News that matters, without the noise.

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run

Robot runway at IFA 2026 – split by the AGIBOT X2

OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosure

OpenAI acknowledged its role in a recently reported incident where AI agents took over a German wiki forum.

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug

CVE-2026-86197

Medium Severity Description Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists

CVE-2026-86196

High Severity Description Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header

CVE-2026-86195

High Severity Description grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where the stripSuperFlags()

How Hackers Weaponize Your AI Agents

Robot runway at IFA 2026 – T800 by EngineAI

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers’ Data It Said Was Deleted

Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in

AiMOGA’s quadruped robot dog Argos at IFA 2026.