A critical security vulnerability in Visual Studio Code’s webview implementation allows attackers to steal GitHub OAuth tokens, including read/write access to private repositories, simply by tricking a victim into clicking a single malicious link. The bug was publicly disclosed on June 2, 2026, by security researcher Ammar Askar, who opted for full disclosure after prior negative […]

A newly disclosed remote denial-of-service exploit dubbed “HTTP/2 Bomb” targets the default HTTP/2 configurations of the world’s most widely deployed web servers, nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora, enabling a single attacker on a home internet connection to exhaust tens of gigabytes of server memory in seconds. The exploit was discovered by researcher Quang […]

The feelings are familiar. The characters, the planets, the arrival: skimming over a water-covered planet. I’ve played StarFox in all its previous iterations on Nintendo consoles, but my hour or so playing the new Switch 2 version ahead of its release on June 25 made me smile like a kid. I also got a wakeup call when […]

Google’s latest Android update takes aim at the growing problem of imposter scam calls. It also expands Circle to Search functions and AirDrop compatibility to more Android devices, and introduces safety features for kids. The new capabilities are starting to roll out now. The update comes on the heels of a larger Android 17 update that Google unveiled last month, which bakes AI even deeper into […]