TECH - WEB DEVELOPMENT NEWS

Two critical vulnerabilities in The Events Calendar WordPress plugin could allow unauthenticated attackers to take over vulnerable websites. The flaws affect more than 600,000 active installations. They can lead to remote code execution, administrator password resets, malware deployment, and full server compromise. Wordfence Argus, developed by the Wordfence Threat Intelligence team, discovered … [Read more...]

Hackers are actively exploiting a critical Gitea remote code execution vulnerability, tracked as CVE-2026-60004, to compromise internet-facing source-code management servers. Researchers found that a Chinese-speaking threat actor, named Red Heron, quickly turned public exploit code into an automated attack framework that stole source code, collected credentials, installed backdoors, and moved … [Read more...]

Researching and saving things is a pretty standard part of my workflow. Be it articles I want to read, tutorials for projects, just interesting projects and software to write about, and more. For a long time, my workflow revolved around Pocket. But with Pocket no longer a thing, I've tried to look up a proper alternative. I even tried using bookmarks, but that got out of hand pretty quickly. ➪ … [Read more...]

Confidential cloud systems are designed to keep a customer's data hidden even from the server operator. DDRop shows that this promise can fail when an attacker can tamper with the DDR5 memory path. The new technique is a physical hardware attack, not malware, but it can undermine workloads protected by Intel TDX and AMD SEV-SNP. Earlier work had already raised questions about trust boundaries in … [Read more...]

A high-severity Telegram Desktop vulnerability let attackers hide JavaScript in bot-created inline keyboard buttons and steal chat content when victims exported conversations as HTML files. Telegram fixed the issue in Desktop Beta 6.9.4 and Stable 7.0.1, but HTML exports created with older versions may remain unsafe. Security researchers Denis Rostilov and Aleksander Rostilov of ExPatch discovered … [Read more...]

The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability. … [Read more...]

Cybercriminals are using autonomous AI agents to turn compromised cloud systems into rapid credential-harvesting platforms. In a newly documented case, a suspected financially motivated actor planned, built, and ran a large-scale operation in under six hours, taking thousands of third-party credentials. The intrusion shows how quickly a cloud breach can become a wider identity crisis. Instead of … [Read more...]

Microsoft has confirmed that the September 8, 2026 Excel security update KB5002914 can silently break copy and paste in Excel 2016, 2019, 2021, and 2024. Microsoft added the defect to the update's known issues after Patch Tuesday users reported that paste, autofill, and formula dragging failed with no error. Microsoft's advisory says the paste operation might fail silently. A user copies a cell or … [Read more...]

Bitcoin is holding near Rs. 73.4 lakh as traders weigh weaker institutional demand against optimism surrounding the CLARITY Act vote. ETF outflows and uncertainty around the Federal Reserve and Bank of Japan are keeping volatility elevated, while Bitcoin's resilience during the AI-stock selloff offers some support. … [Read more...]

Realme 16 Pro Harry Potter Edition will launch in India on September 21 at 12pm IST. A dedicated microsite for the handset is now live on the company and Flipkart websites. The upcoming phone features a brown leather finish and has an argyle-textured rear panel. Realme 16 Pro Harry Potter edition will be available with a Hogwarts-themed limited-edition gifting box. Only 5,000 units of the gifting … [Read more...]

BGMI is gearing up to roll out its 4.6 Update tomorrow, which will bring a fresh batch of content and experiences to the popular battle royale game. Ahead of the update, Krafton India has released yet another set of BGMI redeem codes. This means players get one more chance to claim limited-time in-game rewards. The latest drop includes 50 codes linked to the new Dr. Quirk Set. But as always, … [Read more...]

Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware. … [Read more...]

Threat actors have been observed exploiting a critical remote code execution vulnerability in the Marimo notebook platform to steal AWS credentials and authenticate to an SSH bastion host within eight seconds. The attack, documented by the Sysdig Threat Research Team, abused CVE-2026-39987, a pre-authentication remote code execution flaw affecting Marimo versions up to and including 0.20.4. The … [Read more...]

If you like the idea of running an LLM on your own computer but tried awhile ago and were disappointed, it may be time to give it another chance. "A few months ago, any LLM that I could run on my Macbook scored 0% on an agentic coding eval I put together," Simon P. Couch, senior software engineer at Posit, posted on Bluesky this spring. "[The April] Qwen 3.5 and Gemma 4 releases both scored 90%." … [Read more...]

There is a quiet war happening underneath the AI boom, and most people are not paying attention to the right front. While headlines focus on which model is winning, which startup is raising money, or which chatbot is gaining users, a parallel race is playing out in data centers and corporate boardrooms across the world. The race is for AI infrastructure: the GPU clusters, power contracts, cooling … [Read more...]

Steve Yegge is not the shy and retiring type, so when he wants recommendations on how others are managing 10 to 20 (or more) coding agents, he posts the question on X. Specifically, he's looking for an IDE because "I use Emacs, and I wouldn't wish it on you." The replies (600 and counting) offer plenty of alternatives: Herdr, cmux, Conductor, the Claude and Codex desktop apps, and an impressive … [Read more...]

Microsoft has started rolling out an emergency out-of-band update to fix problems with its record-breaking September patch Tuesday update. The software giant patched nearly 1,000 flaws in its biggest update ever this month, but it also introduced some bugs that have affected businesses, developers, and gamers. The September patch Tuesday affected folder shares on Hyper-V-based Linux virtual … [Read more...]

Windows attackers are turning a built-in recovery feature into a tool for disruption. By abusing Volume Shadow Copy Service, intruders can copy protected data, access the Active Directory database, and erase recovery copies after ransomware. The technique blends into Windows activity. Backup software, remote management tools, and administrators may create or remove shadow copies, forcing defenders … [Read more...]

OnePlus N6 Lite will be launched in India on September 22, the company announced on Tuesday via a press release. The company has also revealed that the smartphone will be equipped with a 7,000mAh battery. Moreover, it will feature a flat display that refreshes at up to 120Hz. The OnePlus N6 Lite will be available for purchase in the country via Amazon. It will be offered in two colour options, … [Read more...]

Redmi Note 17 Pro and Redmi Note 17 Pro Max were launched in India on Tuesday as the latest additions to the Xiaomi sub-brand's Note 17 lineup. The Redmi Note 17 Pro Max is powered by an octa-core Snapdragon 6 Gen 5 chipset. On the other hand, the Redmi Note 17 Pro features a Snapdragon 6s Gen 4 SoC. The Pro Max model is equipped with a 10,000mAh battery, while the Pro model packs a 9,000mAh cell. … [Read more...]