CISA ordered federal agencies to patch Check Point VPN flaw CVE-2026-50751 within 3 days. Ransomware gangs, including Qilin affiliates, have been exploiting it as a zero-day since May.
Google patched CVE-2026-11645, a fifth Chrome zero-day this year, involving a V8 out-of-bounds read/write that can bypass ASLR. The exploit is already in the wild — here’s what to do.
Researchers ran static analysis tools on 658 leaked malware projects and found nearly 90% contained recognizable code weaknesses — including disabled TLS validation and shared vulnerable code fragments that defenders could exploit across multiple threat families.
A Booz Allen Hamilton study found that three of four Chinese AI coding models produced more vulnerable code when prompts identified the user as a U.S. government developer, with Qwen3-Coder showing a 130% increase in vulnerabilities. The report raises urgent questions about AI supply chain security.
Michael Saylor blamed AI capital rotation for Bitcoin’s 14% crash. Arca’s Jeff Dorman says the real culprit is Strategy’s own selling — and the market should brace for more.
The UK’s FCA has proposed allowing retail investment funds to hold up to 10% in crypto exchange-traded notes, a move that could open regulated crypto exposure to everyday investors for the first time.
Bending Spoons — the Italian company that’s bought Evernote, Vimeo, AOL, and WeTransfer — has filed for a Nasdaq IPO. It’s profitable, subscription-driven, and loaded with debt. Here’s the breakdown.
Google cuts AI Plus to $4.99/month and doubles storage to 400GB, making it the cheapest major AI subscription from a top-tier provider. Here’s what’s changing and why it matters.
A bipartisan House bill would force frontier AI developers to submit to independent audits, fund open-source security grants, and create AI security testbeds — but its preemption of state AI laws has sparked fierce opposition from both sides of the aisle.
NFCShare Android malware has expanded from targeting a single German bank to hitting financial institutions across Italy and Spain, using fake banking app updates hosted on GitHub to steal credit card data via NFC.
