Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1

Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1#details) section of this advisory. 
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy


Security Impact Rating: High


CVE: CVE-2026-20034,CVE-2026-20035

Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-lite-agent-BCgSN8eb?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Enterprise%20Chat%20and%20Email%20Lite%20Agent%20File%20Upload%20Vulnerability%26vs_k=1

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Agent.
This vulnerability is due to inadequate validation of file contents during file upload operations. An attacker could exploit this vulnerability by uploading a file that contains malicious scripts or HTML code, which the application could make available to other users to access. A successful exploit could allow the attacker to execute the contents of that file in the browser of a user and conduct browser-based attacks. 

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-lite-agent-BCgSN8eb

Security Impact Rating: Medium


CVE: CVE-2026-20172

Cisco Identity Services Engine Authentication Bypass Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authentication%20Bypass%20Vulnerabilities%26vs_k=1

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to bypass authorization mechanisms or examine error messages to gain access to sensitive information on an affected device.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authentication%20Bypass%20Vulnerabilities%26vs_k=1#details) section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb

Security Impact Rating: Medium


CVE: CVE-2026-20193,CVE-2026-20195

Relax, Xbox Owners: Copilot's Not Invading Your Game Console
https://www.cnet.com/tech/services-and-software/microsoft-xbox-cancels-copilot-game-consoles/

Microsoft is shelving the idea of bringing Copilot AI to all its gaming platforms.

Google DeepMind Will Train AI Models on the MMORPG Eve Online
https://www.cnet.com/tech/services-and-software/google-deepmind-train-ai-models-eve-online/

The AI lab has taken a minority stake in the gaming company behind the incredibly complex 23-year-old space simulator.

Today's NYT Strands Hints, Answers and Help for May 7 #795
https://www.cnet.com/tech/gaming/todays-nyt-strands-hints-answers-and-help-for-may-7-795/

Here are hints and answers for the NYT Strands puzzle for May 7, No. 795.

Today's Wordle Hints, Answer and Help for May 7, #1783
https://www.cnet.com/tech/gaming/todays-wordle-hints-answer-and-help-for-may-7-1783/

Here are hints and the answer for today's Wordle for May 7, No. 1,783.

Today's NYT Connections Hints, Answers and Help for May 7, #1061
https://www.cnet.com/tech/gaming/todays-nyt-connections-hints-answers-and-help-for-may-7-1061/

Here are some hints and the answers for the NYT Connections puzzle for May 7, No. 1,061.

Google Chrome Might Have Installed an AI Model Onto Your Device Without You Knowing
https://www.cnet.com/tech/services-and-software/chrome-installing-4gb-ai-model-gemini-nano/

Here's how to figure out if you have the 4GB AI model and how to get rid of it.

Debian 12 (Bookworm) approaching end of life
https://www.qubes-os.org/news/2026/05/06/debian-12-bookworm-approaching-end-of-life/

Debian 12 (Bookworm) is currently scheduled (https://www.debian.org/releases/) to reach end-of-life (EOL) on 2026-06-10 (approximately one month from the date of this announcement). Please upgrade all of your Debian templates and standalones by that date. For more information, see Upgrading to avoid EOL (https://doc.qubes-os.org/en/latest/user/how-to-guides/how-to-update.html#upgrading-to-avoid-eol).

There are two ways to upgrade a template to a new Debian release:



Recommended: Install a fresh template to replace the existing one. (https://doc.qubes-os.org/en/latest/user/templates/debian/debian.html#installing) This option is simpler for less experienced users, but it won’t preserve any modifications you’ve made to your template. After you install the new template, you’ll have to redo your desired template modifications (if any) and switch everything that was set to the old template to the new template (https://doc.qubes-os.org/en/latest/user/templates/templates.html#switching). If you choose to modify your template, you may wish to write those modifications down so that you remember what to redo on each fresh install. To see a log of package manager actions, see /var/log/dpkg.log and /var/log/apt/history.log in the old Debian template.


Advanced: Perform an in-place upgrade of an existing Debian template. (https://doc.qubes-os.org/en/latest/user/templates/debian/debian-upgrade.html) This option will preserve any modifications you’ve made to the template, but it may be more complicated for less experienced users.



Note on Debian LTS

Debian releases have two EOL dates: regular and long-term support (LTS) (https://www.debian.org/lts/). Qubes OS support for Debian templates ends at the regular EOL date, not the LTS EOL date.

Today's NYT Mini Crossword Answers for Thursday, May 7
https://www.cnet.com/tech/gaming/todays-nyt-mini-crossword-answers-for-thursday-may-7/

Here are the answers for The New York Times Mini Crossword for May 7.

Qualcomm's New Midrange Chips Add Wi-Fi 7, Improve Gaming for Lower-Cost Phones
https://www.cnet.com/tech/mobile/qualcomms-new-midrange-chips-add-wi-fi-7-improve-gaming-for-lower-cost-phones/

The two new processors could bring several flagship-phone features down to more affordable devices.

Cisco to Participate in May & June Events with the Financial Community
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2026/m05/cisco-to-participate-in-may-june-events-with-the-financial-community.html?source=rss

Cisco (NASDAQ: CSCO) will participate in the following events with the financial community in May & June
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)

Today's NYT Connections: Sports Edition Hints and Answers for May 7, #591
https://www.cnet.com/tech/gaming/todays-nyt-connections-sports-edition-hints-and-answers-for-may-7-590/

Here are hints and the answers for the NYT Connections: Sports Edition puzzle for May 7, No. 591.

Reddit Is Blocking Some Users From Its Mobile Website. Here's How to Get In
https://www.cnet.com/news/social-media/reddit-prompting-some-mobile-web-users-to-download-the-app/

The company says it's a limited test on a small set of users who frequently browse the site without logging in. There may be ways around it.

I Kept Accidentally Closing All My Browser Tabs. So I Changed My Keyboard to Stop It
https://www.cnet.com/tech/computing/i-kept-accidentally-closing-all-my-browser-tabs-so-i-changed-my-keyboard-to-stop-it/

I don't have to worry about this annoying keyboard shortcut now that I've remapped it.

What to Expect From Google I/O: Glasses, Glasses, Glasses video
https://www.cnet.com/videos/what-to-expect-from-google-io-glasses-glasses-glasses/

A whole bunch of Google glasses are on their way this year. And guess what? We're probably going to hear a lot more about them very soon. Let's break down what we know and what we think is coming.

You Can Now Stream 'Send Help' on Hulu. Here's What to Know About the Movie
https://www.cnet.com/tech/services-and-software/send-help-movie-streaming-hulu/

Sam Raimi directed this ruthless thriller, blending comedy and viciousness.

Make Your Work Day More Joyful and Less Stressful With These AI Tips
https://www.cnet.com/tech/services-and-software/make-your-work-day-more-joyful-and-less-stressful-with-these-ai-tips/

This guide could help you triumph over the drudgery of the day-to-day 9-to-5.