Feed aggregator

LLemdashes

Hacker News - Wed, 05/20/2026 - 8:18am

Article URL: https://wil.to/posts/llemdashes/

Comments URL: https://news.ycombinator.com/item?id=48206500

Points: 1

# Comments: 0

Categories: Hacker News

WiFi Spatial Sensing

Hacker News - Wed, 05/20/2026 - 8:12am

Article URL: https://github.com/ruvnet/RuView

Comments URL: https://news.ycombinator.com/item?id=48206429

Points: 1

# Comments: 0

Categories: Hacker News

Learning VIM while playing a game

Hacker News - Wed, 05/20/2026 - 8:07am

Article URL: https://vim-adventures.com/

Comments URL: https://news.ycombinator.com/item?id=48206392

Points: 1

# Comments: 0

Categories: Hacker News

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

US-Cert Current Activity - Wed, 05/20/2026 - 8:00am

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

  • CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability
  • CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability
  • CVE-2009-3459 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
  • CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability
  • CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability
  • CVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability
  • CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria

Categories: US-CERT Feed

Blue Apron Review: Is This Revamped Meal Kit Still Worth It?

CNET Feed - Wed, 05/20/2026 - 8:00am
Blue Apron ditched the subscription requirement and revamped the business in more ways than one. Here's our full review.
Categories: CNET

Google's New AI Plans Are Bleak, at Least for Everyone in the Real World

CNET Feed - Wed, 05/20/2026 - 8:00am
Commentary: At Google I/O 2026, the tech giant was obsessed with talking to itself. From the outside, it felt remorseless and exhausting.
Categories: CNET

Firefox 151 packs big privacy upgrades into a small update

Malware Bytes Security - Wed, 05/20/2026 - 7:46am

Mozilla has published release notes for Firefox browser version 151.0, and this update includes several genuinely meaningful privacy and security improvements.

Three changes stand out in particular:

  • Stronger anti‑fingerprinting
  • Broader protection for local network access
  • More control over private sessions and permissions

Note that Mozilla says several Firefox 151 features are “part of a progressive roll out,” meaning they will appear for some users first and be expanded over time. So, you may not see all of them immediately.

Privacy

One of the more visible additions is a new “end private session” control in Private Browsing Mode. Instead of closing every private window to clear your traces, you now get a dedicated fire‑icon button next to the address bar that wipes the current private session’s data and immediately starts a fresh one.

End private session button

Under the hood, this clears the usual private browsing artifacts for that session, including history, cookies, cached files, and other site data that would normally disappear only when the last private window closes.

For people who routinely mix normal and private windows, this is safer and less error‑prone than hunting down every private tab before you walk away from the machine.

Firefox 151 also tightens its defenses against browser fingerprinting in the default “Standard” Enhanced Tracking Protection (ETP) mode. Mozilla says Firefox now limits the amount of device and browser information exposed to websites in a way that reduces the number of uniquely identifiable users by about 14% overall, and by roughly 49% on macOS.

This makes it harder for trackers to pick you out of the crowd, especially on platforms with fewer users to begin with (like certain macOS configurations). This reduces the privacy risk surface by default, which makes it harder for phishing and landing pages that redirect visitors to “categorize” you.

Another important change is Firefox’s “local network access restrictions,” which are now rolling out to all users, not just those who turned Enhanced Tracking Protection to Strict.

This means that when a website wants to communicate with devices on your local network, or with apps and services running on your machine, Firefox now asks for permission first. Chrome and Edge have been rolling out similar permission prompts.

Security

Firefox 151 also quietly fixes several security vulnerabilities.

The most notable example is CVE‑2026‑8953, a sandbox escape due to a use‑after‑free in the Disability Access APIs component. While there are currently no reports of in‑the‑wild exploitation for this specific bug at the time of writing, this is the kind of bug cybercriminals love.

A use-after-free (UAF) is a software memory vulnerability where a program attempts to access a memory location after it has been freed. If the program fails to clear the pointer to that freed memory, attackers can manipulate the error to crash the system or execute arbitrary code. A memory corruption leading to a sandbox escape is exactly the kind of link attackers want to complete a browser exploit chain.

How to update

If you’re running Firefox in a home or small‑office environment, we recommend updating to Firefox 151 as soon as possible to get the fingerprinting protections, local network access prompts, and security patches.

To update Firefox:

  • Open Firefox
  • Click the menu (three stacked lines) in the upper-right corner
  • Go to Help > About Firefox
  • Firefox will automatically check for updates and begin downloading them
  • Restart the browser when prompted to complete the update

Once your Firefox browser has been updated, it will show a green checkmark along with the message: “Firefox is up to date.”

Let’s face it, an incognito window can only do so much. 
 
Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance. 

Categories: Malware Bytes

Pages