New #RefluXFS #Linux flaw lets attackers gain root privileges

https://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/

#cybersecurity #FOSS

Active exploit! CVE-2026-29059 (CVSS 7.5) affects Windmill's get_log_file endpoint via unauthenticated path traversal. Urgent patch needed to prevent compromise. #CyberSecurity https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html

iPhone Air 2 is coming, here’s everything we know so far

Apple is working on a second-generation iPhone Air, and it could address several key limitations of the current model. Here’s everything we know about the iPhone Air 2, including features, release date, and more.

https://9to5mac.com/2026/07/21/iphone-air-2-is-coming-heres-everything-we-know-so-far/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

CVE Alert: CVE-2026-10818 - WPForms - WPForms Pro - https://www.redpacketsecurity.com/cve-alert-cve-2026-10818-wpforms-wpforms-pro/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-10818 #wpforms #wpforms-pro

Apple shares true story video on how Apple Watch helped rescue an injured cyclist

From time to time, Apple shares real-life stories of users who received potentially life-saving help from the Apple Watch’s safety features. Today, the company published a new video recounting how Fall Detection and Eme…

https://9to5mac.com/2026/07/21/apple-shares-true-story-video-on-how-apple-watch-helped-rescue-an-injured-cyclist/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//stonex-payments[.]com
🧬 Analysis at: https://urldna.io/scan/6a64ad133b775000065c8509
#cybersecurity #phishing #infosec #urldna #scam #infosec

Apple loses bid to overturn $634 million Masimo patent verdict, new trial also denied

Apple’s requests to overturn a $634 million patent verdict and secure a new trial in its long-running legal battle with Masimo were denied. Here are the details.

https://9to5mac.com/2026/07/21/apple-loses-bid-to-overturn-634-million-masimo-patent-verdict-new-trial-also-denied/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Bram Cohen and BitTorrent #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/bram-cohen-and-bittorrent/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

This ergonomic office chair packs premium comfort features for under $500

If you’re in the market for an office chair, the SIHOO Doro C300 Pro V2 comes packed with personalization and comfort-focused features that deserve your attention.

https://9to5mac.com/2026/07/21/ergonomic-office-chair-packs-premium-comfort-features-under-500/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Same rule again: scan downloads before opening them. They love pretending. https://zurl.co/u3k29 #RiskManagement #CyberSecurity

Possible Phishing 🎣
on: ⚠️hxxps[:]//asesoriabarrachina[.]es/wp-includes/strato/?user-agent=Mozilla/5[.]0+(Windows+NT+10[.]0
🧬 Analysis at: https://urldna.io/scan/6a64f9c43b775000063b409d
#cybersecurity #phishing #infosec #urldna #scam #infosec

Claude Code brings live iOS app testing into its Mac app

Claude Code’s Mac app now lets users test iOS apps in an interactive simulator pane, provided they have Xcode with the iOS platform installed. Here are the details.

https://9to5mac.com/2026/07/21/claude-code-brings-live-ios-app-testing-into-its-mac-app/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple promotes ‘Nido de Villanas,’ a Mexican microdrama shot on iPhone 17 Pro

Apple has shared a first look at Nido de Villanas, a tongue-in-cheek Mexican microdrama shot entirely on an iPhone 17 Pro, which is now available as 14 Shorts on YouTube.

https://9to5mac.com/2026/07/21/apple-promotes-nido-de-villanas-a-mexican-microdrama-shot-on-iphone-17-pro/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🚨 EUVD-2025-19056

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: RHEL-8 based Middleware Containers, Red Hat OpenShift distributed tracing 3.6.1, OpenShift Compliance Operator 1 (+50 more)
🏢 Vendor: Red Hat
📅 Published: 2025-06-17 | Updated: 2026-07-25

📝 A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19056

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//bit[.]ly/48OuTja
🧬 Analysis at: https://urldna.io/scan/6a6555d83b775000052b3f6a
#cybersecurity #phishing #infosec #urldna #scam #infosec

The major difference between China, Russia, even North Korea, and the US is that, China, Russia and North Korea are quite open and overt about their citizen surveillance and social control measures.

The US simply lies to their own citizens about everything.

