FoxIO disclosed XRING, an unpatched XQUIC flaw that lets unauthenticated clients crash HTTP/3 servers with 260 bytes of legal ...

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...

CVE-2026-20896, a bypass authentication flaw in a popular self-hosted DevOps platform, was patched on June 21, but attacks ...

Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.

A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the ...

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...

Customizing your browser to hide often makes it easier to recognize.

Security researchers have found vulnerabilities in Apple's AirDrop and Google's and Samsung's Quick Share that can provoke ...

Nearby attackers can crash Apple's AirDrop before users see a file transfer request, temporarily disabling AirPlay, Handoff, ...

A major overhaul of the Model Context Protocol due next month removes several longstanding protocol-level security risks but ...

Cristiano Ronaldo scored his first and second goals of this World Cup as Portugal beat Uzbekistan 5-0. England and Croatia were also victorious on Tuesday.

Google’s John Mueller answered a question about security headers in the context of client technical SEO audits. Although he singled out one of headers as having an SEO effect, many of the other ...