Developers managing JavaScript runtimes have a new major version to evaluate. Node.js 26.0.0 brings the long-awaited Temporal API to the platform alongside an updated V8 engine, a refreshed HTTP client, and several long-flagged removals that will require code changes in some applications. Temporal API ready for production code Temporal, a date and time API designed to replace the aging Date object, is now available in Node.js without an experimental flag. The API offers richer handling … More →
The post Node.js 26 ships with Temporal API enabled by default appeared first on Help Net Security.
A zero-day vulnerability residing within the Chinese content management system MetInfo has entered a phase of active exploitation
The post Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers appeared first on Penetration Testing Tools.
Disney has equipped select entrance lanes at Disneyland Park and Disney California Adventure Park with facial recognition technology, saying the system is intended to streamline re-entry procedures and help prevent fraud. According to the company, certain entrance lanes use cameras to capture an image linked to a guest’s ticket or pass and compare it with a newly taken image at the entrance. The system then converts both images into unique numerical values using biometric technology … More →
The post Facial recognition arrives at the gates of Disney’s magic kingdom appeared first on Help Net Security.
The Chinese cyber-espionage collective Dragon Breath, also recognized by the designation APT-Q-27, has purportedly acquired a formidable new
The post Dragon Breath’s Leaked Driver Shatters Windows Security and Neutralizes EDRs appeared first on Penetration Testing Tools.
Over the past year, BO Team has significantly recalibrated its approach to incursions against Russian organizations. The syndicate
The post BO Team’s Pivot to High-Stakes Industrial Espionage and the ZeroSSH Threat appeared first on Penetration Testing Tools.
Scams targeting Android users in India and across the Asia-Pacific region have grown around a long-standing curiosity gap: the desire to look up call records tied to a phone number. A cluster of 28 fraudulent apps on Google Play exploited that gap and pulled in more than 7.3 million downloads before the store removed them. ESET researchers, who tracked the campaign and named it CallPhantom, reported the apps to Google on December 16, 2025, and … More →
The post CallPhantom Android scam reached 7.3 million downloads on Google Play appeared first on Help Net Security.