Would you host part of an AI data center in your home?

A solar and home energy storage company is expanding into AI data centers, but not by building one - instead, it's offering to pay its customers to put its compute units in their homes. Sunrun is launching a pilot progr…

https://www.theverge.com/ai-artificial-intelligence/963930/sunrun-distributed-ai-data-center

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Samsung may finally fix Voice Recorder’s biggest transcription limitation

Your Samsung phone could soon get much better at transcribing voice notes.

https://www.androidauthority.com/samsung-voice-recorder-cloud-transcription-3686527/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

The brains behind the machines: how AI learns #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/the-brains-behind-the-machines-how-ai-learns/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

🚨 EUVD-2026-42971

📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: coTURN
🏢 Vendor: coturn
📅 Updated: 2026-07-10

📝 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, coturn rejects loopback peers by default unless allow-loopback-peers is enabled, but the default loopback guard can be bypassed by using the IPv4-mapped IPv6 peer address ::f...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42971

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42970

📊 Score: 6.0/10 (CVSS v3.1)
📦 Product: coTURN
🏢 Vendor: coturn
📅 Updated: 2026-07-10

📝 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, the psd print sessions dump CLI command in coturn takes a filename argument and directly passes it to fopen with no path validation. An authenticated admin with CLI access ca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42970

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42962

📊 Score: 4.2/10 (CVSS v3.1)
📦 Product: zitadel, zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go skips the maximum token age freshness check when an incoming token omits...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42962

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42969

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: coTURN
🏢 Vendor: coturn
📅 Updated: 2026-07-10

📝 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprintf string interpolation without sanitization. The is_secure_string filter that p...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42969

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210453

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: hestiacp
🏢 Vendor: hestiacp
📅 Updated: 2026-07-10

📝 HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject arbitrary HTML by creating a DNS record with a double-quote followed by a script payload in the value field. The applicatio...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210453

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-210452

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: hestiacp
🏢 Vendor: hestiacp
📅 Updated: 2026-07-10

📝 HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting a single-quote character into unvalidated DNS record types. Attackers can ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210452

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42968

📊 Score: 9.6/10 (CVSS v3.1)
📦 Product: prowler
🏢 Vendor: prowler-cloud
📅 Updated: 2026-07-10

📝 Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token, and the ACS finish logic in api/src/backend/api/v1/...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42968

#cybersecurity #infosec #euvd #cve #vulnerability

What are the worst #spyware apps — and how do you spot them?

https://proton.me/blog/spyware-apps

#privacy #cybersecurity #guide

🚨 EUVD-2026-42967

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL's OAuth2 Token Exchange endpoint for urn:ietf:params:oauth:grant-type:token-exchange does not verify that the subject token belongs to the requesting client or that requested sc...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42967

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42966

📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL's external identity provider handler checks that the local user's email is verified but does not verify that the external IdP confirmed ownership of the same email before auto-l...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42966

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42964

📊 Score: 7.3/10 (CVSS v3.1)
📦 Product: zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL Login V2 OIDC and SAML FailedPrecondition error paths return loginSettings.defaultRedirectUri to router.push without applying the isSafeRedirectUri check, allowing an organizati...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42964

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42979

📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: zitadel, zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's OAuth2 and OIDC CodeExchange, RefreshToken, and device token flows fail to verify that the requesting client matches the client that initiated the authoriz...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42979

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42978

📊 Score: 2.3/10 (CVSS v3.1)
📦 Product: zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist han...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42978

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42977

📊 Score: 2.3/10 (CVSS v3.1)
📦 Product: zitadel
🏢 Vendor: zitadel
📅 Updated: 2026-07-10

📝 ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42977

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42976

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: AI Assist for Customer
🏢 Vendor: Deloitte
📅 Updated: 2026-07-10

📝 Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. On 2026-03-25, AI Assi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42976

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//217651[.]8b[.]io
🧬 Analysis at: https://urldna.io/scan/6a51333d3b775000037e5ad1
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-42975

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: AI Assist for Customer
🏢 Vendor: Deloitte
📅 Updated: 2026-07-10

📝 Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42975

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42974

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: AI Assist for Customer
🏢 Vendor: Deloitte
📅 Updated: 2026-07-10

📝 Deloitte AI Assist for Customer disclosed some configuration information through public-facing API endpoints that accepted unauthenticated requests. This information could reduce an attacker’s reconnaissance effort. On 2026-03-25, AI Assist f...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42974

#cybersecurity #infosec #euvd #cve #vulnerability

Radare2: 24 CVEs tracked, 87% unpatched. 0 CISA KEV exploited, but avg CVSS 6.67. Trust Score: C. Open source reverse engineering tool needs patching vigilance. #Radare2 #infosec #cybersecurity

https://www.valtersit.com/vendors/radare2/

Pixel owners can get half off new Google Fi service, but not for long

It's a 5G flash sale.

https://www.androidauthority.com/google-fi-half-off-with-pixel-3686509/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Spotify is tweaking one of Discover Weekly’s best features

