A US Army helicopter gunship was apparently struck by an Iranian Shahed drone before going down near the Strait of Hormuz—but it’s unclear whether the one-way attack drone was deliberately aimed or achieved more of a lucky accidental strike. Axios correspondent Barak Ravid first reported an unnamed US government official’s comments that an Iranian drone had hit the US Army AH-64 Apache helicopter before the latter went down on June…

Microsoft on Tuesday released fixes for two high-severity zero-days that were disclosed by a researcher who has been locked in a testy beef with the software giant. Nightmare Eclipse, the pseudonym the researcher goes by, released a handful of high-severity vulnerabilities in recent months, making them zero-days that had the potential to be exploited in the wild. The researcher has said the disclosures, which included proof-of-concept code, came after Microsoft…

Paramount Skydance is accusing Netflix of maintaining a campaign against its proposed acquisition of Warner Bros. Discovery (WBD). In a June 5 letter (PDF) addressed to Jared A. Hughes, acting section chief of the Media, Entertainment, and Communications Section of the US Department of Justice’s (DOJ’s) Antitrust Division, and A. Maya Kahn, a trial attorney for the Antitrust Division, and first reported on by Politico today, Paramount chief legal officer…

One day after WIRED revealed that Meta had quietly embedded an unreleased face-recognition system into an app installed on more than 50 million phones, the company removed it, according to a WIRED analysis of the latest version’s code. The most recent version of Meta AI, a companion app for its line of smart glasses, strips out the unactivated software components that powered the system Meta internally called NameTag. The version…

Researchers have analyzed a high-severity vulnerability in Linux that’s able to escalate untrusted users to root by exploiting a bug you don’t often see: a single errant character inside the kernel. The vulnerability, tracked as CVE-2026-23111, is located in nf_tables, a subsystem of the Linux kernel that provides packet filtering capabilities. It’s used to manage firewall rules and replaces older subsystems such as iptables, ip6tables, arptables, and ebtables. !!!WTF!!! The…

As Apple announced last year, this year’s macOS release will end support for Intel Macs. The macOS 27 Golden Gate release will require a Mac with an Apple Silicon chip inside, including the original M1 that launched in the MacBook Air, MacBook Pro, and Mac mini back in late 2020. Intel Macs running macOS 26 Tahoe can expect security and Safari patches for about two more years after the release…

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI coding agents. In all, multiple researchers said, 73 packages were flagged as malicious when automated systems on GitHub blocked them on the platform. Rather than noting they are malicious—and that developers who used AI agents to work with them should assume their…

Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious attacks, typically require hackers to jump through all kinds of hoops to bypass the measures. But what if remote code execution were as simple as being within Bluetooth range of a speaker connected to the targeted device? It turns out it can, at least when the speaker is…