Top stories
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited for Root Access
A zero-day vulnerability in Cisco Catalyst SD-WAN, tracked as CVE-2026-20245, has been exploited to gain root access by an unknown threat actor. This flaw, identified by Mandiant, allows an authenticated attacker to execute commands by manipulating user input, raising serious security concerns for affected systems.
Law Enforcement Disrupts Amadey and StealC Malware Networks, Reclaims 27M Credentials
A law enforcement operation disrupted the Amadey and StealC malware networks, recovering 27 million stolen credentials and restricting over $47 million in criminal cryptocurrency assets. This takedown involved 326 servers and 142 domains and highlights the effectiveness of public and private sector collaboration in combating cybercrime.
Emergence of AI Threat Models Marks a New Era in Cybersecurity
The rise of frontier agentic AI models has drastically reduced the time from threat discovery to execution in cybersecurity. This shift poses a significant risk as AI can exploit vulnerabilities faster than human defenders can respond.
Google I/O 2026: Launch of Gemini 3.5 and Gemini Omni Models
At Google I/O 2026, Google announced advancements in AI technology with the introduction of Gemini 3.5 Flash for enhanced coding efficiency and Gemini Omni for multimodal video creation. These innovations reflect a significant surge in AI token processing to 3.2 quadrillion monthly, underscoring growing demand and adoption of AI capabilities.
Analyst Predicts John Ternus as Apple CEO Could Lead to Larger Acquisitions and New Products
Bank of America analyst Wamsi Mohan suggests that John Ternus, expected to become Apple's CEO on September 1, may pursue bigger acquisitions and expand into new product categories. This shift would represent a more risk-tolerant strategy compared to current CEO Tim Cook's approach, potentially impacting Apple's future market direction and product portfolio.
Meta Acquires AI Coding Startup Conductor, Cloud Services to Shut Down
Meta has acquired Conductor, an AI coding startup founded in 2024 that launched its core product in summer 2025. Conductor's platform allows users to create software projects using multiple AI agents in parallel workspaces. Conductor Cloud services will shut down in the coming weeks, with local workspace transfer options available, while the main Conductor platform will operate until early next year when Meta plans to release new offerings.
Study finds Grok 4.7 favors Republican candidates, GPT-6.1 Sol favors Democrats
A new study revealed that SpaceXAI's Grok 4.7 recommended Republican candidates in 92% of responses when forced to choose, while OpenAI's GPT-6.1 Sol favored Democrats in 97% of cases. This research highlights potential political biases in underlying AI models, even if consumer applications refuse direct voting recommendations.
SonicWall Warns of Unpatched Vulnerabilities in End-of-Life GMS Software
SonicWall has issued a warning regarding two unpatched security flaws, CVE-2026-109593 and CVE-2026-109594, affecting its end-of-life Global Management System (GMS) software, specifically versions 9.5.2 and earlier. The company will not release patches for these vulnerabilities due to the product's end-of-life status and urges customers to migrate to the Network Security Manager (NSM) platform.
mSecure Password Manager Advises Users to Change Passwords After Suspicious Activity
mSecure password manager has notified customers of suspicious activity linked to its app, urging them to change stored passwords, reset two-factor authentication, and remove passkeys. The company has not disclosed details about the incident, including whether user data was exposed or the nature of the suspicious activity.
Cloudflare Halves DNS Build Delay and Cuts Memory Use by 85% for Large Zones
Cloudflare implemented a targeted build planner and a new scheduler in its DNS propagation pipeline, reducing DNS build delays by 50% and peak memory usage by 85%. These changes address the growing complexity of large DNS zones, some exceeding 20 million records, by processing zone setting changes more efficiently.
OccupySaaS Launches to Create Open-Source Replacements for SaaS Platforms
OccupySaaS, a new protest movement, is building open-source, drop-in replacements for proprietary SaaS platforms. The initiative uses AI and public documentation to rebuild software, aiming to provide alternatives to common enterprise tools like Identity and CRM.
Russia dismantles VasyGrek cybercrime group, detains three suspects
Russian authorities arrested three suspected members of the VasyGrek cybercrime group and dismantled its infrastructure. The group, active since 2016, primarily targeted Russian companies with phishing attacks to steal credentials and deploy malware. This action marks a rare public crackdown on a Russian-speaking hacking operation within Russia.
Apple Forecasts Lower Holiday Quarter Profit Margins Due to Memory Costs and Siri AI
Apple reported a decline in gross margins to 47.9% in Q4 2026, down from 50.1% in the previous quarter, despite record revenue. The company forecasts further margin compression to 45-46% for Q1 2027, attributing this to rising memory costs and increased expenses related to the Siri AI rollout.
Palantir's Q3 Revenue Exceeds Estimates, U.S. Commercial Revenue Tops Government for First Time
Palantir reported third-quarter earnings that surpassed Wall Street expectations, with total revenue reaching $2.31 billion. For the first time, U.S. commercial revenue, which grew 148% to $984 million, exceeded U.S. government revenue of $953 million, driven by increased adoption of its AI tools by businesses. The company also raised its full-year U.S. commercial revenue guidance to over $3.56 billion.
