U.S. election system exposed to hacking: Trump – The Hindu

🚨 CVE of the Week 🚨 CVE-2026-49160: High-Severity Denial of Service (DoS) Vulnerability in Windows HTTP.sys This zero-day flaw exposes vulnerable systems to an “HTTP/2 Bomb” attack, where an unauthorized, remote attacker can send a tiny, specially crafted HTTP/2 request that expands rapidly in memory, triggering uncontrolled resource consumption. Why it matters: – Instantaneous crashing…

A new phishing-as-a-service (PhaaS) platform dubbed “ARToken” appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. Cisco Talos researchers discovered the platform while investigating phishing infrastructure used in an incident response engagement and identified a React-based management panel called “ARToken Panel” that exposed…

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. U-Boot is one of the world’s most widely used open-source bootloaders and is found in many embedded Linux devices, including…

TuxBot v3: The IoT Botnet Built With AI – Bugs, Disclaimers and All Pierluigi Paganini July 16, 2026 TuxBot v3, an AI-built IoT botnet for 17 architectures, shipped with LLM bugs and safety disclaimers the developer never removed. Palo Alto Networks’ Unit 42 identified a previously undocumented modular IoT botnet framework called TuxBot v3 Evolution,…

Researchers have built a pull request that steals a repository’s secrets by hiding the malicious instruction inside a PNG that AI code reviewers never open. The reviewer waves the change through. Later, a coding agent reads the picture, opens the repo’s .env, and writes every key into the source as a harmless-looking list of numbers….

Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bands—every year, more and more tech devices are promising to monitor our health and fitness, guide us toward healthier living, and provide useful health metrics to take to our doctors. But few of these tools provide the sorts of privacy and security promises we demand from…