Software & Apps

Operating systems, apps and the tools worth installing

Apple's circular Apple Park headquarters campus in Cupertino

Apple just cut 147 Bay Area jobs — and Vision Pro's gaming team is basically gone

A WARN filing shows Apple slashing Siri and Vision Pro roles as it redirects the team toward smart glasses instead of headset gaming.

Priya Nair · 1d ago · 7 min

Microsoft SharePoint interface on a laptop screen in an office setting

Software

Microsoft's SharePoint bug had a missing half. Someone just published it — and honeypots are already lighting up

The JWT auth bypass we told you about two weeks ago just got its second half: a working RCE chain, two public PoCs, and active probing as of this week.

Priya Nair · 1d ago · 7 min

A laptop running Windows in a dim office setting, at night

Software

North Korean hackers had a Windows bug for weeks before Microsoft even knew about it

Check Point caught the exploit chain in the wild before Microsoft's own August Patch Tuesday shipped the fix — and this one installs a kernel-mode rootkit.

Priya Nair · 2d ago · 6 min

Networking equipment in a server rack, representative of the appliances NetScaler ADC and Gateway run on

Software

Citrix found two more holes in NetScaler — one skips the login screen completely

Three weeks after the last NetScaler patch-now story, Citrix is back with a critical bug that needs no password and no user interaction at all.

Priya Nair · 2d ago · 6 min

Rows of server racks in a data center, representative of the self-hosted infrastructure Gitea instances typically run on

Software

a Gitea admin's hosting bill flagged 70% CPU usage. that's how he found the hackers

A bug that lets anyone with a free account plant a git hook is now CISA's problem — and it started with a cryptominer, not a headline.

Priya Nair · 2d ago · 6 min

Construction cranes on a large building site against a city skyline

Software

a construction giant just leaked SSNs, bank accounts, and military project files in one breach

Payouts King says it walked off with 27 terabytes from Turner Construction — including files it claims are covered by U.S. arms-export law. Turner took seven weeks to tell anyone.

Priya Nair · 3d ago · 7 min

A terminal window showing Git commands on a dark background, representing a self-hosted Git server

Software

Gogs has a history of sitting on RCE bugs. this time, someone actually fixed it

Two critical bugs let anyone overwrite Git hooks and run code on your server — and for once, the fix shipped before it turned into the usual Gogs mess.

Priya Nair · 3d ago · 6 min

A business intelligence dashboard interface displaying charts and data tables, representative of the kind of analytics platform Metabase provides

Software

One free BI tool had a password-reset bug that handed out admin — hackers found it first

A single API endpoint let anyone become an administrator on thousands of self-hosted Metabase servers, and Framework, n8n and Kilo Code already got hit before the patch even shipped.

Priya Nair · 4d ago · 7 min

A server room of the kind that houses core banking infrastructure and third-party vendor systems

Software

LockBit just named the 7th-biggest bank in America as a victim — with zero proof to back it up

The ransomware gang gave itself two weeks and gave the bank exactly nothing to substantiate the claim — and that gap between accusation and evidence is the actual story here.

Priya Nair · 4d ago · 6 min

Apple MacBook laptop, representing macOS devices affected by the Screen Sharing vulnerability

Software

Your Mac's screen sharing tool had a secret skip-the-password bug — and hackers used it to mine crypto

CVE-2026-65400 let anyone on the network log into a Mac as root with zero credentials. Apple patched it August 6. Attackers were already inside, planting a cryptominer.

Priya Nair · 5d ago · 6 min

Rows of rack-mounted network appliances in a data center, similar to load balancer hardware

Software

This load balancer bug got patched in June. Hackers had a five-week head start before CISA said a word

CVE-2026-8037 lets anyone run root commands on Kemp LoadMaster appliances with zero credentials — and 792 attack attempts from 65 IP addresses landed before it made the federal watch list.

Priya Nair · 5d ago · 6 min

Cisco networking and firewall hardware mounted in a server rack

Software

Cisco's firewall has a bug that lets anyone crash it — no password, no login, just one request

CVE-2026-20349 doesn't steal your data. It just reboots your VPN gateway on command, and Cisco's already watching it happen in the wild.

Priya Nair · 5d ago · 6 min

Lines of code and terminal windows on a dark computer screen

Software

A hacker let AI run his cyberattacks solo. It barely worked — and that's the scary part

A DeepSeek-powered agent tried to hack 460+ systems on its own, including a Windows VPN bug rated CVSS 9.8 — and got shut out everywhere authentication actually worked.

Priya Nair · 5d ago · 7 min

A person typing on a laptop keyboard in a dimly lit room with code visible on screen

Software

There's a new group extorting ransomware victims — and it's not the ransomware gang

GuidePoint's threat intel team says the 'recovery firm' emailing breached companies with a $60,000 fix is running the same infrastructure as the original attack.

Priya Nair · 5d ago · 6 min

Windows Security app showing Microsoft Defender antivirus status on a laptop screen

Software

Microsoft's own antivirus has a hole in it right now — and even Microsoft can't patch it yet

CVE-2026-69414 lets a local attacker walk straight to SYSTEM through Windows Defender itself, there's still no fix nine days after the CVE was assigned, and CISA just started a clock on it.

Priya Nair · 5d ago · 6 min

Rows of server racks in a data center representing an email server infrastructure

Software

zimbra patched this bug in july. hackers are breaking into inboxes with it right now

CERT Polska is warning that attackers are actively exploiting an unauthenticated command-injection bug in Zimbra's SNMP monitoring component — one Zimbra quietly fixed five weeks ago, in version 10.1.20.

Priya Nair · 6d ago · 6 min

Close-up of a developer's hands typing code on a laptop keyboard

Software

a single request, no login, no clicks — and your public GitLab repo is gone

GitLab's emergency patch fixes a code-injection bug that let an unauthenticated attacker delete repositories, forge merge records, or ban maintainers in one HTTP request — and researchers reproduced it within minutes of the advisory going live.

Priya Nair · 6d ago · 6 min

Exterior of a Microsoft office building representing the company's cloud and identity infrastructure

Software

microsoft called this bug 'exploited.' then, a few hours later, it wasn't

A maximum-severity remote code execution bug in the identity system behind every Microsoft 365 login got tagged 'exploited in the wild' on Thursday morning — and un-tagged by evening, right after reporters started asking questions.

Priya Nair · 6d ago · 6 min