Security Boulevard

Fuzzing to Zero-Day: Pwning V8CTF With TurboFan Type Confusion, CVE-2025-2135

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...

Claude Code's source code appears to have leaked: here's what we know

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Cloudflare’s new Dynamic Workers ditch containers to run AI agent code 100x faster

Cloudflare says dynamically loaded Workers are priced at $0.002 per unique Worker loaded per day, in addition to standard CPU ...
至顶头条 on MSN

Detroit项目推进，Java、Python、JavaScript联合使用即将成真

Oracle重启Java的Detroit项目，旨在实现Java与Python、JavaScript的联合使用。该项目将基于Chrome V8引擎实现JavaScript支持，基于CPython实现Python支持。项目目标包括提供javax.script API实现、改善应用安全性、简化对其他语言AI库的访问，以及充分利用V8和CPython运行时的兼容性。Detroit计划成为OpenJDK社区 ...

How Cloudflare’s Dynamic Workers Make Serverless Sandboxes 100X Faster

Discover the architecture behind Cloudflare's Dynamic Workers. Learn how they eliminate cold starts and make serverless sandboxes 100x faster for developers.

Google Chrome 146 update fixes 3 critical security flaws

With the new Chrome versions—146.0.7680.153/154 for Windows and macOS and 146.0.7680.153 for Linux—the developers have fixed ...

Oracle unveils Project Detroit for faster Java interop with JavaScript and Python

JavaOne Oracle has shipped Java 26, a short-term release, and introduced Project Detroit, which promises faster interop ...

JavaScript runtime developed with AI: Edge.js for secure Node.js applications

Securely execute Node.js workloads in WebAssembly sandboxes – that is the goal of the new JavaScript runtime Edge.js.
Gadget Review on MSN

Android's Chrome web browsing is now 47% faster than the competition

Android devices with Chrome now outperform iOS on web benchmarks by up to 47%, delivering 4-6% faster page loads through deep ...

Claude Code source code leak: Did Anthropic just expose its AI secrets, hidden models, and undercover coding strategy to the world?

Claude Code, Anthropic’s top AI agent, just suffered a major source code leak. Version 2.1.88 exposed 512,000 lines of ...
Autoblog

Hellcat V8 Could Return to the Dodge Charger in 2028

A new report claims Dodge is already developing a Hellcat-powered Charger for 2028, potentially bringing supercharged V8 muscle back to the lineup. When Dodge rolled out the eighth-generation Charger, ...
至顶头条 on MSN

Google紧急修复Chrome两个零日漏洞避免攻击利用

谷歌发布Chrome紧急更新，修复两个已被攻击者利用的零日漏洞CVE-2026-3909和CVE-2026-3910。第一个漏洞影响图形库Skia，存在越界写入问题；第二个漏洞位于V8引擎，存在不当实现缺陷。谷歌证实这两个漏洞的利用代码已在野外传播，但未透露具体攻击细节。修复程序已包含在最新稳定版更新中，用户需重启浏览器完成安装。