Firefox IndexedDB Flaw Breaks Tor Browser Anonymity
Security researchers at Fingerprint.com discovered a critical privacy vulnerability (CVE-2026-6770) in Firefox’s IndexedDB implementation on April 21, 2026 that breaks Tor Browser’s anonymity ...
FBI Extracted Deleted iPhone Messages: iOS 26.4.2 Fix
Apple released iOS 26.4.2 yesterday, patching a critical vulnerability that allowed the FBI to extract ...
Google Antigravity IDE RCE: Prompt Injection Exploit
Google’s Antigravity IDE, the company’s agentic development platform launched in November 2025, suffers from two ...
Meta Employee Monitoring: AI Training via Keystroke Logging
Reuters exclusive April 21, 2026: Meta deploys surveillance software capturing employee keystrokes, mouse movements, and ...
Vercel Breach: OAuth Supply Chain Attack via AI Tool
On April 19, 2026, Vercel disclosed a security breach that started when a Context.ai employee ...
Atlassian AI Training Data Default: Opt-Out by Tier (2026)
Atlassian announced on April 18-19 that it will enable default AI training data collection across Jira, Confluence, and other cloud products starting August ...
Prompt Injection Flaw Exposes GitHub Credentials in AI Agents
Prompt injection flaw steals credentials from Claude, Gemini, and Copilot via malicious PRs. Vendors patched ...
Notion Email Leak: 4-Year Bug Exposes All Editors
Notion leaks all editor emails on public pages via unauthenticated API. Reported 2022, unfixed 2026. ...
Vercel Security Breach April 2026: Environment Variables
Vercel disclosed a security breach on April 19, 2026. Sensitive env vars were protected, but ...
OpenClaw Hits 138 CVEs in 63 Days: Security Crisis Exposed
OpenClaw published 13 critical security fixes April 9-10. With 138 CVEs in 63 days, 135K ...