Attackers published a fake npm package that silently exfiltrated every file from Claude AI's working directory to a GitHub repository they controlled. It's the latest in a wave of supply chain attacks specifically targeting AI coding tools.
A four-year-old authentication bypass in Gitea's container registry (CVE-2026-27771) allowed anyone to pull private images without credentials. The fix is in version 1.26.2 — and Forgejo is also affected.
A compromised private key in StablR's 1-of-3 minting multisignature wallet let one attacker mint millions of unbacked USDR and EURR tokens, causing both to depeg sharply. The Malta-based MiCA-regulated issuer has frozen operations and notified regulators.
The European Commission is moving toward the largest DMA penalty ever imposed, targeting Google Search's favoritism toward its own shopping, flights, and hotel results. A decision is expected before the summer recess.
A group operating on behalf of Iran's Ministry of Intelligence targeted LACMTA in March 2026, stealing and then deleting data — forcing a multi-week recovery. The fake hacktivist persona 'Ababil of Minab' was a cover for an MOIS operation, part of a broader Iranian cyber campaign against US infrastructure.
ShinyHunters targeted Charter's Salesforce instance through a vishing attack on an employee's SSO credentials in April, claiming to have extracted 40 million customer records. Charter disputes the scope but confirms the incident.
CVE-2026-48710, dubbed BadHost, allows an attacker to manipulate the HTTP Host header so that Starlette reports a different URL path than the server actually routed — silently bypassing any middleware that inspects request.url.path for access control. FastAPI, vLLM, LiteLLM, and MCP servers are all affected.
Ferrari has unveiled the Luce, its first-ever BEV: a five-seat sedan shaped by LoveFrom, with 330-mile range and an interior that may set a new standard for 2026.
Google has replaced its traditional search engine with a fully AI-powered system built on Gemini 3.5 Flash, eliminating blue links in favor of conversational answers.
Ferrari has unveiled the Luce, its first-ever BEV: a five-seat sedan shaped by LoveFrom, with 330-mile range and an interior that may set a new standard for 2026.
Huawei unveiled a new chip design methodology called LogicFolding at ISCAS 2026 that uses 3D-stacked logic circuits to reach 1.4nm-class transistor density — bypassing the EUV lithography machines that US sanctions have placed out of reach.
The Nitrogen ransomware group has claimed a major attack on Foxconn's North American facilities, alleging it stole 11 million files — including confidential schematics tied to Apple, Nvidia, Intel, and Google.