CNET highlights Yale Assure Lock 2 models as holiday gifts, with fingerprint or keypad entry, remote app controls and several finish options.
The Latest
These Yale Smart Locks Could Be The Most Practical High-Tech Gift This Holiday Season
7 Best Encrypted External Hard Drives for Secure Storage in 2027
Compare seven encrypted external drives by security approach, capacity, convenience, and cost to find the right fit for personal or business storage.
Zero Click, Silent, Remote Android DoS
A researcher says a malformed WAP Push SMS can crash Android’s phone process without interaction. Google’s October update is listed as the patch.
6 Best Ring Doorbells for Maximum Value in 2027 – Reviews & Comparisons
Compare the 6 best Ring doorbell value bundles for 2027. Find the right mix of battery life, wired reliability, and extra sensors to maximize your home security budget.
Telegram’s Android Flaw: What To Know And What To Do Now
NebuSec says a Telegram Android call bug could be chained into phone access. Telegram fixed the reported code issue in version 12.10.4.
This Week In AI Security: Firewall Fixes, Rented Banking Trojans, Blank PDFs, And Stolen Tokens
This week’s security roundup covers Fortinet fixes, rented banking malware, a blank PDF backdoor, an Authenticator flaw and patch priorities.
CVE-2026-76418: Cisco Secure Firewall ASA Software And Cisco Secure FTD Software Unchecked Return Value To NULL Pointer Dereference Vulnerability Actively Exploited (CISA KEV)
CISA lists a Cisco ASA and FTD vulnerability as actively exploited. The supplied notice does not include a CVSS score, patch details or attack specifics.
CVE-2026-97229: GitLab Community Edition And Enterprise Edition Integer Overflow Or Wraparound Vulnerability Actively Exploited (CISA KEV)
CISA added CVE-2026-97229, an integer overflow affecting GitLab CE and EE, to its Known Exploited Vulnerabilities catalog. Key details remain limited.
Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers
Dream Security says attackers chained PHP2Shell with a Linux kernel flaw to root 25 PAN-OS servers, including systems in a US government-affiliated environment.
Apple’s Git Still Trusts The Compromised eMudhra Certificates
A community report says macOS developer tools still trust compromised eMudhra certificates after a recent update, exposing HTTPS connections to interception.
