Opera gains ground among iPhone users in the US and UK

Opera says its iOS browser saw monthly active users grow 93% in the UK and 50% in the US during Q2 2026 compared with the same period last year. Here are the details.

https://9to5mac.com/2026/07/14/opera-gains-ground-among-iphone-users-in-the-us-and-uk/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

#chrome extension Purple Sunset Live Wallpaper seems malicious. Its #cybersecurity badness score is 93/100!

```json
{"id": "npofmnnbidppdfjnfdcjicgmhhmahepm", "score": 93, "platform": "chrome", "name": "Purple Sunset Live Wallpaper"}
```

#chrome extension Naruto Uzumaki Flaming Live Wallpaper New Tab seems malicious. Its #cybersecurity badness score is 85/100!

```json
{"id": "ichfadkdnkechpkpebiikjcfkhkljmji", "score": 85, "platform": "chrome", "name": "Naruto Uzumaki Flaming Live Wallpaper New Tab"}
```

#chrome extension Blackpink Anime Wallpapers Gameograf seems malicious. Its #cybersecurity badness score is 98/100!

```json
{"id": "delpahkmccgedaocoganaaligaljchli", "score": 98, "platform": "chrome", "name": "Blackpink Anime Wallpapers Gameograf"}
```

🚨 EUVD-2026-45409

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: PicoClaw, PicoClaw, PicoClaw (+7 more)
🏢 Vendor: Sipeed
📅 Updated: 2026-07-18

📝 A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/access_control.go of the component First Run Setup. Performing a manipulation of the arg...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45409

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45408

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: PicoClaw, PicoClaw, PicoClaw (+7 more)
🏢 Vendor: Sipeed
📅 Updated: 2026-07-18

📝 A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feishu_64.go of the component Group Message Handler. Such manip...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45408

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45407

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: PicoClaw, PicoClaw, PicoClaw (+7 more)
🏢 Vendor: Sipeed
📅 Updated: 2026-07-18

📝 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request fo...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45407

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45406

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: PicoClaw, PicoClaw, PicoClaw (+7 more)
🏢 Vendor: Sipeed
📅 Updated: 2026-07-18

📝 A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in inc...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45406

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45405

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: QueryWeaver, QueryWeaver
🏢 Vendor: FalkorDB
📅 Updated: 2026-07-18

📝 QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route uncond...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45405

#cybersecurity #infosec #euvd #cve #vulnerability

iOS 27: My favorite new iPhone features (other than AI)

The iOS 27 public beta is here, and the headlining changes are Siri AI and the array of new Apple Intelligence features. However, the update also includes plenty of non-AI features. Here are a few of my favorite iOS 27 …

https://9to5mac.com/2026/07/14/ios-27-my-favorite-new-iphone-features-other-than-ai/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxp[:]//www[.]365wtvip[.]cc/
🧬 Analysis at: https://urldna.io/scan/6a5bb13d3b775000068f7fba
#cybersecurity #phishing #infosec #urldna #scam #infosec

Limited series ‘Lucky’, starring Anya Taylor-Joy, premieres on Apple TV

The first episodes of Lucky, Apple TV’s new limited series starring Anya Taylor-Joy (The Menu), are now streaming. Watch the trailer below.

https://9to5mac.com/2026/07/14/limited-series-lucky-starring-anya-taylor-joy-premieres-on-apple-tv/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🟠 CVE-2026-14499 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-14499

🟠 CVE-2026-58195 - High (8.8)

Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fastmcp/servers/claude-flow-sdk.ts, src/mcp/fastmcp/servers/stdio-full.ts, src/mcp/fastmcp/servers/http-stre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-58195

🟠 CVE-2026-52746 - High (7.5)

JSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that eva...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52746/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-52746

🟠 CVE-2026-45162 - High (8)

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple Pimcore locations call PHP's unserialize() on data from database columns and filesystem files without the allowed_classes restriction, inc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45162/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-45162

🔴 CVE-2026-9198 - Critical (9.8)

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow de...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-9198

Apple Arcade adding the ultimate NFL game just in time for football season

Apple Arcade is scoring a major hit game in August. Apple announced today that the subscription game service will add Madden NFL 27 Arcade Edition on August 6. The new game will arrive just before the new NFL pre-season…

https://9to5mac.com/2026/07/14/apple-arcade-adding-the-ultimate-nfl-game-just-in-time-for-football-season/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

IDC: Apple shipped nearly 1 in 5 smartphones in China in Q2 2026

In a report published today, IDC said Huawei and Apple were the only smartphone makers to record shipment growth in China during the second quarter of 2026. Here are the details.

https://9to5mac.com/2026/07/14/idc-apple-shipped-nearly-1-in-5-smartphones-in-china-in-q2-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

#Proton launches interactive map to show #AgeVerification laws are spreading fast

https://www.techradar.com/vpn/vpn-privacy-security/the-death-of-privacy-online-proton-launches-interactive-map-to-show-age-verification-laws-are-spreading-fast

#privacy #cybersecurity

New CyberIntel brief: Survey Finds Organizations Pressure Employees to Keep Security Breaches Confidential

https://cyberintelnews.com/

#DataBreach #Privacy #RiskManagement #Cybersecurity

https://www.abc.net.au/news/2026-07-19/push-in-us-to-follow-australia-social-media-ban/106916156

#chatcontrol #privacy #cybersecurity

Anthropic is giving teachers free access to premium Claude features, details here

Anthropic is providing free access to premium Claude AI features to K-12 teachers in the United States. The effort is part of a new Claude for Teachers initiative.

