News that matters, without the noise.

Never look into a fiber cable!

Bulgaria allowed surveillance tech firm to sell products to repressive regimes, report says

The nonprofit Human Rights Watch obtained export licensing records covering 2018 through 2023, which show the Bulgarian government

CVE-2026-10735

Severity Not Scored Description Multiple plugins by ShapedPlugin contain a backdoor in various versions. This makes it possible

CVE-2026-48764

High Severity Description TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented

CVE-2026-53676

High Severity Description ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a

Operation Escaneo Signals Shift in LatAm Threat Landscape

The threat group’s curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be

USN-8454-1: libheif vulnerabilities

Elhanan Haenel discovered that libheif incorrectly handled certain malformed HEIF sequence files. An attacker could possibly use this

USN-8452-1: pbkdf2 vulnerability

Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this

USN-8453-1: Net::CIDR::Lite vulnerabilities

It was discovered that Net::CIDR::Lite incorrectly validated IP address and CIDR mask inputs. An attacker could possibly use

USN-8451-1: Vim vulnerabilities

Srinivas Piskala Ganesh Babu discovered that Vim incorrectly handled directory names when serializing browsed paths to the netrw

FIFA Bug Exposed World Cup Streams to Remote Takeover

A hacker could have “Rickrolled” the World Cup — or worse — thanks to FIFA’s unenforced Entra access