Главное отличие между Китаем, Россией, даже Северной Кореей и США в том, что Китай, Россия и Северная Корея довольно открыто и открыто выступают в вопросах своего гражданского наблюдения и мер социального контроля. США просто лгут своим гражданам обо всём.

https://youtu.be/nsffBrd_oD0

#freedom #cybersecurity #chatcontrol #surveillance

Apple's First Water-Resistant iPad to Launch Later This Year

Apple's next iPad mini will apparently be the first iPad with a water-resistant design, and the tablet is now expected to arrive by October. Bloomberg's Mark Gurman reported last year that Apple is working on an updated…

https://www.macrumors.com/2026/07/25/first-water-resistant-ipad/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

9to5Mac Daily: July 22, 2026 – iOS 27 beta 4 and iOS 26.6 RC

Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcas…

https://9to5mac.com/2026/07/22/daily-july-22-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//nextvvbrr53ffgmzzxxuyoptt9saqr[.]framer[.]website
🧬 Analysis at: https://urldna.io/scan/6a64ad2b3b77500005d17624
#cybersecurity #phishing #infosec #urldna #scam #infosec

The reported Apple Upgrade program raises a very big concern

A Bloomberg report yesterday suggested that Apple is about to launch a new Apple Upgrade leasing contract to replace the iPhone Upgrade Program. There appear to be two significant differences between the two, and one of…

https://9to5mac.com/2026/07/22/the-reported-apple-upgrade-program-raises-a-very-big-concern/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

CRITICAL LINUX KERNEL ALERT: The "RefluXFS" Flaw (CVE-2026-64600)

The Qualys Threat Research Unit has uncovered a severe, 9-year-old local privilege escalation (LPE) vulnerability in the Linux XFS filesystem.

If your enterprise relies on RHEL, Rocky Linux, AlmaLinux, or Amazon Linux, you need to act immediately.

What you need to know:

* The Flaw: A race condition in the XFS copy-on-write path lets unprivileged users exploit direct writes (O_DIRECT) to overwrite root files at the block layer.
* The Impact: Attackers gain persistent root access. It leaves no logs, completely bypasses SELinux (even in Enforcing mode), and survives system reboots.
* The Scope: Over 16.4 million enterprise systems are potentially exposed worldwide, particularly multi-tenant container hosts, web hosting servers, and CI/CD pipelines.

⚠️ There are no configuration workarounds.

1. Check if your XFS volumes have reflinking active: xfs_info / | grep reflink= (look for reflink=1).
2. Apply the latest backported vendor kernel updates.
3. Reboot to activate the fix, or apply live-patching solutions to avoid downtime.

https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html

#Cybersecurity #Linux #InfoSec #CloudSecurity #EnterpriseIT #SysAdmin #DevOps #PatchManagement #VulnerabilityAlert #RefluXFS

RE: https://infosec.exchange/@eteryu/116981009404335498

A powody, dla których warto powoli odchodzić od F-Droida i dlaczego sam model tego repozytorium mocno się zestarzał, opisywałem niedawno na blogu:

https://eteryu.space/ewolucja-zaufania-dlaczego-czas-f-droida-mija/

#FDroid #Android #Security #Privacy #FOSS #CyberSecurity

eteryu » 🌐 2026-07-25 / 2026-07-25
@eteryu@infosec.exchange

Nie każdy lubi wklejać linki w Obtainium i szuka po prostu czystego interfejsu sklepu. Jeśli chcecie odejść od F-Droida bez rezygnacji z wygody, sprawdźcie Komi Store (dawniej GitHub Store).

To elegancki katalog aplikacji FOSS, który pobiera pakiety APK bezpośrednio z wydań na GitHubie czy Codebergu, z pominięciem centralnych pośredników F-Droida. Zapewnia wygodne przeglądanie według kategorii, auto-aktualizacje i weryfikację podpisów deweloperów u źródła. Ma też świetną funkcję importu listy z Obtainium, więc idealnie sprawdza się jako narzędzie do odkrywania nowego oprogramowania.

Jeśli zależy Wam na maksymalnym bezpieczeństwie i zasadzie Zero Trust, moim pierwszym i najbardziej polecanym wyborem pozostaje duet Obtainium + App Verifier. Komi Store traktujcie po prostu jako kompromis wygody.

Więcej informacji i kod źródłowy:
https://github.com/kurikomi-labs/komi-store

#FOSS #Android #KomiStore #Obtainium #CyberSecurity #Privacy #DeGoogle

Alt...

Zrzut ekranu przedstawiający stronę główną repozytorium GitHub projektu "Komi Store" (dawniej GitHub Store).

Alt...

Zrzut ekranu fragmentu artykułu z bloga na ciemnym tle.

