Search
4 stories found
SonicWall disclosed two flaws in its Global Management System on November 3, including CVE-2026-109593, an unauthenticated file-disclosure bug rated CVSS 9.1. GMS reached end of support on September 30, and SonicWall says no fix will be released, so the only remedy is to isolate it and move to NSM.
A plugin that watches what your agent does, compresses it into searchable memories in a local SQLite database, and feeds the relevant bits back into your next session. How it works and what to watch out for.
Two critical flaws in PHP's default upload-progress feature allow unauthenticated remote code execution. Here are the fixed versions, a one-line check, and the config change that buys you time.
Google's November 2026 Android Security Bulletin patches more than 200 vulnerabilities, including a critical remote code execution flaw that needs no user interaction. Nothing is flagged as exploited yet, but the bulletin also lists the "SMS of Death" phone-crash bug that already has a public proof of concept.
