Meta quietly launches new Reddit-like app called Forum
Meta has quietly released a new standalone app for Facebook groups called “Forum.” The company appears to be positioning Forum as a platform that functions similarly to Reddit, describing the app as “a dedicated space built for deeper discussion, real answers, and communities that care.” Matt Navarra, a social media consultant, appears to have first […]
Smart ring maker’s Oura file to be released
SpaceX may have made headlines with its IPO prospectus, but Elon Musk’s aerospace, AI and data center company wasn’t the only notable company to file to go public this week. On Thursday, Finnish smart ring company Oura announced it had confidentially filed a Form S-1 with the U.S. Securities and Exchange Commission in preparation for […]
Audio generation app Huxe, founded by former NotebookLM developer, has ended its service
Huxe, an app created by a former NotebookLM developer that allows users to enter prompts to generate a podcast or podcast series about a topic, is shutting down. The announcement comes a day after Spotify released a personal podcast feature that works similarly. The company said it has removed the app from the App Store […]
Megalodon GitHub attack targets 5,561 repositories with malicious CI/CD workflow
Cybersecurity researchers have revealed details of a new automated campaign called Megalodon that pushed 5,718 malicious commits to 5,561 GitHub repositories within six hours. “The attacker used a one-time-use account and forged author IDs (build-bot, auto-ci, ci-bot, pipeline-bot) to inject a GitHub Actions workflow containing a base64-encoded bash payload, exfiltrating CI secrets, cloud credentials, SSH […]
Making Vulnerable Drivers Exploitable Without Hardware
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were developed for. This work was motivated by driver-oriented vulnerability research and the need to evaluate the exploitability of individual findings, which frequently affect code whose reachability is hardware-gated. […]
Learn piano for $80 with this 5-year flowkey subscription
TL;DR: A 5-year subscription to the flowkey piano learning app is on sale for the lowest price ever at $79.97 (regularly $899). Learning the piano doesn’t have to mean expensive lessons or a strict schedule. An easy way to build skills at your own pace at a fraction of the usual cost is now available. […]
Kimwolf DDoS botnet operator arrested in Canada for DDoS-for-Hire attack
Rabi LakshmananMay 22, 2026Cybercrime/Law Enforcement The U.S. Department of Justice (DoJ) announced Thursday that it has arrested a Canadian man suspected of operating a distributed denial of service (DDoS) botnet known as Kimwolf. At the same time, Jacob Butler (also known as Dort), 23, of Ottawa, Canada, was also charged with crimes related to the […]
CISA adds exploited Langflow and Trend Micro Apex One vulnerabilities to KEV
Rabi LakshmananMay 22, 2026Vulnerability/Cyber attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws affecting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows. CVE-2025-34291 (CVSS Score: 9.4) – An origin validation error vulnerability […]
Cisco patches CVSS 10.0 secure workload REST API to enable data access flaw
Rabi LakshmananMay 22, 2026Vulnerability/Network Security Cisco has issued an update for a maximum severity security flaw impacting secure workloads that could allow an unauthenticated, remote attacker to access sensitive data. The vulnerability, tracked as CVE-2026-20223 (CVSS score: 10.0), is due to insufficient validation and authentication when accessing REST API endpoints. “An attacker could exploit this […]
Waymo extends suspension to four cities as robotaxis plunge into flood waters
Waymo is currently suspending service in four cities as its robotaxis struggle to cope with heavy rain and flooding on roads, an issue that had already prompted the company to announce a recall last week. One of Waymo’s robotaxis was spotted driving through a flooded road in Atlanta, Georgia, on Wednesday, where it ended up […]