The US Must Stop Underestimating Drone Warfare
In 2026, we won’t see terrorism incidents similar to 9/11, when hijacked airplanes struck the World Trade Center, or the Oklahoma City bombing, when ammonium…
In 2026, we won’t see terrorism incidents similar to 9/11, when hijacked airplanes struck the World Trade Center, or the Oklahoma City bombing, when ammonium…
NPM package with 56,000 downloads compromises WhatsApp accounts Pierluigi Paganini December 27, 2025 An NPM package with over 56,000 downloads stole WhatsApp credentials, hid its…
Dec 27, 2025Ravie LakshmananDatabase Security / Vulnerability A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap…
Multiple critical vulnerabilities in TeamViewer DEX Client’s Content Distribution Service (NomadBranch.exe), formerly part of 1E Client. Affecting Windows versions before 25.11 and select older branches,…
An information disclosure vulnerability in M-Files Server enables authenticated attackers to capture and reuse session tokens from active users. Potentially gaining unauthorized access to sensitive…
Social media platforms with infinite scrolling, auto-play and algorithmic feeds will be required to display warning labels about their potential harm to young users’ mental…
On December 25, while much of the world was observing Christmas, the Everest ransomware group published a new post on its dark web leak site…
Grubhub users received fraudulent messages, apparently from a company email address, promising a tenfold bitcoin payout in return for a transfer to a specified wallet.…
Trust Wallet warns users to update Chrome extension after $7M security loss Pierluigi Paganini December 26, 2025 Trust Wallet urged users to update its Chrome…
Update 12/26/25: Article updated to correct that the flaw has not been officially classified as an RCE. MongoDB has warned IT admins to immediately patch…
Trust Wallet confirmed that a compromised Chrome extension update released on December 24 led to $7 million in stolen cryptocurrency after users reported their wallets…
For years, Google users have been stuck with the email addresses they created when they first signed up. If you picked an embarrassing username years…