Top stories
Web-based cryptography lacks true end-to-end security, expert claims
The article argues that web-based applications claiming end-to-end encryption fail due to inherent structural flaws. It asserts that such systems cannot provide reliable security because the same entity that operates the service also distributes the cryptographic code, undermining security claims.
Computational Theory Links Market Competitiveness to P vs NP Problem
Research indicates that competitive market outcomes depend on whether P = NP. If P = NP, collusion could be sustained in markets, while P != NP renders collusion unstable, signaling a fundamental trade-off between market efficiency and competitiveness.
Pixel Watch 5 Leak Shows No Chip Upgrade, But Increased RAM
A Google Play Console listing for the Pixel Watch 5, codenamed "godric," indicates it will retain the Qualcomm SW5100 chip, similar to previous models. However, the device is expected to feature 3 GB of RAM, an increase from 2 GB, which could support new Gemini Intelligence features.
OpenSSH 10.6p2 Released with Workaround for Critical Vulnerability
OpenSSH 10.6p2 has been released to address a critical vulnerability. This update provides a workaround for the issue, which could potentially impact secure remote access.
GhostMap Android Flaw Allows Malicious App to Trigger Persistent Boot Loop
A vulnerability dubbed 'GhostMap' in Android allows a specially crafted, permission-less app to force devices into a continuous boot loop. This flaw, discovered by Bitdefender, stems from differing interpretations of ZIP compression methods in Android libraries, leading to memory access errors when a malformed APK is read. Google was informed in August but has not released a patch, classifying the issue as "not reproducible."
NextDC Shares Jump 51% After Goodman and Digital Realty Acquire Stakes
Shares of Australian data center operator NextDC rose 50.84% after Goodman Group and Digital Realty sought to acquire up to 9.9% stakes in the company. NextDC's board described the move as "opportunistic," occurring shortly after the company reported a power supply delay and revised its fiscal 2027 guidance.
Altera Introduces Agilex 2X FPGA and SoC Portfolio
Altera announced the Agilex 2X, a new portfolio of FPGAs and SoCs. This release provides a complete range of devices for various applications, marking a significant update to their product offerings.
UK "dangerously" reliant on China for critical minerals, parliamentary committee finds
A UK parliamentary investigation found the country is "dangerously" dependent on China for critical raw materials essential for military, renewable energy, and AI sectors. The business select committee called for urgent centralized policy and a "critical minerals finance facility" to diversify supply chains and reduce strategic vulnerability.
Former Samsung Employee Sentenced for Leaking Chip Technology to Chinese Rival CXMT
A former Samsung Electronics employee received a five-year prison sentence in South Korea for leaking Samsung's technology to Chinese memory chipmaker CXMT. This case highlights the increasing legal battles over trade secrets as Chinese chipmakers recruit experienced engineers to close the technology gap with established rivals.
Apple Reportedly Cuts Internal AI Spending Budgets for Engineering Teams
Apple has reportedly reduced the daily AI spending limits for its engineering teams from $300 to $200, with further cuts planned to $100, and potentially $25 for other departments. This change reflects a broader industry trend of companies re-evaluating AI costs versus productivity gains after an initial push for widespread AI adoption.
Victorian Political Parties Use AI-Generated Videos in Election Campaigns
Major political parties in Victoria, Australia, are using AI-generated videos featuring fabricated statements and scenarios of opposing leaders in their election campaigns. This marks an early instance of AI-generated content being deployed in political advertising to misrepresent opponents.
Kremlin-linked hackers exploited patched iOS and Android flaws via malicious websites
Hackers, possibly linked to Russia's Foreign Intelligence Service, exploited previously patched iOS and Android vulnerabilities to infect phones visiting compromised websites. The attacks involved injecting malicious JavaScript to steal browser cookies, Wi-Fi passwords, and mobile device data from visitors to sites like an impersonated US independence celebration page and a luxury hotel near UK government buildings.
Snap Shares Drop Over 10% After Missing Q3 Revenue and User Estimates
Snap's shares fell over 10% after its third-quarter earnings report revealed a miss on revenue and global daily active users. The company reported $1.72 billion in revenue against an expected $1.73 billion, and 495 million daily active users compared to the 499 million anticipated, leading to investor concern despite a year-over-year sales increase and net income gain.
Vercel implements Device Bound Session Credentials to prevent stolen cookie reuse
Vercel is rolling out Device Bound Session Credentials (DBSC) to protect user login sessions from information stealer malware. DBSC binds a login session to a user's device via a private key stored in a TPM, preventing reuse of stolen session cookies on other devices. This update enhances security for developers managing projects on vercel.com, following a previous security breach in April.
