Peter faces a new life cycle in Spider-Man: Brand New Day trailer
We’ve got an official trailer for Spider-Man: Brand New Day, the follow-up to 2021’s No Way Home that is purportedly intended to launch a fresh trilogy of films with Tom…
A station wagon is entering one of the hardest 24-hour races in the world
It is a strange quirk of fate that the station wagon has morphed from mass-market family transport into something far more esoteric (at least here in the US, a market…
Here’s BMW’s first all-electric 3 series, the 2027 i3
BMW provided flights from Washington, DC, to Malaga, Spain, and accommodation so Ars could drive the iX3 and be briefed on the i3. Ars does not accept paid editorial content.…
Users hate it, but age-check tech is coming. Here’s how it works.
Last month, Discord quickly backpedaled after it announced that an age-verification system would roll out globally. Discord’s reversal followed a widespread user backlash, which also intensified scrutiny of the platform’s…
Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643 (CVSS…
Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
A high-severity security flaw affecting default installations of Ubuntu Desktop versions 24.04 and later could be exploited to escalate privileges to the root level. Tracked as CVE-2026-3888 (CVSS score: 7.8),…
Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
Security teams today are not short on tools or data. They are overwhelmed by both. Yet within the terabytes of alerts, exposures, and misconfigurations – security teams still struggle to…
9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
Cybersecurity researchers have warned about the risks posed by low-cost IP KVM (Keyboard, Video, Mouse over Internet Protocol) devices, which can grant attackers extensive control over compromised hosts. The nine…
Claude Code Security and Magecart: Getting the Threat Model Right
When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it – because the malicious code never actually touches your…
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE
Cybersecurity researchers have disclosed a critical security flaw impacting the GNU InetUtils telnet daemon (telnetd) that could be exploited by an unauthenticated remote attacker to execute arbitrary code with elevated…