The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Details of the vulnerabilities are below - CVE-2026-20320 (CVSS score: 7.5) - An improper restriction of XML external entity
Read full articleA mysterious object was spotted soaring over a US military base. Eyewitnesses said it had dangling appendages and hovered from side to side.
Read moreThe billionaire tech executive finds himself mired in a personal and national security scandal.
Read moreAlice Huang, who U.S. intelligence determined is a Chinese asset, emerged from the high-flying world of Shanghai finance to work with tech titans and obtain essential A.I. chips.
Read moreThe sprawling bill, which has divided Democrats, would overhaul major environmental laws to streamline the permitting process.
Read moreWilliam Lawrence, a co-founder of the Sunrise Movement, flipped a seat in Michigan for the Democrats.
Read moreA flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
Read moreAn attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE
Read moreGmail users are being warned about a disturbing new hacking threat that could allow cybercriminals to secretly access their private messages and banking details.
Read moreFrench software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST authentication passes that object to the
Read moreThe AI company behind the Claude chatbot will offer its shares at between $70 and $78, which is lower than what was expected.
Read moreThe hunt for Noah's Ark has taken a dramatic turn as the first photographs emerge of wood unearthed deep beneath a mountainside in Turkey.
Read more