Senator Cruz Seeks to Confirm Republican FCC Nominee Before Senate Control Shifts
Senator Ted Cruz is pushing for a November 10 hearing to confirm FCC nominee Danielle Thumann Severs, aiming to secure a Republican majority on the commission before Democrats gain Senate control in January 2027. This confirmation would give Republicans a 3-1 advantage, potentially leading to a 3-0 Republican FCC by late 2027, which Senator Ron Wyden warns could violate federal law and invalidate FCC actions.
Render Removes AI Sandbox Time Limit, Offers Indefinite Runtime and State Preservation
Render has eliminated the 30-day continuous runtime limit for AI sandboxes on paid plans, allowing them to run indefinitely and suspend/resume with state intact. This contrasts with Vercel's 24-hour session cap, providing a different approach for long-running AI agent workflows and development tasks.
AI Deployment Engineers Earn Up to $1.45M Annually Due to High Demand
A new report by Christian & Timbers indicates that "elite" AI deployment engineers are earning between $586,000 and $1.45 million annually in total compensation, with senior leaders reaching up to $2.25 million. This compensation reflects a high demand for experienced AI talent, with only about 2,000 senior AI deployment leaders existing in the US market, despite significant corporate investments in AI deployment.
Dharma Field Extractor Model Released for Structured Data Extraction from Documents
A new 2-billion-parameter model, Dharma Field Extractor, has been released to extract specific structured fields from any document type, outputting JSON. This model outperforms existing frontier LLMs in this task at a lower cost, addressing the need for high-volume, precise data extraction for business systems.
Uber Q3 Revenue Exceeds Estimates, Mobility and Delivery Miss, Freight Surges
Uber reported Q3 revenue of $14.77 billion, surpassing analyst estimates, driven by its freight division. However, its core mobility and food delivery segments missed expectations, leading the company to invest in increasing driver supply in key markets.
APT Flaw in Debian and Ubuntu Allows MitM Attackers to Swap Verified Packages
A flaw in APT, the package manager for Debian and Ubuntu, allows attackers to swap verified package downloads with malicious code, which then executes as root. This vulnerability, CVE-2026-109518, affects Debian 12 and Ubuntu 22.04 and later by default, and requires APT to retry failed downloads. Debian has released fixed versions, and Ubuntu is distributing updates for affected releases.
.NET Parallel.ForEachAsync Can Serialize in Single-CPU Containers
A .NET Parallel.ForEachAsync loop can become effectively serial when deployed in a container with a single CPU limit, significantly increasing processing time. This occurs because Environment.ProcessorCount, which dictates default concurrency, reflects the container's CPU limit, even for I/O-bound asynchronous operations. Developers should explicitly configure MaxDegreeOfParallelism to prevent unexpected performance degradation in resource-constrained environments.
Amazon Quick Introduces Smart Approvals for AI Agent Action Oversight
Amazon Quick launched Smart Approvals, a feature that automates routine AI agent actions while preserving human oversight for critical decisions. This system evaluates proposed actions against existing security controls and user requests, automatically approving safe actions or flagging others for human review. Smart Approvals aims to reduce approval fatigue by focusing human attention on necessary judgments without altering existing permissions or mandatory approvals.
Kyiv Independent Website Hit by Suspected Russian Cyberattack, False Information Posted
The Kyiv Independent, a Ukrainian English-language news outlet, experienced a cyberattack that disrupted its website and newsletter service. Hackers posted false messages, including fabricated claims about Ukrainian President Zelensky, and sent malicious emails to subscribers. The outlet attributes the attack to suspected Russian actors, noting it is the first such incident for the publication.
Azure Failure Prediction and Detection System Reduces VM Interruptions by 36%
Microsoft Azure launched its Azure Failure Prediction and Detection (AFPD) system in 2024, which uses machine learning and telemetry to predict and prevent hardware failures. AFPD has reduced hardware-related virtual machine interruptions across the Azure fleet by 36%. The system operates across various workload types, including General Purpose, Specialized Compute, HPC/AI, and select Storage workloads.
DEA Classifies Experimental Opioid SR-17018 as Schedule I Controlled Substance
The US Drug Enforcement Administration (DEA) emergency-scheduled SR-17018, an experimental opioid compound, as a Schedule I controlled substance in late August. This classification places it alongside heroin, citing no accepted medical use and high abuse potential, despite ongoing research into its pain relief properties without respiratory depression and its potential to aid opioid withdrawal.
Revolut's Valuation Reaches $115 Billion in Secondary Share Sale
Revolut's investors completed a secondary share sale valuing the fintech at $115 billion, a 53% increase from a year ago. This valuation comes as the company prepares to launch a U.S. bank in 2027 and expands its global financial services.
Australian Government Warned of Potential "Robodebt" Repeat with AI in Decision-Making
The Centre for Public Integrity warned the Australian federal government about a lack of transparency and legislation regarding algorithmic decision-making (ADM) tools, citing concerns about a repeat of the "robodebt" scandal. A new report, "Computer Says No," calls for mandatory audits, a public register of ADM use, and an independent oversight body to monitor government algorithms.
