The Zoom hack that says, ‘Don’t record me’
VC Jeremy Levine has a wry solution to something that routinely annoys him, according to a new Wall Street Journal article on the rise of AI transcription apps. On Zoom, he is no longer “Jeremy…
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Swati KhandelwalJul 17, 2026Vulnerability / Web Security An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and…
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory is gone until the process…
My new Steam Machine is adorably disappointing
I got my Steam Machine this week. I kind of love it. And I’m still disappointed in it. It might be unfair to assign blame to Valve for the woes of the PC hardware world…
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Ravie LakshmananJul 17, 2026Software Supply Chain / Malware Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious…
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator’s own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama,…
New Mac malware pretends to be a login box that won’t go away
Summary created by Smart Answers AI In summary: Macworld reports on ClickLock Stealer, a new macOS malware discovered by Group-IB that locks Mac systems until users enter their login password, then steals sensitive data. The…
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka…
FBI arrests man accused of using Steam games to drain victims’ crypto wallets
U.S. prosecutors have accused a Florida man of uploading fake video games that contained malware to Steam, the popular PC games platform. Once victims downloaded and installed the games, the malware was designed to infect…
Grab a 24,000mAh Anker portable charger for just $35 at Woot
If you’re looking for a power bank that can handle your iPhone, iPad, and even your MacBook Air, you usually need to spend at least $50. Not today: This Anker 24,000mAh 65W Portable Power Bank…