Meta testing StoryKit, an AI iPhone app that creates ‘personalized children’s stories’

Meta has quietly released a new iPhone app that uses AI to create personalized children’s stories, complete with illustrations, narration, and original music.

https://9to5mac.com/2026/07/21/meta-testing-storykit-an-ai-iphone-app-that-creates-personalized-childrens-stories/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple debuting new ‘Apple Upgrade’ leasing program next week, per report

Apple will launch a new “Apple Upgrade” leasing program later this month in the US, according to a new report from Bloomberg. It marks “one of the biggest-ever changes to how the company sells devices,” the report says.…

https://9to5mac.com/2026/07/21/apple-debuting-new-apple-upgrade-leasing-program-next-week-per-report/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

The Fallback Stack: Running Local AI So You Can Lose the Frontier and Keep Working

The frontier models are extraordinary and I use them daily. That is exactly why this guide exists. Everything that makes them useful also makes them fragile as a dependency. They are a handful of companies, reachable over someone else’s network, priced at someone else’s discretion, governed by terms that change without your…

https://ftrcrp.org/guides/local-llm-fallback-stack/
#infosec #cybersecurity

Alt...

FTRCRP guides cover banner for the article: The Fallback Stack: Running Local AI So You Can Lose the Frontier and Keep Working

Possible Phishing 🎣
on: ⚠️hxxps[:]//webmail765467890[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a6515e63b7750000225a656
#cybersecurity #phishing #infosec #urldna #scam #infosec

Hackers abuse Notepad++ plugins to stealthily install #malware

https://www.bleepingcomputer.com/news/security/hackers-abuse-notepad-plus-plus-plugins-to-stealthily-install-malware/

#FOSS #cybersecurity #NotepadPlusPlus #Ukraine #LunchPoke

Deals: AirTag 2, M5 MacBook Pro $320 off, Philips Hue Bridge Pro, Satechi CubeDock $100 off, more

Joining the ongoing summer price drops on AirPods Pro 3 and AirPods Max 2 at $100 off, we are also featuring the return of Prime Day all-time low pricing on AirTag 2. But today’s 9to5Toys Lunch Break is headlined by M5 …

https://9to5mac.com/2026/07/21/deals-airtag-2-m5-macbook-pro-philips-hue-bridge-pro/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Global open-source platforms and cloud #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/global-open-source-platforms-and-cloud/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

9to5Mac Daily: July 21, 2026 – Apple vs OpenAI update, more

Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcas…

https://9to5mac.com/2026/07/21/daily-july-21-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//tfreawrtdf[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a6507b43b7750000225a615
#cybersecurity #phishing #infosec #urldna #scam #infosec

Apple winding down iPhone Upgrade Program: report

Apple will reportedly launch a new “Apple Upgrade” leasing program next week. As part of that, the company is reportedly planning to wind down its existing iPhone Upgrade Program.

https://9to5mac.com/2026/07/21/apple-winding-down-iphone-upgrade-program-report/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Memory Safety Absolutists

https://itsallaboutthebit.com/memory-safety-absolutists/

Comments: https://news.ycombinator.com/item?id=49050058

#HackerNews #MemorySafety #Absolutists #Cybersecurity #SoftwareDevelopment #TechTrends #Programming

✨ Un agente IA in modalità YOLO contro il Ministero delle Finanze thailandese: dentro l’operazione Hermes/Hades
#CyberSecurity
https://insicurezzadigitale.com/un-agente-ia-in-modalita-yolo-contro-il-ministero-delle-finanze-thailandese-dentro-loperazione-hermes-hades/

@informatica

Slopsquatting, Phantom Domains, and HalluSquatting are not separate threats; they're the same fundamental AI attack. This deep dive explains how AI agents are repeatedly falling victim to their own hallucinated outputs, creating severe supply chain vulnerabilities. As Charlie Eriksen at Aikido Security discovered with Slopsquatting, AI coding agents attempted to install fake npm…

https://www.tpp.blog/18zml17

#cybersecurity #slopsquatting #phantomsquatting

🤖 This post was AI-generated.

✨ Email bombing, finto IT support e un’estensione Edge che evade la sandbox: la tradecraft di UNC6692
#CyberSecurity
https://insicurezzadigitale.com/email-bombing-finto-it-support-e-unestensione-edge-che-evade-la-sandbox-la-tradecraft-di-unc6692/

@informatica

#chrome extension 2Fa Authenticator seems malicious. Its #cybersecurity badness score is 96/100!

```json
{"id": "elnpjfljfeepaigbmccbldnggkjeomoo", "score": 96, "platform": "chrome", "name": "2Fa Authenticator"}
```

Apple fixes iCloud+ vulnerability that exposed ‘hidden’ user emails

Recently 404 Media reported on a vulnerability with the iCloud+ ‘Hide My Email’ feature that allowed anyone to access a user’s real email address. Now, Apple says the issue has officially been fixed.

https://9to5mac.com/2026/07/21/apple-fixes-icloud-vulnerability-that-exposed-hidden-user-emails/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

✨ Funky Mantis: la gang ransomware DevMan si dota di un CRM per gestire estorsioni contro ospedali e fabbriche
#CyberSecurity
https://insicurezzadigitale.com/funky-mantis-la-gang-ransomware-devman-si-dota-di-un-crm-per-gestire-estorsioni-contro-ospedali-e-fabbriche/

@informatica

OpenAI's rogue AI agent breaches Hugging Face, raising urgent questions about cybersecurity and oversight in the rapidly evolving AI landscape.

