The Hacker News August 27, 2026

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Next.js patches two critical unauthenticated RCE flaws affecting Windows deployments and sites with AVIF optimization enabled.

More like this

Microsoft 365 Family subscribers will finally be able to share AI benefits

The Verge

Researchers uncover new DarkSword spyware variant affecting unpatched iPhones

9 to 5 Mac

You can now use TextExpander for free across Mac, iPhone, iPad, and more

9 to 5 Mac