Cyberattack Wipes Cloud Data at Russian Hosting Provider Beget
A cyberattack on Beget, a major Russian hosting provider, destroyed data across its cloud infrastructure, affecting virtual private servers, cloud storage, and Kubernetes services. The company is manually inspecting over 1,000 servers to restore services, with some websites already back online.
UK Home Office to Deploy Facial Recognition for Immigration Enforcement
The UK Home Office is implementing live facial recognition (LFR) technology at transport hubs and public events for immigration enforcement, including non-criminal offenses. This initiative is part of a broader crackdown involving increased budget and workforce for immigration enforcement, aiming to identify individuals unlawfully re-entering the UK or those subject to removal.
Critical Ruby on Rails Flaw Allows Arbitrary File Write via Crafted ImageMagick Uploads
A critical vulnerability in Ruby on Rails' Active Storage component allows unauthenticated attackers to write arbitrary files to a server by uploading a crafted file. This flaw, rated 9.8 on the CVSS scale, affects applications that use ImageMagick for image processing and could lead to remote code execution or lateral movement by exposing sensitive application credentials.
US Army Flies VICTOR Hybrid Electric Drone with 3D-Printed Heavy-Fuel Rotary Engine
The U.S. Army Combat Capabilities Development Command (DEVCOM) Army Research Laboratory (ARL) successfully flew the VICTOR hybrid electric drone, which uses a 3D-printed heavy-fuel rotary engine. This engine design allows the drone to operate on JP8 military fuel, improving performance and reducing the need for a liquid cooling system.
The Rise of "AI;DR" as a Response to Unedited AI-Generated Content
The acronym "AI;DR" (AI; Didn't Read) is gaining traction as a way to dismiss unedited AI-generated content. This reflects a growing frustration among readers with the proliferation of AI output that lacks human review and refinement.
North Korea Launches Missiles After Denying Binance Hack Accusations
North Korea launched multiple missiles toward the sea following its protest against U.S. accusations that North Korean hackers were behind a recent cryptocurrency heist at Binance. Pyongyang stated it sees no need to resume diplomacy with Washington, calling the FBI's attribution of the hack a hostile policy extension. This action likely aims to pressure the U.S. to drop its perceived hostility and offer concessions for diplomatic restoration.
Google Patches Critical Android RCE Flaw Affecting Android 14-17
Google released patches for a critical Android vulnerability, CVE-2026-58868, that could allow remote code execution without user interaction. The flaw affects Android versions 14 through 17 and is addressed in security patch level 2026-11-01 or later, which device manufacturers distribute.
AI Stocks Decline as Texas Election Results Raise Data Center Moratorium Concerns
Shares of AI-related companies, including Neoclouds CoreWeave and Iren, declined following midterm election results where Democrats, seen as proponents of data center moratoriums, secured victories in key data center hubs. The Democratic win in the Texas gubernatorial race, where 27% of planned data center gigawatts are located, is cited as a significant factor impacting investor sentiment regarding future AI infrastructure development.
EloElo Raises $80M Series C from NBCUniversal to Expand Microdrama Platform in India
Indian microdrama platform EloElo secured $80 million in Series C funding from Hornbill Capital and NBCUniversal, bringing its total funding to $130 million at a $500 million valuation. The company's Story TV app, with over 33 million active users, is capitalizing on the growing popularity of serialized vertical video content in India, a market projected to reach $3-4 billion by 2030.
C++26 Draft Fails DIS Ballot, Delaying Features Like Contracts and Reflection
The C++26 draft failed its Draft International Standard (DIS) ballot, marking the first time a C++ draft has not been approved at this stage. This outcome delays the standardization of features such as reflection, std::execution, library hardening, and contracts, impacting future C++ development.
CrowdStrike Introduces AI Kill Switch for Falcon Guardian Platform
CrowdStrike launched an "AI Kill Switch" feature within its Falcon Guardian platform, designed to allow security teams to stop internal AI agents that deviate from assigned behaviors, prevent their relaunch, and cut off network access. This tool addresses concerns about increased digital vulnerabilities from the proliferation of autonomous AI agents and aims to provide control over AI adoption.
Xbox Considers Offers for Arkane Studios, Including Ubisoft, for Blade Game Development
Xbox is considering offers from multiple companies, including Ubisoft, for the acquisition of game developer Arkane Studios. This move could allow Arkane to continue development on its Marvel's Blade game, following previous speculation about potential layoffs and project cancellations at Xbox.
Node.js to Release Security Updates for 26.x, 24.x, and 22.x Branches
The Node.js project will issue new security releases for its 26.x, 24.x, and 22.x release lines on or after November 11, 2026. These updates address a high-severity security vulnerability present across all affected versions, including End-of-Life releases.