Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

The Hacker News - Sep 16, 2026

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote attacker to execute arbitrary operating system (OS) commands by taking advantage of a hard-coded

Read full article

More News

How do you take T. rex's temperature? These scientists did it

Sep 16, 2026

How do you take T. rex's temperature? These scientists did it

Scientists have long discussed whether and which dinosaurs were warm-blooded. Now, researchers say they have used chemistry to take the temperature of two T. rexes. Here's what they found.

Mysterious sightings at 'China's Area 51' spark major warnings to America over top secret weapons

Sep 16, 2026

Mysterious sightings at 'China's Area 51' spark major warnings to America over top secret weapons

In recent months, various pictures of mysterious new aircrafts have been captured around remote facilities in the desert in China and experts say they are cause for concern.

Diver injured in great white shark attack off Quebec's Gaspé coast

Sep 16, 2026

Diver injured in great white shark attack off Quebec's Gaspé coast

A diver was transported to hospital after being injured by a great white shark in Percé, Que., in the province’s Gaspé region.

Area 51 mystery deepens as discovery exposes who is really behind secret flights

Sep 16, 2026

Area 51 mystery deepens as discovery exposes who is really behind secret flights

A mysterious job listing online has been tied to the infamous Air Force base that whistleblowers claim is home to secret government research on alien technology.

Do AI companies have to disclose dangerous incidents? 

Sep 16, 2026

Do AI companies have to disclose dangerous incidents? 

AI-DISCLOSURE/ (EXPLAINER, PIX):EXPLAINER-Do AI companies have to disclose dangerous incidents?

Trump adviser Sacks says AI fears driven by fear-mongering playbook

Sep 16, 2026

Trump adviser Sacks says AI fears driven by fear-mongering playbook

AI-REGULATION/SACKS:Trump adviser Sacks says AI fears driven by 'fear-mongering playbook'

Greenland and Antarctica face major ice loss: Key details explained

Sep 16, 2026

Greenland and Antarctica face major ice loss: Key details explained

According to new research based on satellite data Greenland and Argentina have lost vast amounts of ice over recent decades dating back to the 1970s with studies documenting major polar ice-sheet ablation.The data from 27 satellite missions between 1979 and 2023 shows that Greenland and...

New evidence shows that you are only slightly hotter than a T. rex

Sep 16, 2026

New evidence shows that you are only slightly hotter than a T. rex

These cold-blooded killers were probably as warm-blooded as mammals, according to new research.

Mark Zuckerberg Takes Aim at Anthropic in Debate Over A.I. Slowdown

Sep 16, 2026

Mark Zuckerberg Takes Aim at Anthropic in Debate Over A.I. Slowdown

On social media, Meta’s chief executive appeared to jab at Anthropic by saying that leading A.I. labs should be focused on safety rather than improving their own technology.

Scientists transplant lab-grown human brain tissue into mice: What they found

Sep 16, 2026

Scientists transplant lab-grown human brain tissue into mice: What they found

In a groundbreaking study, scientists have transplanted laboratory-grown human brain tissue with genetically modified mice in what they called a breakthrough for studying human brain development which may accelerate research into the etiology and pathogenesis of severe diseases such as autism,...

Apple explores AI server comeback, considers Nvidia's NVLink technology

Sep 16, 2026

Apple explores AI server comeback, considers Nvidia's NVLink technology

The company is developing an artificial intelligence server that could use either two or four M8 Ultra chips, which are expected to be Apple's most powerful processors.

Dino-mite discovery! Bizarre prehistoric species that looked like a 'huge pig with a turtle's beak and tusks' roamed Tanzania 240million years ago - and it could change the dinosaur timeline

Sep 16, 2026

Dino-mite discovery! Bizarre prehistoric species that looked like a 'huge pig with a turtle's beak and tusks' roamed Tanzania 240million years ago - and it could change the dinosaur timeline

It may look like a bizarre cross between a pig, a turtle and a sabre-toothed cat - but this was one of the most formidable herbivores of the Triassic.

Mothers’ Intrusive Thoughts Are Mostly Benign. Lindsay Clancy’s Case Is an Exception.

Sep 16, 2026

Mothers’ Intrusive Thoughts Are Mostly Benign. Lindsay Clancy’s Case Is an Exception.

