Latest articles and insights
SimplyProxies — our UK mobile proxy service. Real 4G/5G devices, pay-as-you-go from £2/GB. Free 500 MB trial, no card.
A single WebGPU texture-creation call carrying three innocent-looking properties — a depth/stencil format, a non-power-of-two size, and more than one mip level — is enough to trigger a heap buffer overflow inside Chrome’s GPU process on phones powered by Imagination PowerV…
A Wi-Fi 6 mesh router that authenticates its own mesh protocol with JWTs signed by a single HMAC key baked into the firmware image. Download the firmware, decrypt the NVRAM blob with a key hiding in a shared library, forge a token, and the broker on port 1883 welcomes you as the…
On August 14, 2026, NIST’s National Vulnerability Database published CVE-2026-73678, an unauthenticated remote code execution vulnerability in MindsDB’s Minds Platform — the desktop AI-agent application the company now ships as MindsHub Cowork. NVD scores it a perfec…
On August 6, 2026, NIST’s National Vulnerability Database published two closely related vulnerabilities in html_sanitize_ex, the long-standing HTML-sanitization library for Elixir/Erlang applications. CVE-2026-68749 is a regex-catastrophe in the CSS scrubber; CVE-2026-6875…
On August 5, 2026, TECNO Mobile’s Security Response Center published CVE-2026-18907, a path-traversal vulnerability in Hi Browser (com.talpa.hibrowser) version 2.23.1.1 — TECNO’s first-party HiOS browser (the com.talpa.* application family on its Android handsets). N…