Supply chain chaos, old bugs, smarter phishing, and botnets everywhere — here’s what broke the internet this week.

Ghost CMS SQL injection campaign has compromised 700+ websites — including Harvard University, Oxford University, and DuckDuckGo — using a CVSS 9.4 flaw to inject ClickFix malware lures that trick ...

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

CVE-2026-46333 is a nine-year Linux kernel improper privilege management flaw introduced in November 2016 with a CVSS score ...

A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate ...

A Virginia software contractor deleted nearly 100 US government databases within minutes of being fired, with his twin brother watching and coaching him through it.

PHILADELPHIA (WPVI) -- All of the training and hours of hard work paid off for runners competing in the 2026 Independence Blue Cross Broad Street Run, particularly for the athletes who emerged as ...

SEPTA will be offering free rides on the Broad Street Line on Sunday for registered Broad Street Run participants. According to SEPTA, every registered competitor can ride the B line for free to the ...

The refreshed Run menu is rolling out now to Windows testers in the Experimental Channel. The refreshed Run menu is rolling out now to Windows testers in the Experimental Channel. is a news writer who ...

Kenya’s Sabastian Sawe became the first person to ever crash the two-hour mark in a marathon on Sunday by winning the London Marathon in a record 1 hour, 59 minutes and 30 seconds. Sawe, 29, ...

Joshua Jackson sprinted past Carson Mello in the final stretch, winning the 26.2-mile race by just two seconds A runner at the 2026 Delaware Running Festival lost first place after celebrating too ...