Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Vulnerabilities & exploits L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiaraI ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese. Dark Reading · Global · 30 Oct 2026
Vulnerabilities & exploits Drupal Commerce Core Vulnerability Exploited Against Online StoresDrupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Vulnerabilities & exploits Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching VulnerabilitiesGoogle on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows significant gains across coding and agentic tasks as well as across key capabilities critical for cybersecurity defense, landing a firm… The Hacker News · Global · 29 Oct 2026
Vulnerabilities & exploits Cyber Vulnerabilities Besiege Italy, Absent Clear CauseResearchers can't quite explain why cyber threats look so different in Italy compared with everywhere else. Dark Reading · Global · 29 Oct 2026
Vulnerabilities & exploits Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own WinA chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at… The Hacker News · Global · 28 Oct 2026
Vulnerabilities & exploits GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionThe GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server… The Hacker News · Global · 27 Oct 2026
Vulnerabilities & exploits 10 Software Security Practices Built for the Next 250 YearsThis Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations. Dark Reading · Global · 26 Oct 2026
Vulnerabilities & exploits Why Caribbean Threats Cascade Into Global Cyber-RiskThe region is demonstrating what happens when exploits accelerate but assurance does not. Dark Reading · Global · 23 Oct 2026
Vulnerabilities & exploits There's only so much code: the rise in vulnerability numbersThe September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like? Cisco Talos · Global · 20 Oct 2026
Vulnerabilities & exploits The Q3 Vulnerability Pulse: Discovery ≠ ExploitationIs the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter. Cisco Talos · Global · 15 Oct 2026
Vulnerabilities & exploits Microsoft Patches More Than 1,400 Security FlawsMicrosoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Krebs on Security · Global · 13 Oct 2026
Vulnerabilities & exploits Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilitiesMicrosoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Cisco Talos · Global · 13 Oct 2026
Vulnerabilities & exploits Making sure the checks get printedPierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn't an option. Cisco Talos · Global · 8 Oct 2026
Vulnerabilities & exploits How to fix a bug in a fixProject Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are causing immediate user harm, due to… Google Project Zero · Global · 6 Oct 2026
Vulnerabilities & exploits Windows Exploitation Techniques: Dangling COM Object RegistrationsThis short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for CVE-2026-50343, a bug dubbed “Dark Elevator” by Calif. The root cause of the bug was a dangling COM object… Google Project Zero · Global · 21 Sep 2026
Vulnerabilities & exploits Testing race conditions with memory access tracing and stack-based delay injectionMany security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static analysis. Regression tests:… Google Project Zero · Global · 8 Sep 2026
Vulnerabilities & exploits How BitLocker PINs help protect your data and devicesUsing a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one... UK NCSC · United Kingdom · 13 Aug 2026
Vulnerabilities & exploits A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window OpensWe recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. While we had an exploit… Google Project Zero · Global · 13 May 2026
Vulnerabilities & exploits On the Effectiveness of Mutational Grammar FuzzingMutational grammar fuzzing is a fuzzing technique in which the fuzzer uses a predefined grammar that describes the structure of the samples. When a sample gets mutated, the mutations happen in such a way that any resulting samples still adhere to the grammar rules, thus the structure of the… Google Project Zero · Global · 5 Mar 2026
Vulnerabilities & exploits Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529In the first part of this series, I detailed my journey into macOS security research, which led to the discovery of a type confusion vulnerability (CVE-2024-54529) and a double-free vulnerability (CVE-2025-31235) in the coreaudiod system daemon through a process I call knowledge-driven fuzzing.… Google Project Zero · Global · 30 Jan 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.