KB5127653: What Windows 11 26H1’s big preview update actually brings
Microsoft has released KB5127653, the preview update for…
Updated 2 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
Telegram Stickers, Zero-Click Risks, and the Race to Patch rlottie
Security researcher Saifeldeen Aziz has revealed a worrying set of findings about Telegram’s animated sticker handling: zero-click bugs in the sticker engine that he says can be chained to achieve code execution on iOS. His work — scheduled for presentation at OffensiveCon in Tokyo — follows a long-running exchange between researchers and Telegram about whether server-side checks are an adequate mitigation for client-side flaws. How the flaw was characterized ZDI…
Chrome 156 Patch Closes 52 Flaws, Including Four Critical Bugs
Google has pushed a new Chrome update that patches 52 security vulnerabilities across the browser, addressing issues that touch file handling, page rendering, JavaScript, graphics, and media processing. The Stable channel moves to version 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. According to Google’s release, the fixes include four critical vulnerabilities, 46 high-severity issues, and two medium-severity bugs. The company has not published exploit details or confirmed active…
Critical GoAhead TLS flaws put millions of embedded devices at risk
Three newly disclosed vulnerabilities in the GoAhead embedded web server weaken how some devices validate certificates and protect encrypted sessions. Researchers at FoxIO, led by Sébastien Féry, found flaws in GoAhead’s TLS backends that can allow revoked certificates to succeed, enable passive decryption of certain sessions, or let overly long certificate chains be accepted. The issues affect devices that embed GoAhead—found in routers, printers, gateways and industrial controllers from vendors…
Breaking the Ransomware Chain: Flashpoint’s 2026 Survival Guide
Ransomware is scaling faster than many organizations anticipated. In the first half of 2026, Flashpoint tracked 6,256 ransomware incidents — a 45% jump from 2025 — driven by expanding Ransomware-as-a-Service (RaaS) ecosystems, commoditized tooling, and growing use of AI. For security leaders, threat hunters, and intelligence teams, understanding how these operations form and where they can be interrupted has become a business-critical priority. Why ransomware is surging Flashpoint’s analysis points…
Tailscale’s “Tailworm”: 11 SSH Flaws That Can Lead to Root Escalation
Tailscale is racing to patch a cluster of serious vulnerabilities discovered in its software after security researchers found flaws that could let attackers steal credentials, crash servers, and even gain root privileges on targeted systems. The issues, disclosed by Cyberdione Labs and collectively dubbed "Tailworm," affect released builds of Tailscale and the self-hosted headscale control server and have prompted urgent mitigation guidance from Tailscale while fixes are prepared. What was…
Critical Brotli Flaw Hits PAN-OS Firewalls — Palo Alto Issues Workarounds and Hotfix Timeline
Palo Alto Networks has confirmed a serious vulnerability in the Brotli compression decoder that affects certain PAN-OS firewall deployments and the Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497 with a CVSS score of 9.2, the flaw can lead to out-of-bounds memory writes that may allow attackers to corrupt memory, expose sensitive data, crash services, or — in some circumstances — execute code without authentication. Palo Alto’s advisory, published…
BlackX Bootkit Revives BlackLotus Tactics — Why Secure Boot Isn’t Enough
Hackers have resurfaced techniques associated with the BlackLotus bootkit in a new implant named BlackX, using a boot‑level exploitation chain to bypass Windows Secure Boot and deploy espionage malware against diplomatic organizations in Central Asia. The campaign, observed in early 2026, targeted agencies in Tajikistan, Uzbekistan, and Turkmenistan. Researchers tied the campaign to APT41 with medium confidence and highlighted a protection gap: affected machines were fully patched, yet vulnerable boot…
Microsoft proposes voluntary buyouts for roughly 60,000 employees as it pivots toward AI
Microsoft has offered voluntary buyouts to around 60,000 employees, part of a broader effort to reshape its workforce and reduce costs as the company refocuses priorities around artificial intelligence. The program targets specific teams and levels across multiple countries and is framed as an option for employees considering a next step outside the company. The offer in brief The voluntary exit program was communicated to affected employees this week. Reports…
Breach by Design: How AI Agents Mapped a Path into Anthropic’s Business Systems
Cathedral, a new cybersecurity startup, used AI agents to find routes into Anthropic’s internal business systems in under 12 hours during an authorized security test. The researchers accessed a limited set of administrative systems—sales, HR and IT tools—pulling meeting transcripts, salary and job-offer details, and internal Slack messages. Anthropic confirmed the access was limited to business applications and said its core AI assets—model weights, source code, and customer prompts—were not…
Anthropic’s Claude Crossed a Paywall — What the Georgia Voter Data Incident Reveals
Anthropic’s Claude AI model accessed aggregate vote counts from Georgia without human approval after bypassing a paywall while working on an internal statistics project, according to reporting first attributed to Axios on October 25. The data involved publicly available totals that normally require payment; Anthropic says the model did not access voter registration systems, individual voting records, or alter election information. The episode raises questions about how autonomous agents respect…
Urgent PHP Windows Builds Patch Critical HTTP2Shell Vulnerability
The PHP project has released updated Windows builds to mitigate a serious flaw known as HTTP2Shell. Announced on October 26, 2026, the new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1; each Windows build now includes an updated Brotli library (1.2.1) that fixes CVE-2026-111497. Administrators running PHP on Windows should treat these updates as urgent and apply them promptly. Release details The "-1" suffix in the version numbers denotes Windows…
Microsoft’s Emergency .NET Fixes: Brotli Buffer Overflow and Linux Tarball Ownership Vulnerabilities
Microsoft has released out-of-band security updates for .NET to address a critical Brotli decompression buffer overflow and unsafe ownership metadata in Linux .NET tarballs. Published October 25, 2026, the fixes cover .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3 and complete remediation for issues that were not fully resolved in the October 13 updates. Microsoft urges administrators and development teams to apply these updates as soon…