Skip to the board
Security
-
Anthropic Adds Claude Code Prompt Guard Against Video Game Clones
A small Claude Code prompt change steers users away from copying specific games while leaving room for original designs and genre inspired projects.
-
CNET’s Wearables Survey Looks Beyond Specs to Everyday Performance
CNET is asking wearable owners to rate battery life, accuracy, comfort and apps, with top-rated devices slated for a reader roundup.
-
Ring’s Third-Party AI Apps Turn Security Cameras Into Monitoring Tools
Ring’s app store adds tools for pets, rentals, yards and worksites, but subscription costs and imperfect detections make their value—and privacy impact—uneven.
-
GM’s $220 Million Driver Data Case Puts Connected Car Privacy in Focus
GM’s data-sharing case shows how driving records can affect insurance rates and why connected car privacy controls matter.
-
SparkFun Adds BMI330 and BMA456 Qwiic Motion Sensor Breakouts
The new BMI330 and BMA456 boards add on-chip motion features and low-power sensing, while BMI270 and BMA400 breakouts get price cuts.
-
Q3 2026 Incident Response: Vishing, Edge Vulnerabilities and Ransomware
Phishing and exposed applications led initial access, while ransomware rose to 27% of engagements. Talos also flags AI credentials and gaps in logging and MFA.
-
Benjamin West’s European Career and the Limits of Modern History Painting
Benjamin West built his career in Britain, but his strongest work often came when he moved beyond the grand historical scenes he hoped to master.
-
Raspberry Pi’s 10.1-Inch Touch Display 2 Joins New Sensors and SMD Headers
This week’s additions pair a portrait Raspberry Pi touchscreen with a photoacoustic CO₂ sensor and compact headers; two magnetic sensor products also get price...
-
PHP2Shell Scanning: How to Separate Exploits from Look-alike Traffic
PHP2Shell scans began before the coordinated fix. Multipart boundaries and origin logs offer better clues than broad request signatures.
-
eMudhra Certificate Key Flaw Puts Eight Intermediate CAs at Risk
Weak randomness exposed eight eMudhra intermediate keys. Browser and OS vendors are moving to distrust them, raising certificate replacement and inventory conce...
-
ActiveState and Docker Combine Hardened Images With Patched Open Source Libraries
The companies will resell each other’s software artifacts, pairing hardened container images with remediated libraries. Patch speed and dependency visibility re...
-
Coordinated Vulnerability Disclosure: Why Customers Need Control Over Mitigations
Fastly argues that early, visible mitigations can expose vulnerabilities. Its approach gives customers context and control over when to apply changes.
-
AI-Assisted Cybercrime: One Operator’s Use of Hermes, DeepSeek and Cursor
A Unit 42 investigation links AI tools to university intrusions, VoIP fraud planning, Wi-Fi cracking and cryptocurrency research by one operator.
-
PHP RCE Flaws Affect Versions 5–8: Fixed Releases and Mitigation Options
Two PHP flaws can enable remote code execution. Learn which releases contain fixes and how a WAF rule may help while teams patch.
-
PHP php2shell Flaws Put Web Server Workers at Risk of Remote Code Execution
Two PHP flaws exploit fatal error handling to corrupt request state. Patch maintained releases and audit PHP workers, limits and logs.
-
AI-Assisted Linux Intrusions Pair SysGoRAT With Mailbox and Database Theft
A newly tracked intrusion cluster used AI-marked scripts, Linux persistence and a cross-platform Go backdoor to pursue email and database data.
-
PEERSTITCH Implant Shows How a FortiManager Breach Can Reach 500 Firewalls
A FortiManager compromise exposed credentials and trust material for more than 500 firewalls, enabling stealthy access and a memory-only FortiOS implant.
-
Fastly’s 2026 WAAP Assessment Highlights Blocking, Automated Mitigation and AI Controls
IDC named Fastly a WAAP Leader. Its platform combines request analysis, automated DDoS mitigation and controls for APIs, models and AI agents.
-
Blinder Tunnel Used Visual Studio Projects and GitHub for Stealthy Access
A recruitment themed coding test led to ShelbyLoader V2, GitHub based command traffic and Chisel tunnels targeting networks in the Middle East.
-
Insecure Deserialization: How Gadget Chains Turn Data Into Application Risk
Untrusted serialized data can trigger unexpected application behavior. Learn how gadget chains work and how teams can reduce deserialization risk.