Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.
Get the latest international news and world events from around the world.
Warlock ransomware breach SharePoint in water, telecom operator attacks
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access.
Over the past two months, the threat actor appears to have focused on countries speaking Portuguese and Spanish across Europe, Africa, and Latin America.
The gang emerged in June 2025 and gained notoriety a month later after exploiting a chain of zero-day vulnerabilities in Microsoft SharePoint known as ToolShell (CVE-2025–49704, CVE-2025–49706, CVE-2025–53770, and CVE-2025–53771).
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.
AI Gateway is a service that gives access to AI-native GitLab Duo features. While GitLab operates its own cloud-based AI Gateway instance used by GitLab.com, GitLab Self-Managed, and GitLab Dedicated, users can also deploy their own self-hosted instances on GitLab Self-Managed through GitLab Duo Self-Hosted.
Tracked as CVE-2026–90970, this security flaw stems from an improper neutralization weakness and can let attackers with basic privileges and Duo Agent Platform access execute arbitrary commands on unpatched instances.
Microsoft’s X account hacked in crypto pump-and-dump scheme
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token.
The attack began when the Microsoft account (@Microsoft) followed and reposted a tweet from another now-suspended X account (@clippymsftcto) impersonating Microsoft’s Clippy virtual assistant, The Verge first reported.
While @clippymsftcto has been suspended, another X account (@ClippyMSFT) that reposted Microsoft’s tweet is still promoting a $Clippy crypto token, claiming that it has “has a liquidity pool paired directly with $MSFT.”
X and Y Chromosomes Play a Direct Role in Aging, Immunity, and Cancer
A new review published in Science brings together growing evidence that the X and Y chromosomes do much more than determining biological sex. They also shape how cells function, age and respond to disease.
Differences in health between men and women have long been attributed mainly to sex hormones such as estrogen and testosterone. However, genes on the X and Y chromosomes also play a direct role, working both on their own and alongside hormones.
The review was co-led by University of Arizona Cancer Center physician-scientist Dr. Dan Theodorescu and Dr. Dena B. Dubal of the University of California, San Francisco. It describes how sex chromosomes influence immunity, metabolism, brain aging, cancer and heart disease, and what this could mean for diagnosis, treatment and the design of clinical trials.
Finally: Rose-Tinted Solar Panels Could Let Crops And Electricity Share The Same Land
Plants are the original solar panels, and they’re very good at converting light into energy – red and blue light, that is.
But what if a solar panel could co-exist with plants, capturing the light that they aren’t using while allowing those red and blue wavelengths through?
That’s what a team led by Silvia Ma Lu of Mälardalen University in Sweden has tested in a new study, using semi-transparent, rose-tinted solar panels that let specific wavelengths of light through to plants growing below, while also capturing solar energy for electricity.
Physicists Find a Superconductor That ‘Breaks’ The Symmetry of Time — A First For Its Kind
Under certain conditions – such as bone-brittling temperatures lower than that of deep space – superconductors can conduct electricity without resistance and resultant energy loss.
Though they vary in their chemical composition, operational temperature ranges, and magnetic properties, superconductors come in two groupings.
First, conventional and unconventional superconductors differ in how their electrons become entangled in tandems called Cooper pairs, an identity-sharing state that allows them to gracefully glide through the atomic jumble of their materials to facilitate uninterrupted electric flow.
