CISA added critical vulnerabilities affecting WSO2 and Adobe Commerce/Magento to its Known Exploited Vulnerabilities catalog after evidence of active attacks. The WSO2 issue involves path traversal in API Control Plane, making these products a priority for exposure checks and patch planning.
The Canadian Centre for Cyber Security warned that attackers are exploiting CVE-2026-48842 in Roundcube Webmail's virtuser_query plugin. The reported affected branches are 1.6.x before 1.6.16 and 1.7.x before 1.7.1; exploitation does not require authentication.
Google is testing a Gemini feature that makes phone calls to businesses on a user's behalf. Initial availability is limited to Pixel 11 owners in the United States with a paid Gemini subscription, giving the experiment a restricted device and subscription rollout.
Feather is developing a customizable robotics platform priced at $30,000 and aimed at software developers. Its pitch is an 'Android of robotics,' positioning the platform as a foundation developers can adapt for their own robotics applications.