11+ hour, 47+ min ago   (33+ words) In May 2026, volunteers running a package registry watched more than 2,000 malicious packages arrive in roughly two …...

1+ week, 7+ hour ago   (992+ words) Broadcom pushed out a critical security advisory on September 3, 2026, warning that VMware Workstation and VMware Fusion contain two flaws serious enough to let an attacker step outside a virtual machine and run code directly on the host. The advisory, tracked…...

1+ week, 3+ day ago   (365+ words) A newly disclosed vulnerability in the Hugging Face Transformers library can cause attacker-controlled Python code to be written to a local system before a user decides whether to trust and execute remote code. Tracked as CVE-2026-80047 and documented in CERT…...

1+ week, 4+ day ago   (375+ words) The 26th edition of the NECCI PR Roundtable is set to convene leading figures from government, business, technology, academia, the media and the public relations industry to examine the growing influence of artificial intelligence and algorithmic systems on public communication, information…...

2+ week, 4+ day ago   (483+ words) StartupHub.ai Ghost Bits: Java's Hidden Threat Revealed In a compelling presentation at Black Hat Asia 2026, security researchers Xinyu Bai and Zhihui Chen unveiled a novel threat lurking within the Java ecosystem, which they've termed 'ghost bits'. This vulnerability, stemming…...

2+ week, 6+ day ago   (1713+ words) The Google Authenticator WordPress plugin manages TOTP-based two-factor authentication for a site’s users. Before version 0.56, the endpoint that saves a user’s two-factor setup did not verify a CSRF nonce. That single missing check is the entire vulnerability, and it is…...

4+ week, 14+ hour ago   (23+ words) AMD confirmed two HIGH-severity TPM flaws (CVE-2026–6726, CVE-2026–6727) letting forged attestation slip past zero-trust checks. Here's what to patch and why....