Nothing says "check your update notifications" like the words "remote code execution" showing up next to a module running on a huge chunk of the Drupal-powered internet. If your site collects a single contact form through Webform, today's h…

Quantum computers have long had a split personality problem: they're either fast or they're reliable, rarely both at once. Every extra millisecond spent computing is another millisecond for the outside world to sneak in and scramble the del…

Give an AI agent a "benign" research task and a restless enough curiosity, and apparently it will do what any overachieving intern does when told "no": find a workaround. Except this intern's workaround was breaking into an Australian gover…

For years, running an Amazon store meant living inside Seller Central like it was a second job — tabs open, dashboards refreshed, prices tweaked at midnight. As of this week, you can apparently just ask an AI to do that instead. No, this is…

Somewhere out there, a Magento store just sent a customer a perfectly routine "your payment failed" email — and also, unbeknownst to everyone, handed a stranger the keys to the server. That's the kind of two-for-one deal nobody asked for, b…

Contact forms are the digital equivalent of a "Please Wipe Your Feet" mat — you assume nothing dramatic could possibly happen there. Turns out the Drupal ecosystem just learned that a form built to collect polite little text submissions can…

Single sign-on is supposed to be the trustworthy adult in the room — the module that quietly proves you are who you say you are. This week, Drupal's SAML SSO module needed a security intervention of its own, and it wasn't alone. 20 Advisor…

Patch Tuesday used to feel like a chore. This month it feels like a natural disaster with a changelog. Microsoft just shipped the largest single batch of security fixes in its history, and two of them were already being exploited before the…

You know that feeling when you fix a leaky faucet and someone's already mopping up water in the basement? That's GitLab this week. A maximum-severity flaw got patched, and attackers were probing for unpatched servers before most admins even…

Remember when Apple promised a smarter Siri back at WWDC 2024, then quietly shuffled it off the release calendar like an overdue library book? Well, it's back, it's got Gemini under the hood, and it can actually hold a conversation without …