Samsung's bloatware carried dangerous flaws that enabled access to the phone's microphone and camera.

Adobe patches CVE-2026-48449, a CVSS 10.0 Campaign Classic flaw that could allow code execution without user interaction, ...

CVE-2026-41679, a critical vulnerability in Paperclip, allowed attackers to gain administrative privileges and code execution ...

Three Hugging Face Diffusers flaws bypass trust_remote_code, letting crafted model repositories execute code during custom ...

PandasAI, an open source project by SinaptikAI, has been found vulnerable to Prompt Injection attacks. An attacker with access to the chat prompt can craft malicious input that is interpreted as code, ...

Under certain conditions, attackers can chain a set of vulnerabilities in multiple components of the CUPS open-source printing system to execute arbitrary code remotely on vulnerable machines. Tracked ...

Over 660,000 exposed Rsync servers are potentially vulnerable to six new vulnerabilities, including a critical-severity heap-buffer overflow flaw that allows remote code execution on servers. Rsync is ...

JetBrains products are widely used by software developers and DevOps teams to build, test, and deploy applications. Because these tools often have access to source code, build pipelines, credentials, ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code to escape the container and do nasty things to IT environments. As a result, ...

AI frameworks, including Meta’s Llama, are prone to automatic Python deserialization by pickle that could lead to remote code execution. Meta’s large language model (LLM) framework, Llama, suffers a ...

Apple urges users to update after patching CVE-2026-20700, a zero-day flaw exploited in sophisticated targeted attacks across multiple devices. If you can only read one tech story a day, this is it.