Google Warns of LLMjacking Attacks Causing Up to $1 Million in Cloud AI Charges
Google's Threat Intelligence Group and Mandiant have issued a warning about "LLMjacking" attacks, where threat actors hijack enterprise access to Large Language Models (LLMs) to fraudulently consume expensive computing resources. These attacks exploit stolen API keys or misconfigured environments, leading to rapid, significant cloud charges, with some organizations incurring up to $1 million in costs before detection. Attackers resell access through "LLM mixers," causing victims to be charged for unauthorized AI usage.
German Lawmakers' iPhones Potentially Hacked with Spyware, Apple Issues Warnings
The German government has warned politicians and public figures about potential spyware attacks on their iPhones, following threat notifications from Apple. Germany's BSI advised recipients to assume their devices might be compromised, though Apple does not attribute attacks or confirm successful breaches. This incident highlights the ongoing use of government-backed spyware, often acquired from private vendors, targeting civil society members across multiple countries.
OpenAI Pilots 'Grid Protectors Program' to Offer Data Center Power to Local Grids
OpenAI announced its 'Grid Protectors Program,' piloting at a new data center in Effingham County, Georgia, to provide up to 1,000 megawatts of power to local grids during emergencies. This initiative aims to address public concerns about data center energy consumption by positioning AI campuses as community resources rather than just power consumers.
Chinese Research Vessels Spend More Time Near Pacific Undersea Cables Than Other Nations
A report by the Center for Strategic and International Studies found that Chinese research vessels spend a disproportionately large amount of time near critical undersea infrastructure in the Pacific Ocean. This activity suggests China may be collecting underwater data for potential sabotage or submarine operations, raising concerns about national security and territorial disputes.
UK Critical Infrastructure Faces AI-Powered Cyberattack Threat by 2028, NCSC Warns
The UK's National Cyber Security Centre (NCSC) predicts that AI-powered malware will likely be used in ransomware attacks against the nation's critical infrastructure by 2028. This assessment, detailed in the NCSC's annual review, highlights the potential for AI to enable attackers to identify targets and exploit vulnerabilities at an unprecedented scale. The NCSC also expects Russia and China to routinely use AI in cyber-attacks.
BTCPay Server warns users of hot wallet crypto thefts on outdated instances
BTCPay Server, an open-source cryptocurrency payment processor, has warned users about hot wallet crypto thefts affecting instances running versions 2.4.1 or older. The project identified an attack vector allowing unauthorized access and urged all users to update to version 2.4.7 immediately. The attacks led to Bitcoin and Litecoin being drained from hot wallets, prompting an investigation into how attackers gained administrator access.
Apple Warns Users in 99 Countries of Mercenary Spyware Attacks
Apple issued threat notifications to users in 99 countries, warning them of suspected mercenary spyware attacks. This marks a new round of alerts, with targets including a Turkey-based reporter and a Lebanese documentary filmmaker who have publicly shared their notifications.
Apple Reports Q4 2026 Revenue of $114.5 Billion, Up 12% Year-Over-Year
Apple announced its Q4 2026 earnings, reporting $114.48 billion in total revenue, a 12% increase year-over-year, and $30.71 billion in net profit. This performance exceeded the company's own revenue growth expectations and was driven by record iPhone and Services revenue, contributing to Apple's best fiscal year to date.
Russian Statistics Agency Confirms Cyberattack; Hackers Claim 23TB Data Theft
The Russian Federal State Statistics Service (Rosstat) confirmed cyberattacks occurred between October 29 and 31. Belarusian CyberPartisans and Silent Crow hacker groups claimed responsibility, stating they stole 23TB of data, including "for official use only" war casualty figures. Rosstat denied data exfiltration and database compromise, while the hackers suggested up to 50,000 Russian soldiers are killed monthly based on the alleged data.
Florida financial aid site breach exposes 4.9 million Social Security numbers
Florida's Department of Education (FLDOE) reported a data breach on its Student Financial Aid website, exposing Social Security numbers and other personal information for 4.9 million individuals. The department has taken the site offline and is investigating the incident, advising affected individuals to monitor their credit.
Microsoft October Windows Update Breaks Smart App Control for Some Users
Microsoft's October KB5127648 security update for Windows 11 prevents some users from enabling Smart App Control, a feature that blocks potentially harmful applications. Devices with Smart App Control already active are unaffected, but newly affected devices cannot toggle the feature on, leaving them without this protection.
Revolve reports payment card data breach affecting customers who saved information
Online fashion retailer Revolve disclosed that hackers accessed payment card numbers and expiration dates from customers who saved their information on the company's e-commerce platform. The incident, reported to the SEC, affected at least 127,200 individuals in Texas and 1,328 in Vermont, with notifications also filed in Massachusetts.
