Intelligence Reform: Germany's BND to Gain Access to Zero-Days and Vehicle Data
A draft law would give Germany's BND and domestic intelligence access to zero-day flaws and vehicle data, plus hackback powers. The IT industry is warning.
News & Knowledge
News, guides and insights on hosting, security and IT.
WordPress Flaw XSS2Shell: A Single Click Can Lead to Server Takeover
The WordPress flaw XSS2Shell (CVE-2026-64638) can lead to server takeover via a crafted link. Version 7.0.3 closes the vulnerability.
Zoomsday: Zero-Click Flaw Enables Silent Attacks via Zoom Meetings
The zero-click flaw Zoomsday (CVE-2026-53413) lets attackers execute code on other participants' devices from within a meeting, with no user interaction.
The ChatGPT App for Linux Is Here, But With One Major Gap
OpenAI releases the ChatGPT app for Linux as a preview, but it lacks the Computer Use feature found in the Windows and Mac versions.
AI Spear Phishing Tested: Personalization Triples the Click Rate
A study with 7,741 participants shows AI-assisted personalization nearly triples phishing click rates, from 3.9 to 10 percent.
Data Slip at Mozilla: Firefox and Thunderbird Signing Key Ended Up on GitHub
A GPG signing key for Firefox and Thunderbird releases was uploaded to GitHub in plain text. Mozilla is swapping it out, and some Linux users need to act.
Microsoft Patch Day August 2026: Actively Exploited Kernel Flaw and CVSS 10 Cloud Bugs
Microsoft closes 421 flaws in August 2026. An actively exploited WinSock kernel vulnerability stands out, alongside several CVSS 10 bugs in Azure and Microsoft…
Anthropic Watermarks All AI Content Generated by Claude
Anthropic will watermark all of Claude's AI output with embedded marks and signed metadata to meet the transparency requirements of the EU AI Act.
SAP Patch Day: Critical Flaw Makes Commerce Cloud Fully Compromisable
SAP's patch day closes 40 vulnerabilities, including a Commerce Cloud flaw rated CVSS 10 that lets attackers gain full control without logging in.