Android’s silent SMS crash has a fix. Device rollout is the harder question
The flaw can interrupt telephony without a tap. Conflicting patch-date accounts make device-specific update checks essential.
Topic archive
Security research
Follow6 stories
Cursor’s extension warning now covers two Claude Code versions
Modified packages could leave persistence outside the editor. The updated notice changes what affected developers should check.
Windows 11 update can block Smart App Control from being turned back on
Microsoft has published a targeted workaround. Systems where the protection is already enabled remain unaffected, and 24H2 Home and Pro users face a separate support deadline.
Anthropic’s AI replication study puts smart-device security back in focus
Controlled experiments show progress on parts of a replication chain, but the study does not demonstrate an autonomous small-model outbreak in the wild.
Drupal's critical Field UI flaw makes the whole site configuration matter
Contributed modules and custom code can expose vulnerable core functionality. The advisory identifies fixed branches and a specific temporary mitigation.
GitLab's critical patch needs an upgrade plan, not just a version target
Self-managed installations need the applicable fixed release, while older deployments must account for required stops, migrations and recovery prerequisites.