Security
Creative soundbar fixes address Bluetooth and firmware flaws
Singapore’s security agency lists updated firmware for three Sound Blaster Katana models.
Category
Security
Attacks, vulnerabilities, data privacy and defense, and what AI changes on both sides.
29 stories
Security
Veeam fixes a flaw that gives backup viewers server control
The critical vulnerability affects version 12 builds, while Veeam says version 13 is unaffected.
Security
Times Car breach exposes 6.6 million accounts, 1.6 million ID images
Attackers got into the Japanese car-sharing service's web systems. Driver's license images and other identity documents were among the data.
Security
New Spectre attack pulls a Linux root password hash in minutes
Branch Target Reuse abuses stale branch predictions left behind when JIT engines reuse memory. It works on Intel, AMD and Arm chips.
Security
Ransomware tools found in South Africa's air traffic weather systems
ATNS says it contained the attack on systems that supply weather data to air traffic control. Data appears to have left for IP addresses in China.
Security
AI agent hacked a Dutch vulnerability group through two unknown flaws
DIVD, whose volunteers warn others about security holes, says an autonomous agent broke in through its Zammad helpdesk and got full control in seconds.
Security
543,699 passwords and keys in public GitHub code still work
Half of them have sat in the open for more than two years. Whether a leaked key dies depends mostly on the service it belongs to.
Security
Cloudflare containers could read data left behind by other customers
Deleted disk space went back into a shared pool without being wiped. Cloudflare says nobody but the researcher who found it used the flaw.
Security
Bitget loses about $351 million in the largest crypto theft of 2026
The exchange's CEO says the attack matches the patterns of North Korean hacking groups, and reported totals differ by tens of millions.
Security
UpGuard finds 16,000 Supabase databases open to the internet
Tables that apps create through the API do not get access rules by default, and AI coding tools create tables that way.
Security
Kiteworks asks customers to shut down servers over a possible attack
The file-sharing company says federal authorities warned it that a threat actor may target some of its systems this weekend.
Security
Botnet hides an AI agent inside hijacked Docker servers
Researchers found malware that spreads to unprotected Docker installations and lets an open-source AI agent carry out the operator's orders.