Sales of fast tech like mini fans and disposable e-vapes, as well as wearable health tech such as heart monitors and smart watches are soaring. They're creating a new e-waste problem but are full of hidden treasure.
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the
As Israelis prepare to vote, Palestinians in the occupied West Bank say they have little hope of change.
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek .
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek .
Elon Musk's system allows Kyiv to protect Ukrainian skies and effectively guide drones to Russian targets.
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek .
At least six people have been killed in overnight Russian attacks across Ukraine.
Palestinians in the occupied West Bank see little prospect Israel’s election will change their lives under occupation.
Protesters in Tirana throw bricks at the Education Ministry building as police respond with tear gas and water cannon.
Cut AI agent costs and control runaway spending Discussion | Link
Article URL: https://github.com/android/ndk/issues/2260 Comments URL: https://news.ycombinator.com/item?id=50083130 Points: 360 # Comments: 165
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek .
Anojan Sivarasa's case sent shockwaves through Sri Lanka, spurring diplomatic efforts to seek clemency.
Minor Changes #16245 d6b1c82 Thanks @WalshyDev ! - Include source maps by default in wrangler build --experimental-cf-build-output Build Output now matches wrangler deploy and wrangler versions upload , which upload source maps by default, so Workers built for tools like cf get stack traces that point at the original source. Source maps that can't be resolved are skipped rather than failing the build. Set upload_source_maps = false to opt out. Patch Changes #16220 97b2fb1 Thanks @FlorentCollin ! - Support local D1 queries through the experimental d1_binding_jsrpc compatibility flag Local D1 bindings now implement the RPC query backend used by D1Database.query() and prepared-statement methods when the flag is enabled. Queries reuse local SQLite execution, including transactional batches, execution metadata, and session bookmarks, while bindings without the flag continue to use HTTP. Update the bundled workerd runtime to 1.20261012.1 and align the default compatibility date with that release. Updated dependencies [ f360829 , 97b2fb1 , 97b2fb1 , acd2822 ]: miniflare@5.20261012.0-beta
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature. The work was done in a lab as a proof of
Hardliners are stepping up pressure on Iran's government and calling for Foreign Minister Abbas Araghchi's removal. The oil minister resigned, but that's doing little to ease the pressure on President Masoud Pezeshkian.
A new initiative faces serious questions about military influence, but its critics should not write it off prematurely.
ASML said some customers are "expressing an interest" in placing orders with the company in 2029 and 2030, giving investors a view into longer-term demand.
Three of India's Cockroach movement leaders will spend five days in jail over charges of trespassing into what was until recently a designated protest site. In other news, Marco Rubio is set to visit India. DW has more.
Ukrainian drones struck the Saratov region. The regional governor reported one person was killed.
Chainguard has launched an AI-powered security harness that uses frontier models, including Anthropic’s restricted Claude Mythos 5.1, to find and The post 66% of billion-dollar companies leave critical bugs unpatched — the part the AI bug-hunting hype leaves out appeared first on The New Stack .
Thomas Woldbye tells the Today progamme it would be "good to know" the government's position on the project, after comments made by the prime minister.
Translate documents. Preserve artwork and layout. Discussion | Link