A critical unauthenticated remote code execution vulnerability (CVE-2026-119618) has been disclosed in the widely used Apache HTTP Server. The flaw allows attackers to take over vulnerable servers without credentials, posing a severe risk to the vast majority of web infrastructure running the software.
wiz.io
A critical unauthenticated remote code execution vulnerability (CVE-2026-119618) has been disclosed in the widely used Apache HTTP Server. The flaw allows attackers to take over vulnerable servers without credentials, posing a severe risk to the vast majority of web infrastructure running the software.
The former certificate authority, which lacked hardware to generate secure certificates, used a faulty workaround script that produced cryptographically weak credentials, undermining trust in its issued digital certificates.
A new developer guide highlights that unpinned GitHub Actions workflows can be hijacked to inject malicious code into CI/CD pipelines, a growing attack vector for software supply chain compromises.
The Qilin ransomware affiliate program has emerged as the world's most active, targeting over 365 organizations in recent months with a focus on healthcare and critical infrastructure providers.
The new API lets developers route Gemini model outputs to structured decision-making tools for enterprise AI agents, with built-in safety guardrails to restrict harmful actions.
Huawei's open source MACaQ tool enables efficient quantization of large language models for on-device inference, reducing compute requirements for edge AI deployments.
The carrier cited widespread fraud and unresolvable booking errors as reasons for the ban, marking a high-profile restriction on consumer-facing AI agent use cases.