News that matters, without the noise.

iRhythm discloses data breach, says hackers stole patient info

Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients’ personal and health information

DOJ seizes CFAKE, SOCFAKE deepfake nude sites under TAKE IT DOWN Act

The U.S. Department of Justice announced Friday that it has seized the CFAKE.com and SOCFAKE.com websites, which allegedly

UK to ban social media access for children under 16

The ban will apply to all “user-to-user platforms, whose purpose is to enable social interaction and which allow users

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to

What is an IDOR? Google and Uber got hacked this way.

Is AI Actually Coming for Your Job?

The SOC Interview Question That Exposes Whether You’re Reactive or Proactive

USN-8431-1: Ruby vulnerabilities

It was discovered that Ruby’s Net::IMAP library did not properly verify that Transport Layer Security (TLS) encryption was

RHSA-2026:26054: Important: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat

CVE-2026-9863

High Severity Description Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch

CVE-2026-9862

Critical Severity Description Fortra’s Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd

CVE-2026-9595

Medium Severity Description Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: