Three flaws in Hugging Face's Diffusers library let crafted model repositories run arbitrary code despite trust_remote_code protections.
Attackers are actively exploiting CVE-2026-20896, a critical Gitea Docker authentication bypass that grants full repository access with a single HTTP…
Apple blocked over $2.2 billion in fraudulent App Store transactions in 2025, part of a six year total exceeding $11…