iPhone Duo Teardown Points to a Hinge Stress Point Behind Screen Failures
iFixit’s iPhone Duo teardown maps early screen failures to a possible hinge stress point, while a 5/10 repair score still leaves owners facing a $999 inner display.
Proton Maps 170,000+ Flock Cameras. Here’s What the Data Shows and Misses
Proton’s searchable Flock map covers more than 170,000 cameras and 130,000 other devices. Here is how to use it, what the readers collect and why the December 2025 snapshot needs verification.
Salesforce Will Make External AI Agents Register and Meter Their API Calls
Salesforce is targeting November for Agentic Identity, requiring external AI agents to use dedicated credentials while future MCP and API calls consume Flex Credits.
HTTP2Shell Escaped Node.js: How to Find Every Vulnerable Brotli Copy
CVE-2026-111497 now reaches Node.js, Python, .NET, Java and Linux packages. Find bundled Brotli decoders, patch the right layer and close unsafe decompression paths.
CISA Gives Nextcloud Collabora Admins Until Oct. 26 to Patch an Exploited RCE
CISA added an exploited Collabora Built-in CODE flaw to KEV. Check the affected Nextcloud app, patch it, and hunt for web shells before October 26.
Meta Runs Google TPUs in Production as TorchTPU Opens the Stack
Meta is serving production AI workloads on Google TPUs through TorchTPU. Here is what the PyTorch-native stack supports, where it remains uneven, and what teams should test.
SteamOS 3.9.5 Is Stable: What Changes on Steam Deck and Handheld PCs
SteamOS 3.9.5 brings Linux 7.2, KDE Plasma 6.7.3 and targeted fixes for Steam Deck, Legion Go 2 and newer Intel PCs. Here is what to check after updating.
GitLab CVSS 10 RCE Spans 12 Years of Releases: Patch and Hunt Now
CVE-2026-110264 lets unauthenticated attackers run code on self-managed GitLab servers. Check fixed versions, upgrade traps and the evidence defenders should preserve.
PHP2Shell Is Patched, but a Third PHP RCE Edge Case Remains
PHP’s emergency updates fix the two critical PHP2Shell flaws, but CVE-2026-115560 still needs a temporary session upload setting change. Here is how to verify every web runtime.
eMudhra TLS Certificates Could Break in Chrome on Oct. 27: What to Check
Chrome will remove eMudhra’s emSign ECC Root CA - G3 on October 27. Check certificate chains, force ACME reissuance and verify the replacement path before sites break.