Posts of last few hours

MediaTek has released its October 2026 Product Security Bulletin, which addresses 31 vulnerabilities across modem, video, AI processing, display, trusted execution, and system components used in a wide range of its chipsets. The fixes include two critical modem out-of-bounds write vulnerabilities and nine high-severity flaws that could potentially lead to memory corruption, privilege escalation, or […]

The post MediaTek Fixes 31 Security Flaws Affecting Modem, Video and AI Components appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has stopped accepting new “product vulnerability” reports through its Open Source Software Vulnerability Reward Program (OSS VRP) due to a significant increase in automated submissions that are predominantly invalid. This restriction took effect on October 1, 2026, and Google plans to provide an update regarding this part of the program in the first quarter […]

The post Google Tightens Open-Source Bug Bounty Rules After Surge in AI-Generated Vulnerability Reports appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CircuitMess, a Croatian electronics kit maker, is selling MAKERphone 2.0, a build-it-yourself 4G phone on Kickstarter that buyers program in MicroPython or Arduino C++ and extend with plug-in hardware. Insert a SIM and it makes real calls and sends real texts. For anyone who tests or tinkers with devices, that is a cellular handset whose software you write yourself. CircuitMess also pitches it to parents as a first phone for children, so some of the … More →

The post MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board appeared first on Help Net Security.

AWS released security updates for three vulnerabilities in its open-source Loom platform, used for AI agent orchestration. These vulnerabilities could allow unauthenticated administrative takeover, disclosure of OAuth2 credentials, and access to internal services. The company strongly urges users to upgrade all Loom deployments and forks to version 1.7.0. AWS announced these issues in Security Bulletin […]

The post AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.