7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-14266)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip.
Read MoreAuthor: Jason Davies
Better protection for UK prisons, power stations and airports against hostile drones
– UK Prisons, power stations and airports will be able to guard against hostile drone activity in the skies above them, under Ofcom plans to introduce a new drone detection radar licence announced today.
Read More
Cisco Identity Services Engine Path Traversal Vulnerability (CVE-2026-20146)
– A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system to either read or delete arbitrary files.
Read More
Meta to prevent its AI chatbots from discussing suicide with teens
– Meta has told tech news publication TechCrunch it would add more guardrails to its systems “as an extra precaution” and temporarily limit chatbots teens could interact with.
Read More
Ofcom says Big Tech must tackle scourge of scam adverts
– Big Tech will be held accountable for tackling scam ads on their platforms, under proposed new fraud-fighting rules announced today by Ofcom.
Read More
UK and Allies urge critical sectors to improve defences against Russian intelligence targeting
– Organisations in critical infrastructure sectors are being supported to better understand and defend against malicious activity, as the UK and international partners today call out techniques used by Russian Intelligence Services
Read More
AI battle lab to prepare British Army for modern warfare
– UK soldiers will be better prepared for modern warfare with a new training system that uses AI, advanced analytics and virtual environments to ready troops for rapidly evolving battlefields.
Read More
Apple to increase spend with Broadcom to produce billions more U.S. chips
– Apple has announced a new multiyear commitment with Broadcom to design and produce custom silicon components and cutting-edge wireless connectivity technologies for a wide range of Apple products.
Read More
CapCut Recognized for AI-Powered Video and Image Creation by Software Experts
– Software Experts has recognized CapCut in its latest review of the best AI content creation tools, citing the platform’s ability to support video, image, audio, and social media production from a single editing workspace.
Read More
JuiceFS – Authentication Bypass via pprof and metrics Endpoints (CVE-2026-59092)
– JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux.
Read More