Two Air India pilots remain off the roster on unconfirmed screens, while DGCA now queues close to 14,000 crew for a one-time drug test by July...
After Claude Opus and Fable refused live exploit logs, Hugging Face decoded a July agent breach on its own hardware with Z.ai’s GLM-5.2.
NCA and IWF told parents to hide children's photos after tools learned to clone a face from 20 pictures in 15 minutes.
IonStack rooted Android 17 from a Firefox URL, but GhostLock is a 2011 Linux kernel hole that also breaks shared Docker and CI hosts.
Immurok stays on Bluetooth by posing as a keyboard, then a local fingerprint match drives PAM, sudo, and AI-agent approval on Mac and Linux.
iOS 26.5.2 pulled 38 beta security fixes into public builds, then iOS 26.6.1 did the same with iOS 27, shrinking the window attackers get from Apple’s...
A Toledo church collected tithes in a consumer payment app while one employee wrote the board reports, a four-year siphon the sentence does not fix.
MyCERT’s WhatsApp VBS alert hits Windows Desktop and Web, not phones, because VBScript is deprecated yet still on by default.
Operation Endgame seized Amadey and StealC servers in June 2026, yet StealC-labeled logs were still sold in August and no operators were named.
CISA’s distillation advisory funds model-access controls, not airport lanes or phone forensics, splitting three AI security stocks on one screen.