CVE-2026-62878: Patch the Wormable Windows DNS RCE Now
CVE-2026-62878 is a CVSS 9.8 wormable RCE in Windows DNS Server. No auth needed. ZDI confirmed it self-propagates. Here is what to patch ...
CVE-2026-68820: Lazarus Ran This Zero-Day for 5 Weeks
Lazarus Group exploited CVE-2026-68820, a Windows afd.sys zero-day, for 5 weeks before August Patch Tuesday. ...
Your Server’s BMC Is Exposed: 86,000 Devices, 54% Critical
At Black Hat 2026, runZero found 86,000 exposed BMCs with 54% carrying critical flaws. Here's ...
Claude Now Watermarks Its Text – What Developers Must Know
Anthropic Claude now embeds invisible watermarks in all output. Here is how it works, what ...
GeoServer Zero-Day: No Patch, Active Exploits, Act Now
An unpatched SQL injection zero-day in GeoServer is being actively probed. No CVE, no patch. ...
DRAM Scrambling Attack Unlocks AMD CPU Security — No Patch
Christopher Domas's DRAM scrambling attack bypasses SEV, SGX, TDX, and TrustZone by remapping memory controller translations. No patch exists. Here's what's at stake.
Databricks $190B Valuation: CEO Says the Model Race Is Over
Databricks closed a $5 billion funding round yesterday at a $190 billion valuation — and ...
GLM-5.3: Open-Weight Coding SOTA and Emergent Cyber Risk
Z.ai GLM-5.3 launches today with a 6x coding jump on Terminal-Bench and exploitation chain reasoning ...
Cloud Vendor Lock-In Erased Nine PBS’s 70-Year Archive
Nine PBS is locked out of 70 years of TV archive after its cloud vendor ...
Patch Now: VS Code CVE-2026-70336 RCE This Week
VS Code has an active RCE and Copilot has an OS command injection flaw this ...