10 Things the Media Gets Wrong About the Dark Web
The dark web is a collection of websites and services designed to offer varying degrees of privacy and anonymity. Some serve legitimate purposes, while others enable fraud, cybercrime, and illegal trade.
Critical Magento Flaw Could Let Hackers Execute PHP Code on E-Commerce Servers
Security researchers warn that CVE-2026-103849, dubbed BlockStrap, could allow unauthenticated attackers to execute arbitrary PHP code on vulnerable Magento and Adobe Commerce servers.
Hyundai Recalls 94,622 Genesis Sedans Over Potential Fire Risk
Hyundai is recalling 94,622 Genesis sedans in the US over a potential fire risk linked to overheating power seat motors. Repairs are still being developed.
Rhysida Ransomware Gang Claims Theft of 2.6TB of Data From Maryland County
Anne Arundel County confirmed unauthorized access to its government systems after the Rhysida ransomware gang claimed to have stolen 2.6TB of data in an August 2026 cyberattack.
Eilik AI Robot Flaws Expose 13 Million Conversations and Allow Remote Hijacking
AI-powered companion robots made by Chinese manufacturer Energize Lab have been found exposing millions of private conversations and allowing outsiders to remotely manipulate their behavior, raising serious concerns about the privacy and security of connected toys.
Burger King Japan Discloses Data Breach Affecting 11.18 Million Customers
Burger King Japan has disclosed a data breach that exposed the personal information of 11.18 million customers after attackers gained unauthorized access to a server containing records linked to the company's official smartphone app.
Apple Updates App Store Rules to Ban AI Nudify Apps
Apple has updated its App Store rules to more explicitly prohibit AI-powered “nudify” apps that generate intimate images of people without their consent, following growing criticism over the misuse of artificial intelligence to create sexualized deepfakes.
Drupal Fixes Critical RCE Vulnerability That Could Put Websites at Risk
Drupal has patched CVE-2026-108097, a critical remote code execution vulnerability in Field UI that could expose websites through vulnerable contributed modules or custom code.
Candiru Spyware Used Malicious Online Ads to Target Al Jazeera Devices Without Clicks
Citizen Lab uncovers a Candiru spyware campaign that used malicious online ads to target Al Jazeera devices without user interaction.
Google Expands Android Earthquake Alerts to Nearly 200 Countries and Regions
Google is expanding its Android Earthquake Alerts System from 98 countries to nearly 200 countries and regions after the technology delivered more than one billion earthquake alerts since its launch in 2021.
ChatGPT Chrome Extension Can Now Use Your Open Tabs to Complete Tasks
OpenAI has upgraded its ChatGPT Chrome extension, allowing users to access open tabs, compare information across websites, fill out forms, and complete tasks directly from the browser.
What to Do With Your Accounts Before Traveling Abroad: A 30-Minute Checklist
Traveling abroad soon? Use this 30-minute checklist to secure your email, two-factor authentication, phone, bank cards and social accounts before you fly.
GhostAction Attack Targets 30,000 GitHub Repositories in New Credential Theft Wave
The GhostAction credential-theft campaign has intensified, targeting more than 30,000 repositories associated with around 3,000 users and organizations on GitHub.
Loading
