FBI Extracted Deleted iPhone Messages: iOS 26.4.2 Fix
Apple released iOS 26.4.2 yesterday, patching a critical vulnerability that allowed the FBI to extract deleted Signal message previews from an iPhone. The ...
Google Antigravity IDE RCE: Prompt Injection Exploit
Google’s Antigravity IDE, the company’s agentic development platform launched in November 2025, suffers from two ...
Meta Employee Monitoring: AI Training via Keystroke Logging
Reuters exclusive April 21, 2026: Meta deploys surveillance software capturing employee keystrokes, mouse movements, and ...
Vercel Breach: OAuth Supply Chain Attack via AI Tool
On April 19, 2026, Vercel disclosed a security breach that started when a Context.ai employee ...
Atlassian AI Training Data Default: Opt-Out by Tier (2026)
Atlassian announced on April 18-19 that it will enable default AI training data collection across ...
Prompt Injection Flaw Exposes GitHub Credentials in AI Agents
Prompt injection flaw steals credentials from Claude, Gemini, and Copilot via malicious PRs. Vendors patched quietly without CVEs. Update tools immediately.
Notion Email Leak: 4-Year Bug Exposes All Editors
Notion leaks all editor emails on public pages via unauthenticated API. Reported 2022, unfixed 2026. ...
Vercel Security Breach April 2026: Environment Variables
Vercel disclosed a security breach on April 19, 2026. Sensitive env vars were protected, but ...
OpenClaw Hits 138 CVEs in 63 Days: Security Crisis Exposed
OpenClaw published 13 critical security fixes April 9-10. With 138 CVEs in 63 days, 135K ...
XChat Launches Today: Musk’s Privacy Promise Has a Backdoor Problem
Elon Musk launched XChat today with encryption promises, but security researchers warn X controls the ...