The Edge of the Cyber World See the latest
Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an attacker who can access the server’s web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server…
This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Don’t be fooled by this summer of AI hype —Timnit Gebru, executive director of the Distributed AI Research Institute (DAIR), and Emily M. Bender, professor of linguistics at the University of…
Meta’s Muse AI assistant has gone 24 hours without a fix for a macOS vulnerability that lets local malware quietly hijack the app and turn it into what one researcher calls “the ultimate backdoor.” The bug, disclosed publicly on September 21, 2026 by Objective-See founder Patrick Wardle, remains unpatched as of September 22, according to…
A single undocumented setting inside Meta’s Muse AI assistant for macOS can be flipped by any unprivileged process already running on a Mac, silently rerouting a user’s dictated prompts and audio to a server an attacker controls. That is the core finding security researcher Patrick Wardle published on September 21, 2026, in a proof of…
Tenable shipped Nessus 10.12.4 on August 19, 2026, and the free Nessus Essentials tier that ships with it still confuses people who learned the product years ago. Older guides insist the free edition scans up to 16 IP addresses. Tenable’s current product page and its 10.12 documentation both say five. That single number changes how…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site’s server. WordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed “Comment2Shell,” on September 17 in version 7.1.1 and told site owners to…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…
A single browser extension, using permissions no more unusual than what a standard ad blocker requests, can seize control of AI assistants built into five major Chromium-based browsers. That is the finding behind BragJack, a proof-of-concept attack disclosed this month by security researcher Gal Weizman of Forever Security and detailed in a September 19, 2026…
AI Beats Minecraft in Under 10 Minutes Before 2028? Manifold Bettors Now Put It at 70%. A niche Manifold Markets question about whether an artificial intelligence can complete a sub-10-minute Minecraft speedrun is drawing top-tier trading volume, with the YES side priced at 70% as of September 20, 2026. The spike follows a widely covered…