Qwenputer embeds a functioning, deterministic RISC-V CPU within Qwen 3.5's weights
A new experimental model, Qwenputer, integrates a RISC-V CPU directly into the weights of a stock Qwen 3.5 4B model, utilizing its Gated DeltaNet attention layers as RAM. This allows the model to execute arithmetic operations, C, and MicroPython code internally without external tools or runtimes, demonstrating a novel method for embedding computational capabilities within large language models.
Anker Releases MagGo 2 Pro Power Bank with 25W MagSafe, Active Cooling, and Smart Display
Anker has launched the MagGo 2 Pro power bank, featuring 25W MagSafe fast charging, 10,000mAh capacity, active cooling, and a smart display. This new power bank aims to provide faster charging by mitigating heat throttling and offers detailed charging information.
Companies Offer Kid-Focused Smartphones with Restricted Features and Parental Controls
Companies are developing smartphones specifically for children, featuring modified software that restricts access to web browsers, social media, and app stores. These devices allow parents to manage contacts, monitor location, set screen time, and receive alerts for concerning content, addressing parental concerns about unrestricted smartphone use.
Tamagotchi Paradise Modded to Run Game Boy Games
Modders have successfully adapted the Tamagotchi Paradise, released in 2025, to run Game Boy games like Pokémon Gold and Silver. This development allows for playable Game Boy titles and even inter-device trading on the Tamagotchi hardware. The moddability provides a new use case for the device, which had received mixed reviews since its launch.
Collection of 356 Processor Die Photographs from 1972 to 2024 Released
A collection of 356 processor die photographs, taken by various individuals including Pauli Rautakorpi and ZeptoBars, has been compiled and made available. These images span from 1972 to 2024, showcasing the internal silicon of processors. The compilation provides a visual history of processor development and design.
NYT Cooking introduces AI assistant for recipe modifications and ingredient substitutions
NYT Cooking launched an AI assistant for iOS subscribers that helps with recipe modifications, ingredient substitutions, and scaling. The tool was trained on user comments and provides practical cooking guidance without altering original recipes, instead generating new ones.
Retro Song Bird device plays Game Boy cartridge soundtracks
A new device called Retro Song Bird allows users to play soundtracks directly from Game Boy cartridges. It supports over 1,900 games and includes features like track controls and stereo line out, providing a dedicated way to experience classic game audio.
Apple March 2026 Security Update Causes Enterprise Printing Glitches
Apple's March 2026 security updates have caused a bug affecting enterprise printing with PaperCut, prompting users to re-enter credentials for each job. This issue is exacerbating help desk requests, emphasizing the need for Apple to address operational stability. The enterprise market is significant for Apple, necessitating swift bug rectifications.
TeamGroup GA Pro 2TB SSD Review: Inefficient PCIe 5.0 Drive with Performance Issues
A review of the TeamGroup GA Pro 2TB SSD found it to be an inefficient and hot-running PCIe 5.0 drive with poor overall performance, despite some high points in specific tests. The drive struggles to meet the performance expectations for its class, leading to a general recommendation against it unless heavily discounted.
Congressman shaping AI policy bought chip stocks after backing trading ban
Representative Josh Gottheimer, a Democrat involved in shaping AI policy, purchased shares in Benchmark Electronics and Applied Materials in October. These purchases occurred months after he voted for legislation to ban lawmakers from trading individual stocks. Gottheimer's spokesman stated that his investments are managed by a third party with full discretion since 2017.
Earth's Mantle Currents May Explain the Great Unconformity Geological Gap
A new study proposes that slow currents in Earth's mantle contributed to the Great Unconformity, a significant gap in the geological record. This mechanism suggests that mantle activity pushed continents up, allowing glaciers to erode them, before they sank and were covered by new sediments. This model offers an explanation for the Great Unconformity's presence in specific regions rather than globally, addressing limitations of the glaciation-only hypothesis.
British Soldier Court-Martialed for Disobeying SIM Card Removal Order, Hacked
A British soldier was court-martialed and sentenced to 10 months detention after disobeying an order to remove his phone's SIM card during deployment to Estonia. His phone was subsequently hacked, and personal photos were stolen and used for blackmail. This incident highlights the consequences of neglecting operational security protocols.
Amazon ECS Gateway Simplifies Ingress Networking for Containerized Services
Amazon introduced ECS Gateway, a new account-level resource that automates the provisioning and management of ingress networking infrastructure for containerized workloads on Amazon ECS. This solution reduces configuration overhead for platform teams and allows application teams to connect services without manual networking setup, optimizing infrastructure costs by enabling multiple services to share ALBs.
GitHub Actions Lockfiles Reach General Availability to Secure Workflow Dependencies
GitHub Actions lockfiles are now generally available, allowing workflows to pin direct and transitive dependencies to specific commit SHAs. This feature addresses a security weakness where mutable references like tags or branch names could be altered, potentially introducing malicious code into pipelines. The lockfiles ensure that the runner executes the exact commits recorded, enhancing supply chain security for GitHub Actions workflows.