"Fully patched" used to mean something. Then StyleSmuggler showed up, waltzed past every Magento and Adobe Commerce store running the latest updates, and proved that even the security equivalent of a gym membership doesn't guarantee you'll …

Your AI assistant is about to need ID. Not a driver's license, but the digital equivalent — because it turns out that letting autonomous bots swipe your credit card at scale works a lot better when the payment networks can actually tell who…

After years of watching Samsung, Google, and half the Android world fold their phones like origami cranes, Apple has officially entered its bendy era. The iPhone Duo is here, it's titanium, and it costs about as much as a decent used car do…

Somewhere out there, a maintainer of the SAML SSO module just had the worst Tuesday of their year. The Drupal Security Team's September 9 disclosure batch dropped 20 contributed-project advisories in one go — and eleven of them, nearly the …

In gymnastics, a perfect 10 gets you a gold medal. In cybersecurity, a perfect 10 means three different hacking crews — including a Russian state-sponsored espionage unit and a ransomware gang — are currently taking turns walking through yo…

Somewhere in a Russian-speaking corner of the internet, someone built themselves a team of AI agents, pointed them at a print management server, and went to make coffee. By the time it was ready, eleven organizations had already been compro…

Tech roadmaps are basically promises companies make to the future, and future companies almost never keep them on time. IBM just did the opposite — it hit a 2029 quantum milestone in early September 2026, three years ahead of its own schedu…

For a while now, watching OpenAI's Codex build and fix its own code has felt a bit like watching someone else's dog do an impressive trick — cool, but not yours to use. As of September 10, that changed. OpenAI opened the Agents API in publi…

WordPress powers something like 40% of the web, which means every time a popular plugin gets a bad update, it's less "a bug" and more "a public health event." This week's crop: three separate plugins, three separate CVSS 9.8 scores, and the…

Single Sign-On is supposed to make logging in feel effortless and secure at the same time. This week, the "secure" part took a hit: Drupal's Security Team dropped eleven advisories against a single SAML SSO module in one batch, four of them…