Author: Florian Burnel

Learn how hotel Wi-Fi DNS poisoning can hijack Microsoft 365 logins and what defenses block this campaign before credentials are stolen.

Click to Pray leaked 719,517 user profiles through an IDOR flaw. Learn how the Vatican’s prayer app exposed personal data for months.

Codeberg adopts rules against AI-generated projects and vibe coding. Discover why the forge is tightening its policy and what it means.

Dolphin X targets 300 apps and uses AI to rank victims by value. Discover how this Windows infostealer works and what Varonis uncovered.

Discover how the RefluXFS XFS flaw grants root access on RHEL, CentOS, and AlmaLinux, and learn how to check and patch it.

Discover the Thermal Master P3, a pocket thermal camera for smartphones. Read the review, specs, and real-world use cases.

Learn how Certighost lets a standard AD account impersonate a domain controller via AD CS, and discover how to protect your servers.

SharedRoot lets Claude Cowork escape its VM and access host files. Learn how the attack works and what defenses can break the chain.

LG monitors can trigger silent app installs on Windows 11. Discover how the device metadata feature works and how to block it.

Discover Thunderbird 153’s new ESR base, native Exchange support, security upgrades, and 61 CVE fixes. Learn what changes for enterprises.

Discover Thunderbird 153’s new ESR base, native Exchange support, security upgrades, and 61 CVE fixes. Learn what changes for enterprises.

CVE-2026-8933 in snap-confine can let local Ubuntu users gain root. See affected versions, fixes, and how to patch now.

Jellyfin’s project lead and two key contributors have left. Discover why burnout and AI tensions are shaking the open source media server.