U.S. Lifts Export Controls on Anthropic’s Claude Fable 5 and Mythos 5
The U.S. Commerce Department has lifted export controls on Anthropic’s Claude Fable 5 and Claude Mythos 5, ending restrictions that forced the company to suspend…
Apache Tomcat Flaws Can Bypass Authentication and Default Servlet Security Rules
The Apache Software Foundation has disclosed two Apache Tomcat vulnerabilities that can weaken authentication and authorization controls in affected web applications. The flaws are tracked…
Google Chrome 150 Patches 382 Security Flaws, Including 15 Critical Bugs
Google has released Chrome 150 to the stable channel with fixes for 382 security vulnerabilities, including 15 critical bugs that affect major browser components such…
Attackers Are Abusing Trusted Windows Drivers to Kill AV and EDR Tools
Attackers are increasingly using trusted but vulnerable Windows drivers to disable antivirus and endpoint detection and response tools before deploying malware, ransomware, or hands-on-keyboard attacks.…
Citrix Patches NetScaler ADC and Gateway Flaws Behind DoS and File Read Risks
Citrix has released security updates for NetScaler ADC and NetScaler Gateway to fix six vulnerabilities that can expose affected appliances to denial-of-service, memory overread, memory…
Anthropic Buffa Rust Library Vulnerability Can Trigger Denial-of-Service Attacks
A vulnerability in Anthropic’s Rust-based protobuf library buffa can let attackers trigger memory exhaustion and crash services that decode untrusted protobuf messages. The flaw is…
Adobe Patches Critical ColdFusion Flaws That Allow Remote Code Execution
Adobe has released emergency security updates for ColdFusion 2025 and ColdFusion 2023 to fix multiple critical vulnerabilities that can lead to arbitrary code execution, privilege…
Fluentd 1.19.3 Fixes Critical RCE and Multiple High-Severity Vulnerabilities
Fluentd users should update to version 1.19.3 after maintainers fixed a critical remote code execution risk and several high-severity vulnerabilities affecting logging, monitoring, and HTTP…
Apple Hide My Email Vulnerability Can Expose Real Email Addresses, Researcher Says
A reported vulnerability in Apple’s Hide My Email feature can reveal the real email address behind a private relay alias, according to 404 Media and…
Massive Password Spray Attack Targets Microsoft Azure CLI Accounts
A large automated password spray campaign is targeting Microsoft Azure CLI sign-ins and has already led to confirmed Microsoft account compromises, according to a new…
February 10, 2026
1 comment 
