Skip to content
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Swati KhandelwalJul 29, 2026Vulnerability / Software Security Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked… 

US government bans new foreign-made humanoids, robot dogs, and solar inverters, citing risks to national security

US government bans new foreign-made humanoids, robot dogs, and solar inverters, citing risks to national security

The Trump administration is banning the import of new foreign-made humanoid robots, robot dogs, and power inverters, citing an “unacceptable” threat to national security. The move largely affects imports from China, which currently has the… 

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 (CVSS… 

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity. The… 

TechCrunch Disrupt: Find the Startups Everyone Will Talk About Next

TechCrunch Disrupt: Find the Startups Everyone Will Talk About Next

TechCrunch Disrupt Tickets Save 10% with PCWORLD10 Don’t miss one of the year’s biggest startup events Book Now (function () { document.querySelector(“#sticky-promo-block a”).addEventListener(“click”, function(e) { const debug = document.location.host.search(/lndo.site|go-vip.net/) !== -1; const text = this.closest(“#sticky-promo-block”).querySelector(“p.promo-title”).textContent;… 

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described…