Attackers are actively exploiting vulnerabilities in on-premises SharePoint Server to gain Farm Administrator rights and steal IIS machine keys to maintain access even after applying a patch.
Aug 25, 2026 4 1
The wp2shell vulnerability in WordPress Core allows unauthenticated remote code execution. Public exploits are circulating. If your installation isn't up to date, you're at risk—and 43% of the web runs on WordPress.
Sep 2, 2026 9 2
For 33 hours, traffic to Softaculous—the web application installer used by millions of cPanel/Plesk hosting providers—was silently redirected via a BGP hijack attack. A major exposure window for a critical infrastructure in global web hosting.
Sep 2, 2026 15 3
A heartbreaking testimony about the Commodore 64 is making the rounds online this week. For millions of us, it wasn’t just a computer—it was the first place where we felt competent, free, and taken seriously.
Aug 31, 2026 14 3
The CISA has just added six new entries to its KEV (Known Exploited Vulnerabilities) catalog. These include vulnerabilities in NetScaler (Citrix), the Linux kernel, and Microsoft SQL Server—all actively exploited in real-world conditions.
Aug 28, 2026 2 1
Amazon Web Services has just announced the acquisition of DuckLabs, the team behind DuckDB—the open-source in-process OLAP database that has established itself in just a few years as the go-to analytical tool in the data ecosystem. This acquisition raises questions about the future of the project's open-source model.
Aug 27, 2026 7 2
An open-source JavaScript simulator reconstructs all 3,510 transistors of the MOS 6502—the processor behind the Apple II, Commodore 64, and NES—and lets you observe every signal in real time within your browser.
Aug 25, 2026 3 1
An acid tweet highlights the paradox: Aaron Swartz, co-creator of RSS, was prosecuted to the point of suicide for "scraping" academic articles. Today, Meta massively scrapes the web to train its AIs—without legal consequences.
Aug 20, 2026 16 4
Kandelo is an open-source kernel based on WebAssembly that emulates a multi-process POSIX environment in the browser and in Node.js—enough to run WordPress server-side, without a server.
Aug 20, 2026 8 2
A coordinated operation between Naver WEBTOON, the South Korean Ministry of Culture, Sports and Tourism (MCST), and Interpol has led to the removal of three English-language manga and webtoon piracy platforms. A victory, but mirror sites continue to proliferate.
Aug 14, 2026 5 2
Before YouTube, before Nintendo Direct, there was GameTrailers.com. Kotaku recounts the story of Geoff Grotz and Brandon Jones, two film school graduates who changed the way the video game industry creates its moments of collective anticipation.
Aug 14, 2026 3 1
A critical RCE flaw in VMware vCenter Syslog Server is being exploited in an active campaign. Attackers are deploying reverse SSH to maintain persistent access to hypervisors. The string of virtualization vulnerabilities continues.
Aug 14, 2026 9 3