Spotify is testing revised filters for some playlists, while also announcing brand-new controls for Release Radar.

https://www.androidauthority.com/spotify-discover-weekly-new-genre-filters-3686300/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

#MountRoyal #University confirms breach as hackers claim attack

https://www.bleepingcomputer.com/news/security/mount-royal-university-confirms-breach-as-hackers-claim-attack/

#privacy #DataBreach #cybersecurity #education

Polestar owners left ‘holding the bag’ after EV brand pulls out of the US

Last month, Polestar shocked the auto industry when it announced that it was pulling out of the US. The EV company's decision came after the federal government denied its authorization to continue selling its cars despi…

https://www.theverge.com/transportation/963399/polestar-owners-ban-dealers-service-warranty-lease

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Doom’s new expansion shows just what makes id Software special

This week should have been a celebration for Doom developer id Software. The studio just launched Revelations, a meaty expansion for Doom: The Dark Ages that adds a powerful new weapon and more demonic levels to blast t…

https://www.theverge.com/games/963515/doom-the-dark-ages-revelations-review

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

My burner email blocklist blocked me

https://benjamin.piouffle.com/blog/burner-email-blocklists/

Comments: https://news.ycombinator.com/item?id=48846941

#HackerNews #burneremail #blocklist #cybersecurity #privacy #onlineidentity

Ah, the glorious #irony of creating a digital Fort Knox to keep out the riff-raff, only to lock yourself out—Bravo! 🎉🔒 Turns out, when you build a spam fortress, sometimes you end up being the dragon it guards against. 🐉🔥 Maybe next time, try asking the emails nicely? 📧💌
https://benjamin.piouffle.com/blog/burner-email-blocklists/ #digitalFortress #lockedOut #spamDefense #emailEtiquette #cybersecurity #HackerNews #ngated

🚨 EUVD-2026-42878

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: flaskbb, flaskbb
🏢 Vendor: flaskbb
📅 Updated: 2026-07-10

📝 FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in forums they do not control by submitting crafted topic ID lists. Attacke...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42878

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42877

📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: flaskbb, flaskbb
🏢 Vendor: flaskbb
📅 Updated: 2026-07-10

📝 FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42877

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//chillisinpatulas[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a50ca833b77500004da3cd5
#cybersecurity #phishing #infosec #urldna #scam #infosec

Iranian hackers deploy the Cavern Manticore modular framework to infiltrate Israeli networks. Discover how they exploit IT supply chains for cyberespionage.

#CavernManticore #Cybersecurity #IranianHackers #Malware #InfoSec

https://meterpreter.org/cavern-manticore-modular-framework/?utm_source=mastodon&utm_medium=jetpack_social

Security AI Agents Turned Into Attack Vectors: The Report That Stops You Cold https://deafnews.it/en/article/security-ai-agents-turned-into-attack-vectors-the-report-that-stops-you-cold #Cybersecurity

Miss the YotaPhone? This upstart brand just made the dual-screen phone for you.

And it's already destroyed its Kickstarter goal within minutes of going live.

https://www.androidauthority.com/bigme-hibreak-dual-2-3686387/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Wanna chat about something non-infosec amongst those of us who frequent /c/cybersecurity? Here’s your chance! (Keep things civil & respectful please)

#Google pays $250K for #Linux vulnerability allowing guest VM escapes

https://arstechnica.com/security/2026/07/high-severity-guest-vm-escape-is-1-of-2-linux-vulnerabilities-to-surface-this-week/

#cybersecurity

Android’s local document backup tool is almost ready for prime time

The latest Google Play services beta comes with the long-awaited Documents folder for backing up local documents.

https://www.androidauthority.com/google-documents-backup-android-3686175/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Netflix free trials return after six years, but some of you will miss out

You can get 30 days of 4K HDR playback free, unless you're in the US or the UK.

https://www.androidauthority.com/netflix-30-day-free-trial-return-3686178/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🎣 Phishing Spotlight

facebook-video-share[.]blogspot[.]com

🔒 SSL: exp. 2026-09-14
🌐 Stack: GSE

🔗 https://beesint.com/pulse/45b2e99f-f55f-4920-8475-6566d61c4879

#OSINT #Phishing #ThreatIntel #CyberSecurity

For anyone tracking mobile privacy: A deep dive into modern iOS security. While Apple's Secure Enclave and App Sandboxing mitigate traditional self-replicating code, configuration profile hijacking and zero-click exploits remain a real vector for targeted spyware.

Learn how to audit your iPhone's local data metrics, network configurations, and profile certificates for viruses without third-party tools.

https://thetechnicalmaster.com/can-iphones-get-viruses-the-truth

#iOS #Infosec #Privacy #Apple #CyberSecurity

TechCrunch: Another massive data breach exposed millions of driver’s license numbers. “U.S. insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver’s license numbers of 6.9 million people, making it the largest known spill of Americans’ driver’s license information this year.”