Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
A memory-corruption flaw in Google’s Brotli decoder (CVE-2026-111497) can be triggered by crafted compressed data and affects multiple projects that embed the decoder, including Node.js, Bun,...
Kaspersky reports a new UEFI bootkit, BlackX, targeting diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The tool reuses BlackLotus tradecraft to exploit CVE-2022-21894 and...
Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three Onigmo regex engine bugs linked to four recent critical GitLab remote code execution issues. The flaws can be triggered when...
AWS has made Continuum for code vulnerabilities generally available, a service that validates which findings are actually exploitable in your environment, ranks them by business impact, and...
Quest Diagnostics disclosed to U.S. regulators that a cyberattack against its Quanum lab systems led to unauthorized access to certain patient records, including protected health information. The...
Two days after emergency patches for the critical PHP2Shell bugs, PHP warned of a separate, unpatched code‑execution path (CVE-2026-115560) that requires an uncommon runtime configuration. No...
Attackers compromised LiteLLM’s release pipeline and published a tainted 1.107.0 release to PyPI and Docker that executes before application startup to steal credentials and secrets across...
VulnCheck says it has crafted an exploit for the PHP2Shell flaw (CVE-2026-109618) that achieves remote code execution on ASLR-enabled x86-64 systems running PHP’s recommended production...
GitLab has released emergency updates to Community and Enterprise Edition addressing a dozen issues, including a critical integer overflow (CVE-2026-110264) that could let an unauthenticated...
Netflix has introduced a workload attestation design that lets Apache Spark jobs on Amazon EMR swap their AWS IAM execution role for a short‑lived internal identity issued by its Metatron PKI,...
Kaspersky reports that North Korea’s Lazarus Group is using the NIST-standardized ML-KEM post-quantum cryptographic mechanism to shield command-and-control traffic and payload delivery in a new...
Google is rolling out new Chrome protections under Safe Browsing’s Enhanced Protection that use Gemini to flag deceptive sites and warn users when they copy suspicious commands associated with...
Curated daily by the Ledgi Tech newsroom — ledgi.tech