell flaws expose credentials and ...

Microsoft FORGE Lab researchers found memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can trigger undefined behavior. Using Hyenas, FORGE's frontier research ...

A major security situation is unfolding for N-able after a researcher dropped 33 zero-day vulnerabilities at once for its ...

The firm offered two explanations. Either the June patch, its description and its Common Vulnerability Scoring System (CVSS) ...

Zyxel GS1900 series switches that received a fix for CVE-2026-7273 are still open to an exploit attackers used.

Zyxel has patched an unauthenticated out-of-bounds write in the web management interface of its GS1900 series switches. The ...

Infosec’s chatterati have their knickers in a tight twist (that’s ‘panties in a bunch’, for our American friends) over yet another celebrity CVE that may or may not be deeply worrying. We are ...

Stack Overflow is becoming less and less relevant. People are asking very few questions on the programming Q&A platform. Most recently, the number was fewer than 1,000 per month, compared with around ...

Three open-source Linux projects exploit a firmware vulnerability in Nvidia’s GPU secure coprocessor to remove an artificial performance throttle, delivering up to 80% faster AI matrix math on RTX ...

Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the world’s server vendors and data ...