Cursor’s extension warning now covers two Claude Code versions
Modified packages could leave persistence outside the editor. The updated notice changes what affected developers should c...
Ideas. People. A brighter tomorrow.
Security
36 stories
Android’s silent SMS crash has a fix. Device rollout is the harder question
The flaw can interrupt telephony without a tap. Conflicting patch-date accounts make device-...
Fresh thinking
Node2Shell is now in CISA’s exploited-flaw catalogue: check the runtime still serving traffic
The Brotli decoder flaw has fixed Node.js releases. Updating a system library alone may leave bundled runtimes and contain...
Warhorse confirms a cyberattack, with the scope still under investigation
The Kingdom Come studio acknowledges unauthorized access to systems and company data. It has not identified every affected...
The EDK II flaw makes network boot a firmware security priority
CVE-2026-97631 targets a specific pre-boot network path. Identifying exposed machines and obtaining vendor firmware matter...
Proton’s Flock map makes surveillance infrastructure visible. It is not a live camera feed
A US camera-location dataset can reveal concentration and gaps. Ownership, retention and access policies still require sep...
Teams plans to spot phishing in the conversation, before the dangerous link
Microsoft’s November roadmap targets risky first contact from external senders. Context can help, but a warning still need...
Capcom’s breach update separates a global data exposure from 19 shopping accounts
The latest notice adds Japanese purchase records to the incident. The smaller figure does not replace the 11.77 million af...
ConnectWise outlines a return to service. Customer tenants still need their own review
Backup restoration access is expected before full re-enrollment, subject to testing. Preserved archives do not establish t...