In gymnastics, a perfect 10 gets you a gold medal. In cybersecurity, a perfect 10 CVSS score means an unauthenticated stranger on the internet can read any file on your server with a single HTTP request. GitLab just scored the second kind, …

Meta has spent two decades and multiple regulatory settlements teaching the internet exactly how much it trusts your data. Naturally, its next move is asking you to hand it your email, calendar, health records, and credit card — for a month…

Samsung has been folding phones in half since 2019, patiently waiting for Apple to show up to the party. Apple has now shown up — fashionably late, wildly expensive, and insisting it invented the concept of "hinge" along the way. Two Scree…

Nothing says "we did science" quite like announcing a historic breakthrough and triggering a credit dispute before the ink on the press release is even dry. OpenAI just proved that even the Millennium Prize Problems aren't immune to workpla…

Every software project eventually has that one relative who shows up, quietly throws out the expired stuff in your fridge, and leaves the kitchen cleaner than they found it. For Drupal, that relative is Drupal 12, and beta1 just walked thro…

Somewhere out there, a hacker looked at Magento's password-reset-reminder emails and thought, "you know what would be fun? Turning that into a loaded gun." Enter StyleSmuggler, the zero-day that spent a week backdooring online stores before…

Four hotfixes in five weeks is the kind of cadence you expect from a buggy mobile game, not the remote monitoring software that IT teams trust to babysit their entire client fleet. Yet here we are, hotfix number four, and this one's a maxim…

Turns out "great minds think alike" isn't quite the explanation when six Chinese AI companies all happen to develop suspiciously Claude-and-GPT-shaped capabilities. The U.S. government has a different word for it, and it starts with "distil…

Feels like Drupal 11 just got its training wheels off, and here comes Drupal 12 rolling up in a beta trench coat. The Drupal core team doesn't do "we'll get to it eventually" — they do calendars, and the calendar says it's time. Beta Week …

Six. That's how many times in 2026 Google has had to yank the fire alarm on a Chrome bug that hackers were already using in the wild before anyone patched it. At this point the V8 engine deserves its own incident response retainer. A Craft…