CVE-2026-20643 2

Vulnerability (CVE)

Apple Fixes Web Kit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Apple released its first Background Security Improvements on Tuesday to fix a WebKit cross-origin issue in the Navigation API, tracked as CVE-2026-20643, that could bypass the same-origin policy when processing maliciously crafted web content. The flaw...

Vulnerabilities & Patching

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

Cyber Risks The Hacker News

Attackers backdoored Trivy, the open-source vulnerability scanner from Aqua Security with over 32,000 GitHub stars and more than 100 million Docker Hub downloads, injecting credential-stealing malware into official releases and GitHub Actions used by...

Malware