Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras

Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice

Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President's son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? Meanwhile, James Ball explains that of the internet’s most trusted security keys were protected by numbers so small that one of them was... fou…

CVE-2026-19175 Use after free in Payments

Information published.

GitLab Security Incident: Attempted Exploitation of CVE-2026-97229

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to run code or read process memory in an affected application. AWS Lambda, AWS Amplify, AWS App Runner, Amazon CloudWatch Synthetics, AWS CodeBuild, AWS Elastic Beanstalk, and AWS Elemental MediaLive are addressing this iss…