Alt...

AI agent spent days hacking, but sources say OpenAI didn’t notice for a week

Possible Phishing 🎣
on: ⚠️hxxps[:]//wpplpolska[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a64975c3b775000065c84bc
#cybersecurity #phishing #infosec #urldna #scam #infosec

OpenAI launches small business program as it touts 10M ChatGPT Work and Codex users

OpenAI has announced a new initiative called the ChatGPT for small business program. Meanwhile, the company touts reaching 10M ChatGPT Work and Codex users.

https://9to5mac.com/2026/07/21/openai-launches-small-business-program-as-it-touts-10m-chatgpt-work-and-codex-users/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

#Linux Kernel Team Publishes 432 CVEs In Two Days

https://linux.slashdot.org/story/26/07/22/2033256/linux-kernel-team-publishes-432-cves-in-two-days

#cybersecurity #FOSS

Nie każdy lubi wklejać linki w Obtainium i szuka po prostu czystego interfejsu sklepu. Jeśli chcecie odejść od F-Droida bez rezygnacji z wygody, sprawdźcie Komi Store (dawniej GitHub Store).

To elegancki katalog aplikacji FOSS, który pobiera pakiety APK bezpośrednio z wydań na GitHubie czy Codebergu, z pominięciem centralnych pośredników F-Droida. Zapewnia wygodne przeglądanie według kategorii, auto-aktualizacje i weryfikację podpisów deweloperów u źródła. Ma też świetną funkcję importu listy z Obtainium, więc idealnie sprawdza się jako narzędzie do odkrywania nowego oprogramowania.

Jeśli zależy Wam na maksymalnym bezpieczeństwie i zasadzie Zero Trust, moim pierwszym i najbardziej polecanym wyborem pozostaje duet Obtainium + App Verifier. Komi Store traktujcie po prostu jako kompromis wygody.

Więcej informacji i kod źródłowy:
https://github.com/kurikomi-labs/komi-store

#FOSS #Android #KomiStore #Obtainium #CyberSecurity #Privacy #DeGoogle

Alt...

Zrzut ekranu przedstawiający stronę główną repozytorium GitHub projektu "Komi Store" (dawniej GitHub Store).

Possible Phishing 🎣
on: ⚠️hxxps[:]//www[.]powr[.]io/media-gallery/i/41161712
🧬 Analysis at: https://urldna.io/scan/6a6458a53b77500005d16e5a
#cybersecurity #phishing #infosec #urldna #scam #infosec

#Google fixing #Android lock screen bug that lets #Gemini send SMS without a PIN

https://www.theregister.com/security/2026/07/17/google-fixing-android-lock-screen-bug-that-lets-gemini-send-sms-without-a-pin/5273027

#cybersecurity

Siri Settlement Approved: Apple to Pay Owners of Some iPhone Models

In May, Apple agreed to pay $250 million to settle a U.S. class action lawsuit over Siri AI's delayed launch, and eligible iPhone users could receive up to a $95 payout. Apple's settlement has now received preliminary a…

https://www.macrumors.com/2026/07/24/apple-to-pay-owners-of-these-iphone-models/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

According to researchers, loading the map silently drops a Windows command file into the user's Documents folder, launches a hidden PowerShell window, and attempts to download a second-stage script from a remote server.

The second-stage payload returned a 404, so its purpose remains unknown.

https://medium.com/@FeintBE/workshop-map-for-meccha-chameleon-is-a-malware-dropper-full-breakdown-d1ac29565265

#Steam #Cybersecurity #Gaming

OpenAI agent goes rogue and hacks popular AI community — left escape plans for future models inside the company's infrastructure

OpenAI tests multiple autonomous AI agents at once and has difficulty identifying the threats each of them represents, if a new report from Reuters is accurate.

https://www.tomshardware.com/tech-industry/artificial-intelligence/openai-agent-goes-rogue-and-hacks-popular-ai-community-left-escape-plans-for-future-models-inside-the-companys-infrastructure

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

⚠️ ALERT: CrashStealer malware is impersonating Apple utilities to steal Mac passwords, Keychain data, and crypto wallets. Don't fall for fake apps—verify downloads only from official sources. Stay safe! https://mbxflow.com/s/FDHY4zT

Published with MBX Flow → https://mbxflow.com

#cybersecurity #macosecurity #malware #passwordsafety #applesecurity #MBXFlow