Fortinet has disclosed a critical vulnerability in FortiSandbox (CVE-2024-36509) that allows unauthenticated attackers to execute arbitrary commands remotely. The flaw affects FortiSandbox versions 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6, carrying a CVSS score of 9.6. Organizations using affecte
Security researchers have discovered that GPS satellites are being used as an unconventional key distribution platform, broadcasting hidden military codes embedded within civilian navigation signals. This covert communication method leverages the ubiquity of GPS infrastructure to distribute cryptogr
Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe
A critical vulnerability in Veeam Backup & Replication software allows authenticated attackers to execute arbitrary code remotely on affected servers. The flaw, which impacts multiple versions of the widely-deployed enterprise backup solution, poses significant risks to organizations relying on Veea
Apple has confirmed that its Apple Intelligence features utilize Google’s Tensor Processing Units (TPUs) for cloud-based AI processing, raising eyebrows about privacy guarantees. Despite outsourcing compute infrastructure to a third-party provider, Apple maintains that user data remains private thro
A data breach notification appearing on Maine’s government portal claims Discord exposed 10 million user records, but multiple inconsistencies in the filing raise serious questions about its legitimacy. The notice lacks official Discord confirmation, contains unusual formatting, and exhibits charact
Security researchers have unveiled FROST (File system and RDMA Operations-based Side-channel Timing), a novel side-channel attack that exploits SSD timing characteristics to allow malicious websites to track which websites and applications users access. By measuring minute timing differences in stor
Google has released an emergency security update for Chrome, addressing CVE-2026-XXXXX, the fifth zero-day vulnerability exploited in the wild this year. The high-severity flaw affects the V8 JavaScript engine and allows remote attackers to execute arbitrary code through specially crafted web pages.
The French government’s secure messaging platform Tchap suffered a security breach allowing attackers to hijack user accounts through a password reset vulnerability. The incident exposed the accounts of government officials, civil servants, and military personnel who rely on the platform for officia
Microsoft has enhanced Defender’s detection capabilities to monitor abuse of the Remote Procedure Call (RPC) protocol, a communication mechanism frequently exploited by threat actors for lateral movement and privilege escalation. This update addresses a long-standing blind spot in Windows security m