‼️🚨 Microsoft has patched a critical Windows DNS Client remote code execution vulnerability that allows an unauthorized attacker to execute code over a network. All it takes is a malicious DNS response. The vulnerability is tracked as CVE-2026-41096 with a CVSS score of 9.8. It is a heap-based buffer overflow in dnsapi.dll, the Windows component that processes DNS answers on every machine. To trigger it, an attacker needs a position where they can influence DNS responses: a rogue DNS server, a poisoned resolver, a compromised router, hostile WiFi, or a man-in-the-middle placement. That puts ordinary Windows DNS activity in the blast radius. Browsers, VPN clients, enterprise apps, update checks, and background services constantly ask DNS where to connect. The vulnerable processing sits in the Windows DNS Client path, not an edge-facing server product. Microsoft assessed exploitation as "less likely," and Rapid7 lists the issue as not publicly disclosed and not known to be exploited at release. On the contrary, a 9.8 unauthenticated network RCE in DNS client handling is exactly the kind of bug defenders should assume will be reverse-engineered quickly. Defenders should: - Deploy the May 2026 cumulative updates and confirm coverage across endpoints and servers - Restrict DNS traffic to trusted resolvers where possible - Monitor Dnscache and svchost.exe for abnormal child processes or unexpected outbound activity - Treat public WiFi and untrusted resolver paths as higher-risk until patching is complete

Canada has ordered Hikvision to shut down nationwide, citing national security concerns. The ban prohibits government use of its products, but Hikvision calls it baseless and biased. #Canada #HikvisionBan #NationalSecurity #Surveillance #Cybersecurity securityonline.info/canada-b…

My AirPod pros have been lost for a year in Pakistan and guess who’s going to go there next week and get his property back!

Operation "Pocket Tissue" is underway at Shinagawa, Ikebukuro and Akihabara 🙏🫶👍🙇🏻🎉

this is why we need the department of education😭

Today is 30 years since Delphi was launched, in February 14th of 1995.

i’m too traumatized from final destination to risk this

Lyft can win the lawsuit by just stalling it out, she doesn’t look like she has much time left lol

Hello @deepseek_ai, I have sent an email to service@deepseek.com regarding a critical vulnerability that could allow attackers to access your database exposing sensitive data including API KEYS. I strongly recommend addressing this issue as soon as possible.

Probably the most worrying 4Chan #UFO #ufotwitter whistleblower message I've read.