News about applications, operating systems and software development
A critical vulnerability in the Everest Forms Pro plugin for WordPress is being exploited in nature and puts at risk full sites: this is about CVE-2026-3300, a CVSS 9.8 score fail…
Brave has officially launched Brave Origin, a payment version of your browser that promises a "minimalist" experience by eliminating monetizing-oriented functions: rewards for see…
A new method of denial of service baptized by its discoverers as HTTP / 2 Bomb shows that the combination of already known techniques can become vulnerable to modern servers in a …
Google has published Android's June 2026 security patches to correct 124 vulnerabilities, including at least one zero-day failure that is already being exploited in targeted attac…
Palo Alto Networks has warned that active vulnerable holdings CVE-2026-0257 are already being observed in PAN-OS, related to the GlobalProtect portal and gateway. Initially catalo…
A failure to escalate local privileges nicknamed CIFSwitch has been documented in the CIFS subsystem of the Linux kernel and shows how a mixture of kernel design and user space ut…
Security researchers have detected a malicious package in NuGet posing as a legitimate SDK for Sicoob, one of the largest financial cooperatives in Brazil, and whose goal was to s…
An argument injection failure in Gogs- the Git self-hosted platform written on Go - allows remote execution of code (CERs) in Internet-accessible instances without an official pat…
A new group of threats identified by the Wiz firm, which have been baptized as JINX-0164, has exposed a dangerous mix of highly directed social engineering and custom malware for …
