GoKawiil
Tech News
Molly, an Android fork of the Signal messenger popular for extra privacy and security features, has reportedly not received an update in roughly three months, leaving known vulnerabilities unpatched. The issue was raised in a community post warning users that the app may currently be exposed to security risks it was originally designed to avoid.
A security industry figure who testified before Congress in 1998 about insecure software risks has published a list of 10 practices meant to keep software trustworthy over long timescales. The recommendations include embedding security into architecture from the start, maintaining continuous inventories of applications and dependencies, verifying all code regardless of origin, and making secure development paths the path of least resistance for developers.
Apple has released a security update fixing a vulnerability in the graphics engine underlying iOS 26, iPadOS 26 and macOS 26, which the company says may have already been used against specific targeted individuals. Meta's product security team discovered and reported the flaw, tracked as CVE-2026-86950; Apple did not disclose how it was found or how many devices were affected. Devices on the newer iOS 27, iPadOS 27 and macOS 27 also received Tuesday's update but were not vulnerable to this particular bug.
New research indicates that scammers using AI-generated voices that mimic a target's own accent are more effective at deceiving victims than generic synthetic voices. The findings suggest that accent-matching adds a layer of perceived familiarity and trust that makes fraudulent calls more convincing.
PaperCut has disclosed that hackers are actively exploiting an unpatched vulnerability affecting every version of its PaperCut NG and PaperCut MF print management software. The company confirmed real customer incidents, discovered the flaw after reproducing it with data from an affected university, and has since issued emergency patches for internet-facing servers.
CISA has issued an emergency directive requiring federal agencies to fix a Zimbra vulnerability, tracked as CVE-2026-73570, within just three days. The flaw is severe enough that exploitation could give an attacker complete control over a victim's email and communications.