News that matters, without the noise.

CVE-2026-45610

Medium Severity Description AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a

CVE-2026-45580

Medium Severity Description AVideo: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute Read more at https://www.tenable.com/cve/CVE-2026-45580

The Boring Stuff is Dangerous Now

AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of potentially

DSA-6275-1 linux – security update

https://security-tracker.debian.org/tracker/DSA-6275-1

DSA-6274-1 linux – security update

https://security-tracker.debian.org/tracker/DSA-6274-1

DSA-6273-1 chromium – security update

https://security-tracker.debian.org/tracker/DSA-6273-1

FreePBX security advisory (AV26–474)

<article data-history-node-id="7707" about="/en/alerts-advisories/freepbx-security-advisory-av26-474" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

Funnel Builder WordPress plugin bug exploited to steal credit cards

A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript

Warning: AI can give your passwords to hackers. Prompt injection demo

A hotel check-in system left a million passports and driver’s licenses open for anyone to see

The tech company that maintains the hotel check-in system set its cloud storage to public, allowing anyone to

Stay Ahead of Ransomware Livestream – June 2026

RHSA-2026:17795: Critical: kernel security update

An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated