Two critical flaws have been found in Cursor, an AI-powered code editor. The flaws could let prompt injection escape the sandbox. The issue is called DuneSlide. The two flaws are tracked as CVE-2026-50548 and CVE-2026-50549.…

WhatsApp is adding usernames to improve user privacy. The feature helps people connect without sharing a phone number right away. This can make new conversations feel safer. Users can chat with new contacts while keeping…

Hackers are actively exploiting a flaw in the Gravity SMTP WordPress plugin. The flaw can expose sensitive data from affected websites. The vulnerability is tracked as CVE-2026-4020. It has a CVSS score of 5.3, which…

Security researchers from Paradigm Shift have released a new exploit called usbliter8. The exploit targets SecureROM on Apple A12 and A13 chips. This matters because SecureROM runs at a very early stage of the boot…

CISA has warned Fortinet customers to secure their FortiGate devices. The warning follows a large campaign called FortiBleed. The campaign targets Fortinet devices that are exposed to the internet. These devices include firewalls and VPN…

Apple has released a security update for Beats Studio Buds. The update fixes a serious Bluetooth flaw. The flaw is tracked as CVE-2025-20701. It affects the Bluetooth pairing process. As a result, a nearby attacker…

F5 has released security updates for NGINX Open Source. The patches fix two critical flaws that could create serious risk for affected systems. The two flaws are CVE-2026-42530 and CVE-2026-42055. Both have a CVSS v4…

Top 10 Attack Surface Exposures in 2026 Cyberattacks in 2026 do not always start with advanced zero-day exploits. Many attacks begin with simple security gaps. These gaps include exposed admin panels, weak credentials, open databases,…