https://9to5mac.com/2026/07/14/anthropic-is-giving-teachers-free-access-to-premium-claude-features-details-here/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Dave Eggers told OpenAI staff that ChatGPT was ‘silencing an entire generation’

Dave Eggers attends the "The Turning Point: To Be Destroyed" premiere. | Image: John Lamparski/Getty Images for Tribeca Festival Last year, Sam Altman invited author Dave Eggers to give a talk to around 200 OpenAI staff…

https://www.theverge.com/ai-artificial-intelligence/967630/dave-eggers-openai-chatgpt-silencing-an-entire-generation

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🚨 EUVD-2026-45397

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: carto-api-client
🏢 Vendor: CartoDB
📅 Updated: 2026-07-18

📝 A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilter of the file src/filters.ts. Such manipulation of the argument column leads to improperly controlled modification of object prototype attributes. T...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45397

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45396

📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: ProFTPD
🏢 Vendor: ProFTPD Project
📅 Updated: 2026-07-18

📝 ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an u...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45396

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45395

📊 Score: 6.8/10 (CVSS v3.1)
📦 Product: Stoat for Android
🏢 Vendor: stoatchat
📅 Updated: 2026-07-18

📝 Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachable to any process on the device via the android.intent.action.SEND intent) and accepts the file to share as a URI supplied through the android.intent.extra....

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45395

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-45394

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Inputmask, Inputmask, Inputmask (+7 more)
🏢 Vendor: RobinHerbots
📅 Updated: 2026-07-18

📝 A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the function extendDefaults/extendDefinitions/extendAliases in the library lib/dependencyLibs/extend.js of the component Interna...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-45394

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//wadeswarehouse[.]com/ads-docusig[.]html
🧬 Analysis at: https://urldna.io/scan/6a5ba32c3b77500009172176
#cybersecurity #phishing #infosec #urldna #scam #infosec

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Forgotten Bootloaders Expose Secure Boot Blind Spot
🔗 https://www.darkreading.com/cyber-risk/forgotten-bootloaders-expose-secure-boot-blind-spot

Nearly a dozen vulnerable and now revoked UEFI shim bootloaders remained trusted for years, giving attackers a path to bypass Secure Boot.

Leaker says next iPad mini will stick with a 60Hz display despite OLED upgrade

Apple’s next iPad mini might miss out on ProMotion despite switching to OLED, per leaker yeux1122. Here are the details.

https://9to5mac.com/2026/07/14/leaker-says-next-ipad-mini-will-stick-with-a-60hz-display-despite-oled-upgrade/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

#chrome extension Happy easter seems malicious. Its #cybersecurity badness score is 94/100!

```json
{"id": "kipeiplohldbbalmchafbfnnpnenonlg", "score": 94, "platform": "chrome", "name": "Happy easter"}
```

#chrome extension Light Yagami Death Note Live Wallpaper seems malicious. Its #cybersecurity badness score is 99/100!

```json
{"id": "icjkaoepdngbaakafgjoiicgjloncjhd", "score": 99, "platform": "chrome", "name": "Light Yagami Death Note Live Wallpaper"}
```

#chrome extension Yuji Itadori from Jujutsu Kaisen Live Wallpaper seems malicious. Its #cybersecurity badness score is 85/100!

```json
{"id": "icjlgklmnnljflhhcmhoklpgedppamap", "score": 85, "platform": "chrome", "name": "Yuji Itadori from Jujutsu Kaisen Live Wallpaper"}
```

#chrome extension Keroppi Wallpapers New Tab seems malicious. Its #cybersecurity badness score is 91/100!

```json
{"id": "dldbdcpgbgbefbjeljfofbijamjdbkpb", "score": 91, "platform": "chrome", "name": "Keroppi Wallpapers New Tab"}
```

#chrome extension Hiyuki Dance of the Frostblade (WuWa) Live Wallpaper seems malicious. Its #cybersecurity badness score is 97/100!

```json
{"id": "cmbbakgpfghgekiehoadnhgcogpbfgip", "score": 97, "platform": "chrome", "name": "Hiyuki Dance of the Frostblade (WuWa) Live Wallpaper"}
```

📰 Coca-Cola suspended production at its Fairlife dairy unit in the United States due to a ransomware attack.

🔗 https://techcrunch.com/2026/07/16/coca-cola-suspended-production-at-its-fairlife-dairy-after-a-ransomware-attack/

#Tech #Cybersecurity

📰 Coca-Cola suspended production at its Fairlife dairy unit in the United States due to a ransomware attack.

🔗 https://techcrunch.com/2026/07/16/coca-cola-suspended-production-at-its-fairlife-dairy-after-a-ransomware-attack/

#Tech #Cybersecurity

🟠 CVE-2026-9323 - High (8.1)

The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9323/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-9323

🟠 CVE-2026-11826 - High (8.8)

OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() reads characters between two delimiters into a caller-supplied buffer with no size parameter and no bounds check. In parseCon...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-11826/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-11826

🔴 CVE-2026-16117 - Critical (10)

Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for route matching, but request.url retains the original encoded form, an...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16117/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-16117

🟠 CVE-2026-7667 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename="../../../target/path" ), enabling...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7667/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-7667

🟠 CVE-2026-7754 - High (7.7)

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7754/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-7754

🔴 CVE-2026-63030 - Critical (9.8)

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection an...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63030/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-63030

🟠 CVE-2026-50151 - High (7.5)

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization he...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50151/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-50151