Experts say that after childbirth, intrusive thoughts are common and mostly benign. Lindsay Clancy’s story provides a disturbing exception.

Part-human part-mouse brain developed in science breakthrough

Sep 16, 2026

Part-human part-mouse brain developed in science breakthrough

Researchers at Stanford University genetically altered mice to be able to receive and function with human brain cells.

Massive Black Holes May Have Started as Little Red Dots

Sep 16, 2026

Massive Black Holes May Have Started as Little Red Dots

A new simulation suggests little red dots, unusually compact objects seen in photos from space, might be one stage in the evolution of black holes.

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Sep 16, 2026

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Sep 16, 2026

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge,

Microsoft says AI rival Anthropic could have 'disastrous impact' on humanity

Sep 16, 2026

Microsoft says AI rival Anthropic could have 'disastrous impact' on humanity

Mustafa Suleyman says he believes the AI giant is in effect teaching Claude it "may be conscious".

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Sep 16, 2026

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the

China’s Z.ai raises revenue target 25% after US$5 billion cash injection

Sep 16, 2026

China’s Z.ai raises revenue target 25% after US$5 billion cash injection

Chinese artificial intelligence developer Z.ai has raised its year-end annual recurring revenue (ARR) outlook by 25 per cent to US$3 billion, as the firm indicated its fresh US$5 billion war chest had helped clear its computing capacity bottlenecks for the time being. The updated ARR projection, up from a previous estimate of about US$2.4 billion, was disclosed during an investor call on Wednesday, according to a transcript seen by the South China Morning Post. The revised guidance comes days...

Wildlife trust wants marina silt disposed offshore

Sep 16, 2026

Wildlife trust wants marina silt disposed offshore

Brighton Marina wants to restart dredging next year but still needs a site to dispose of the silt.

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

Sep 16, 2026

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads

New discovery forces scientists to rethink how Earth formed

Sep 16, 2026

New discovery forces scientists to rethink how Earth formed

New discovery forces scientists to rethink how Earth formed A new research study has challenged what scientists think about Earth’s origin and how it came into existence. For years, the origin of raw material responsible for Earth formation has been a contentious issue. Scientists...

Salesforce outage: Is the service back? Company shares update; 'we're working on...'

Sep 16, 2026

Salesforce outage: Is the service back? Company shares update; 'we're working on...'

The disruption has been reported across several countries, including India, the US, Japan, the UK, France and Germany.

China’s AI chip stocks face crucial test as MetaX lock-up period expires

Sep 16, 2026

China’s AI chip stocks face crucial test as MetaX lock-up period expires

China is bracing for a potential massive sell-off of a high-profile artificial intelligence chip stock on Thursday, when a lock-up period affecting 14 million shares in MetaX Integrated Circuits is set to expire. Analysts expect MetaX to face “significant selling pressure” when the restricted shares are released for trading, after the expiry of a similar lock-up period for shares in fellow AI chip firm Moore Threads last week sparked an avalanche of sales that wiped nearly 49 billion yuan...

Endangered water voles introduced to reserve

Sep 16, 2026

Endangered water voles introduced to reserve

Efforts are being made to reintroduce the locally-extinct species back to the River Wey in Surrey.

Meta's new ‘Luna’ smart glasses ditch cameras amid privacy backlash: What you need to know

Sep 16, 2026

Meta's new ‘Luna’ smart glasses ditch cameras amid privacy backlash: What you need to know

Mark Zuckerberg-led Meta Platforms released its latest smart glasses as its Meta Ray-Ban Display continues to face privacy concerns.

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

Sep 16, 2026

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Sep 16, 2026

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database

Threat Intelligence Alone Won't Close the Exploitation Gap

Sep 16, 2026

Threat Intelligence Alone Won't Close the Exploitation Gap

A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AI-assisted exploitation to accelerate the path from exposure to breach faster than most security programs are built to react.

Recommended

Still Surge

Let your "surge" of emotions burst forth when reading the news articles acknowledging the beauty and vastness of Science and futuristic Technologies.

NEWSLETTER
ABOUT US

Copyright © 2015 - 2026 Still Surge. All Rights Reserved.