Hackers hijack Convertr analytics script to steal payment card data

A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
XDA Developers

I stopped uploading sensitive PDFs to Adobe after finding a self-hosted tool that does everything Acrobat charges for

The free Acrobat Reader app is fine for reading and signing things on your own machine, but tools like redaction are locked ...

I tried the free Adobe Acrobat clone – and finally have a pro PDF editor on Linux

If you've been frustrated over the lack of a good PDF editor in Linux, the developers at ArtCraft have delivered exactly what ...
BleepingComputer

Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. The flaw was ...
Seattle Times

No doctor needed: In Utah, AI can help you zap your zits

An AI-based healthcare startup on Monday will start offering prescriptions to Utah patients without direct human oversight, the first time a state has allowed such technology to replace the role of a ...