ServiceNow, a major cloud-based workflow automation platform used by thousands of enterprises, disclosed a security incident that exposed customer data through a misconfigured development instance. The breach, discovered in early 2024, affected an undisclosed number of customers and involved unautho
OpenClaw, an AI-powered email management agent, has been compromised through phishing attacks, resulting in the exposure of sensitive user data. The incident demonstrates a critical vulnerability in autonomous AI systems that process emails without adequate security controls. Multiple users reported
Google has released an emergency patch for CVE-2026-11645, a critical zero-day vulnerability in Chrome that attackers are actively exploiting in the wild. The flaw, a use-after-free bug in Chrome’s JavaScript engine, allows remote code execution through maliciously crafted web pages. All Chrome user
SAP has released critical security patches addressing severe vulnerabilities in NetWeaver and Commerce Cloud platforms. These flaws could allow attackers to execute arbitrary code, bypass authentication mechanisms, and compromise sensitive business data. Organizations running affected SAP products m
Microsoft has released its largest-ever Patch Tuesday update, addressing a staggering 206 vulnerabilities across its product ecosystem. This unprecedented security update includes 11 critical flaws and three actively exploited zero-days, marking a significant milestone in the company’s patching hist
A critical integer overflow vulnerability (ZDI-26-332) in QEMU’s `calc_image_hostmem` function allows authenticated local attackers to escalate privileges on affected systems. The flaw stems from improper integer validation when calculating image host memory, potentially enabling attackers to break
Meta has updated its data usage policies to explicitly permit the use of off-site business interactions—data collected from third-party websites and apps—to personalize Facebook and Instagram feeds and train its AI systems. Previously limited primarily to advertising purposes, this expansion signifi
Fortinet has disclosed a critical vulnerability in FortiSandbox (CVE-2024-36509) that allows unauthenticated attackers to execute arbitrary commands remotely. The flaw affects FortiSandbox versions 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6, carrying a CVSS score of 9.6. Organizations using affecte
Security researchers have discovered that GPS satellites are being used as an unconventional key distribution platform, broadcasting hidden military codes embedded within civilian navigation signals. This covert communication method leverages the ubiquity of GPS infrastructure to distribute cryptogr
Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe