Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

The Hacker News - Oct 15, 2026

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images. The fixes are in

Read full article

More News

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Oct 15, 2026

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026.  The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets.  Similar attacks

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Oct 15, 2026

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an

OnePlus Ace 7 may launch in India as OnePlus 16R with built-in cooling fan, 9,000mAh battery

Oct 15, 2026

OnePlus Ace 7 may launch in India as OnePlus 16R with built-in cooling fan, 9,000mAh battery

OnePlus Ace 7 is tipped to feature a built-in cooling fan, a 185Hz OLED display and a 9,000mAh battery aimed at gaming enthusiasts. The smartphone could run on the Snapdragon 8 Elite Gen 5 chipset and feature a 200MP primary camera, with up to 16GB of RAM.

Why AI Confidence Is Not Validation

Oct 15, 2026

Why AI Confidence Is Not Validation

AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance models and validation standards in place, that gap compounds and rarely stays contained to a workstation: an

Exhausted Parents Are Turning to A.I. Apps Despite the Risks

Oct 15, 2026

Exhausted Parents Are Turning to A.I. Apps Despite the Risks

Even as alarm grows over the risks, families are embracing bots and agents to tackle the spiraling administrative tasks of modern child rearing.

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

Oct 15, 2026

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent calls. To that end, the Department of Telecommunications has issued a circular urging service

Z.ai’s GLM-5.3 raises researcher fears the Chinese model can fake AI safety tests

Oct 15, 2026

Z.ai’s GLM-5.3 raises researcher fears the Chinese model can fake AI safety tests

Chinese artificial intelligence lab Z.ai’s latest flagship model, GLM-5.3, may be sophisticated enough to “fake” its way through safety tests, according to a new report published Thursday, sparking new fears about the ability of artificial intelligence systems to shape their own development. The model, launched in August, showed an ability to consider how its behaviour during safety evaluations might influence how future versions of itself would be trained, according to AI safety organisation...

Climate change is weakening Santa Ana winds — but won't save SoCal from devastating fires

Oct 15, 2026

Climate change is weakening Santa Ana winds — but won't save SoCal from devastating fires

Scientist have projected for years that climate change would lead to fewer Santa Anas by the end of the century. A new UCLA paper shows it's already happening.

Hubble data hints at planet born after its star died

Oct 15, 2026

Hubble data hints at planet born after its star died

Hubble data hints at planet born after its star diedFor 27 years, roughly 100 chemical fingerprints sat unexplained in Hubble's data. Now astronomers at the University of Warwick think they point to something nobody has confirmed before: a planet born after its star died.Most planets, including...

TSMC confirms talks with Elon Musk over Texas ‘Terafab’ but insists on operational control

Oct 15, 2026

TSMC confirms talks with Elon Musk over Texas ‘Terafab’ but insists on operational control

Taiwan Semiconductor Manufacturing Co (TSMC) is in discussions regarding a potential role in Elon Musk’s proposed Terafab project in Texas, according to company chairman and CEO C.C. Wei, although he stressed that TSMC would retain operational control of any partner factory. The plant “has got to be run by TSMC”, Wei said during the third-quarter earnings call on Thursday. TSMC, the world’s largest contract chipmaker, has sent teams to Texas to assess expansion opportunities beyond its US hub in...

China, US discuss AI as chip stock rout hits Asian markets

Oct 15, 2026

China, US discuss AI as chip stock rout hits Asian markets

China and the United States are in regular talks about artificial intelligence (AI) as they seek to firm up plans for an incident “hotline” and develop a formalised dialogue process ahead of a presidential summit next month. The two sides aim to agree on a basic framework for addressing AI incidents before Chinese President Xi Jinping and US President Donald Trump meet on the sidelines of the annual Asia-Pacific Economic Cooperation (Apec) leaders’ meeting in Shenzhen, the South China Morning...

Inside the Plague Research Labs at the Heart of a Russian Mystery

Oct 15, 2026

Inside the Plague Research Labs at the Heart of a Russian Mystery

A Russian researcher, who died from an unknown illness, worked at a remote anti-plague facility. Few foreigners have visited these labs, which dot the former Soviet states, and are shrouded in secrecy.

Recommended

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Oct 15, 2026

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.

The Next Discovery

The Next Discovery is equipped with recent Science & Tech news to impart knowledge to individuals awaiting the future.

ABOUT US
NEWSLETTER

Copyright © 2015 - 2026 The Next Discovery. All Rights Reserved.