Anthropic’s Claude Mythos 5.2 improves vulnerability discovery
Anthropic launched Claude Mythos 5.2 on November 9…
Updated 4 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
SAP’s November 2026 patch cycle fixes dozens of SAP flaws
SAP’s November 2026 Security Patch Day covers critical vulnerabilities in SAP NetWeaver, Web Dispatcher, Gateway, and other business applications. Released on November 10, the update includes 35 new security notes, four GitHub security advisories, and three updates to earlier notes. Highest-risk SAP flaws span NetWeaver and gateway tools Four vulnerabilities in the release carry the maximum CVSS score of 10.0. The patched issues include memory corruption, missing authentication, broken access…
iOS sandbox flaw may expose crypto wallet files on iPhone
Binance warned iPhone users about worse_query, an iOS flaw that could let malicious apps read files belonging to other apps. The warning named iOS 26.7.1, 27.0.1, and 27.2 as affected, and said seed phrases, private keys, and login details could be exposed. What Binance said about the flaw The exchange described this as an operating system issue rather than a problem tied to Binance alone. It said the normal boundary…
Terminal2Shell claims a 1971 flaw affects billions of devices
Terminal2Shell says a flaw dating back to 1971 affects more than two billion devices and lets anyone who opens a terminal gain an interactive shell. The page presents the issue as “TermGeddon,” but it is satire rather than a confirmed vulnerability disclosure. The supposed issue and what it actually shows The site lists a CVE as pending and gives the problem a CVSS score of 11.0 out of 10. That…
GhostAction campaign breaches 500-plus GitHub accounts
A new wave of the GhostAction campaign has compromised more than 500 GitHub accounts. The attackers used those accounts to plant a fake security workflow across tens of thousands of repositories, and the workflow steals cloud, AI, and publishing credentials. Malicious workflow planted across repositories Security firm Socket says the affected accounts began adding the malicious file on October 7, 2026. Some of the repositories belong to large organizations. On…
Spacefast gives Automattic a way to host vibe-coded apps and sites
WordPress.com owner Automattic has introduced Spacefast, a new service for deploying vibe-coded websites and apps as the web changes. The product provides infrastructure for those projects, and it is designed to help turn them into functional websites, apps, or services. How Spacefast is built to work Spacefast supplies databases, authentication, file uploads, emails, and analytics for vibe-coded apps. It also lets users connect outside tools such as ChatGPT, Claude, Hermes,…
Chrome zero-day patch reaches Stable and Extended Stable users
Google has fixed a Chrome zero-day that attackers were already using. The flaw is tracked as CVE-2026-125350, and it allows a remote attacker to run malicious code in the browser. The same patch also reaches enterprise users through the Extended Stable channel. Google Chrome Stable update closes exploited XML flaw Google’s Stable channel update moves Chrome to version 157.0.8103.50/.51 for Windows and Mac and 157.0.8103.50 for Linux. The rollout will…
ForgeRock identity systems gave researchers remote car access
Researchers found that a vulnerability chain in ForgeRock identity systems let them run code on two automakers’ production servers and unlock connected cars remotely. The work was part of controlled security research, not a criminal campaign, and the issue was fixed within about two hours after both unnamed automakers received the report. ForgeRock attack chain in production systems The investigation started with the Android apps used by vehicle owners. Both…
Operation Snowball exposes how a DeepSeek AI agent broke into telecom systems
A jailbroken DeepSeek AI agent spent more than two weeks breaking into a European telecom provider and 13 companies hosted on its systems. It also reportedly reached millions of healthcare records during the campaign, which researchers at Malbear Labs call Operation Snowball. Open directory revealed the operator’s workspace Malbear Labs found the activity after a routine sweep uncovered an open directory with the attacker’s full workspace. The directory needed no…
Former FBI agent admits to stealing crypto from fraud victims and hackers
A former FBI agent has pleaded guilty to taking nearly $2.5 million from the cryptocurrency wallets of fraud victims and nation-state hackers under investigation. Patrick Steven Yaroch, 37, worked on an FBI Boston Division national security investigative squad from 2017 to 2025 and later served as a supervisory special agent in the FBI Headquarters Counterintelligence and Espionage Division from February 2025 to July 2026. His arrest came on July 31…
Treasury cuts off MEXC from the US financial system over sanctions links
The US Department of the Treasury has cut off MEXC Global from the US financial system over sanctions evasion and links to cybercrime gangs. The order also points to activity tied to Iran, North Korea, and Russia, and MEXC says it is reviewing the action with its legal and compliance teams. What the Treasury order says about MEXC MEXC Global is a Seychelles-based crypto exchange founded in 2018. The company…
Google Gemini lets blocked images slip through downloads
Google Gemini allowed users to download AI-generated images that its safety filters had refused to show, according to research published by Fog Security on November 5, 2026. The bypass did not need a jailbreak, and the download feature sometimes returned a rejected image while the chat window showed a different picture that was allowed. Fog Security’s June report and Google’s response Fog Security reported the issue to Google in June…
SonicWall SSLVPN flaw reaches CISA’s exploited list
CISA has added a SonicWall SonicOS SSLVPN vulnerability, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog. The issue affects authentication enforcement in SonicOS SSLVPN and can let users with valid alternate credentials bypass SAML controls, with possible bypass of multi-factor authentication through that login path. CISA listed the vulnerability on November 6, 2026, and set a November 20 remediation deadline. Its entry says ransomware use is unknown and does not call…