Help us protect our backcountry recreation areas. Roadless rules defend forests, and help preserve their clean air, clean water, and local habitat.

Microsoft patches CVE-2026-96940, which lets authenticated attackers read other users' Exchange mailboxes within the same organization.

Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

A 14-year-old Linux kernel flaw in the AF_ALG cryptographic socket interface can allow unprivileged local users to gain root privileges and escape Docker containers.

GitHub disabled two actions-cool Actions again after re-enabled repositories left malicious May 18 tags able to execute credential-stealing code.

Critics see a surveillance network. Police see a crime-fighting tool.

The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS, including two critical ones. The vulnerabilities are already being actively exploited to...

Detailed information about Steam vulnerability on Windows lets any normal user silently escalate to SYSTEM. Get real-time updates, technical details, and mitiga

Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports remain affected.

GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw enabling unauthenticated file reads, as in-the-wild probes began.

Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, thanks to AI.

In the trade-off between privacy and security, it helps to know the extent of your local surveillance infrastructure. There are now easy ways to find out.

The Chinese e-commerce giant isn’t actually recording users but instead playing a silent sound and measuring how specific devices processed it.

Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the $6,...

Zombie Card rewrites Visa NFC expiry data in transit, reviving expired cards at one tested U.S. bank without breaking card cryptography.

CISA adds CVE-2026-60004 to KEV amid active Gitea RCE exploitation; a separate reported attack deployed a miner-like dropper.

New FBI data shows case closure rates for the Atlanta Police Department have not improved despite thousands of ALPRs installed since 2021.

Apollo Global Management has disclosed a July cyber incident in which attackers gained unauthorized access to cloud platforms and potentially obtained highly sensitive personal information.

Age verification (laws and regulations requiring platforms and websites to assure or estimate that a user seeking to use an online service is of a certain age) is everywhere. At the time of writing,

Two curious students at Eastman-Baldwin Junior High learn fun and important lessons about civics and the power of our rights and freedoms from their knowledg...

The president is prioritizing his own interests over the national interest.

"This has become a sleeper issue for the entire election cycle," Senate Republicans' committee says.

Flock and other automatic license plate readers (ALPRs) are taking over our neighborhoods, tracking our movements, and building detailed databases about us. Tell Congress to rein in this mass surveillance tool: No Flock. No ALPRs. No exceptions.

A newly disclosed Linux kernel vulnerability called Copy Fail lets a normal user gain root access using just a 732-byte script. The exploit is simple, reliable, and works across major distributions…

Vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask if AI can help.

Attackers are exploiting SharePoint flaw CVE-2026-55040 after a public PoC was released, allowing unauthenticated users to impersonate admins

HOPE (Hackers On Planet Earth) is an annual conference for hackers, makers, and tech enthusiasts based in New York City.

ShinyHunters stole the names, addresses, email addresses, and phone numbers of 1.6 million RingCentral customers.

Apple's CVE-2026-65400 Screen Sharing flaw is under active exploitation on internet-exposed Macs to install a Monero miner.

A Flock presentation shows the company planned to use around 350,000 Uber, Lyft, and delivery drivers to collect license plate data for its surveillance system.

Police departments across the country are lining up to launch drone-as-first-responder (DFR) programs, and hundreds have cleared a necessary hurdle toward making deployment a reality, expanding aerial...

A critical pre-authentication remote code execution (RCE) vulnerability in WordPress Core, dubbed "wp2shell."

Automatic license plate reader (ALPR) companies like Flock Safety are quietly trying to build a nationwide mass surveillance system. If there are Flock cameras in your city, they are tracking, logging, and sharing your movements without a warrant. But we're not powerless. More and more communities are rejecting these creepy cameras — and yours can be one of them!

Congress is preparing to vote on the KIDS Act, a sweeping internet bill that would pressure websites and apps to determine users’ ages before allowing them to read websites, send private messages, or participate in online communities.

This Pride month, we’re calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers