A newly disclosed vm2 vulnerability can let sandboxed JavaScript escape to the host system under specific Node.js 25 conditions, and proof-of-concept exploit code is already public.
Disc Soft says attackers compromised DAEMON Tools Lite installers in its build environment, and users who installed the free version since April 8 should remove it and scan their systems.
Palo Alto Networks says attackers are already exploiting CVE-2026-0300, a critical PAN-OS flaw that can allow unauthenticated remote code execution on exposed firewalls.
Users who downloaded DAEMON Tools from the vendor’s official website between April 8 and early May may have received more than a legitimate disk-imaging utility. Security researchers say several official...
The FTC has moved to settle its long-running case against Kochava with an order that would stop the data broker from selling Americans' precise location data without explicit consumer consent and impose new compliance controls if the court approves it.
cPanel released an emergency update on April 29, 2026 to fix a critical authentication bypass flaw in cPanel and WHM, while Namecheap temporarily blocked ports 2083 and 2087 as a precaution.
GitHub says it fixed CVE-2026-3854 within hours after Wiz reported a git push vulnerability that could have exposed millions of private repositories and fully compromised vulnerable enterprise servers.
The European Commission says Meta’s age checks did not effectively stop children under 13 from creating or keeping Instagram and Facebook accounts.
EU governments and lawmakers failed to agree on proposed changes to the AI Act after marathon negotiations, extending uncertainty for companies preparing for compliance.
Akamai says an incomplete patch chain around Windows Shell and SmartScreen created CVE-2026-32202, a flaw Microsoft now flags as exploited in the wild.
The medical-device giant says patient-facing products and operations were not disrupted, but it is still investigating whether personal information was accessed.
IBM says Bob goes beyond code generation, bringing AI orchestration, security controls, and auditability across enterprise software delivery.