AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
Metamask discloses security incident affecting its infrastructure
On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure securit…
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple C…
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last w…
MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" imp…
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Threat actors have been observed exploiting a critical pre-authentication command injection vulnerab…
Oracle Manipulation Risk Report: Ethena USDe
Oracle Manipulation Risk Report: Ethena USDe Target Protocol: Ethena USDe (TVL: $4864.6M) …
Deno CVE-2026-103473 — CVSS 8.1 Command Injection in node:child_process on Windows
If your Deno app on Windows passes untrusted input to spawn, spawnSync, or exec with shell: true — p…
PDF Digital Signature Proof for Marketplace Report Archives (And Its Limits)
Short answer: Archive a monthly marketplace report only after checking its PDF digital signature aga…
Server-Side PDF Signature vs E-Signature Platform — A 50,000-Report Decision
Use a server-side PDF signature when the job is to prove that an archived report has not changed; us…
CVE-2026-12227 — How a Validate-Then-Mutate Bug Turns Into Unauthenticated LFI in Visual Composer
Overview Field Value CVE ID CVE-2026-12227 CVSS 3.1 9.8 (Critical) — AV:N/AC:L/PR:N/UI:N/…
Secure October, Day 1: What Your Phone Gives Up in 10 Minutes
In the ten minutes you spent on your phone this morning, apps logged where you stood, who you messag…
CVE-2026-102938: CVE-2026-102938: Configuration Injection and Local Execution Hijack in virtualenv
CVE-2026-102938: Configuration Injection and Local Execution Hijack in virtualenv Vulnerability I…