Top stories
Inkling: Thinking Machines Releases Open-Weights Multimodal AI Model
Thinking Machines Lab has released Inkling, a multimodal AI model with approximately 1 trillion parameters. This open-weight model supports text, audio, and images, and features a mixture-of-experts design for efficiency. Its compatibility with a variety of inputs and adaptability through customization has positioned it as a flexible solution for enterprises and developers.
US Charges Russians for Operating 'Bulletproof' Hosting Services Linked to $62M in Cybercrime Losses
U.S. prosecutors have unsealed charges against three Russian nationals linked to bulletproof hosting providers Media Land and ML.Cloud. The Russians allegedly supported ransomware attacks through these services, causing over $62 million in damages. A $10 million reward is offered for information leading to their arrests.
FCC Approves Light-Reflecting Satellite Despite Astronomer Concerns
The US FCC has approved Reflect Orbital's Earendil-1 satellite to reflect sunlight to Earth at night for improved visibility and solar energy. While the project aims to innovate night-time visibility in various sectors, it faces strong opposition over potential impacts on astronomy and environmental health. The approval marks a critical test stage before a planned expansion to a 50,000-satellite network by 2035.
Microsoft Patches Windows Defender 'RoguePlanet' Vulnerability CVE-2026-50656
Microsoft has patched the 'RoguePlanet' vulnerability (CVE-2026-50656) affecting Windows Defender on Windows 10 and 11, which allowed SYSTEM privileges escalation. The vulnerability was disclosed by researcher Nightmare Eclipse, and a month later Microsoft released the patch in Malware Protection Engine update version 1.1.26060.3008. The flaw's potential use in privilege escalation makes its resolution important for system security.
Alibaba Bans Anthropic's AI Tools Amid Espionage Allegations
Alibaba has banned Anthropic's AI tools, including Claude Code, for employees. The ban, effective July 10, follows Anthropic's accusation of a distillation attempt by Alibaba. This highlights rising tensions between U.S. and Chinese tech industries over AI technology and access.
Nintendo to End Original Switch Sales in Europe by 2027 Due to Battery Regulations
Nintendo will cease sales of the original Switch consoles in Europe by February 2027, aligning with new EU regulations requiring user-replaceable batteries. Updated versions of products, including the new Switch 2, will feature replaceable batteries, supporting sustainability goals.
Google and FBI Disrupt NetNut Proxy Network of 2 Million Devices
Google, the FBI, Lumen, and others disrupted the NetNut residential proxy network involving over 2 million devices used for malicious activities. The operation disabled command-and-control features, protecting home devices from being exploited. This action significantly reduces cybercriminals' ability to mask their activities using residential IPs.
Former EU Parliament Member Hacked with Pegasus While Investigating Spyware
Stelios Kouloglou, a former European Parliament member, was targeted with Pegasus spyware during his work on the PEGA Committee, which investigated commercial spyware misuse. The hack occurred as the committee prepared recommendations on regulating spyware. This incident underscores concerns about government surveillance practices in the EU.
Google Launches Faster AI Models for Image and Video: Nano Banana 2 Lite and Gemini Omni Flash
Google announced the launch of Nano Banana 2 Lite and Gemini Omni Flash, models designed to enhance multimedia processing efficiency. Nano Banana 2 Lite focuses on low-cost, fast image generation, while Omni Flash offers advanced video generation and editing. Available across Google platforms, these models aim to streamline creative workflows for developers and businesses using AI-generated content.
Nikkei Discloses Breaches of Employee Microsoft and Google Email Accounts
Japanese publishing company Nikkei reported two separate security incidents involving employee email accounts. Attackers accessed a Google Workspace account in July, potentially exposing personal information of 1,646 individuals, and a Microsoft 365 account in September, which was used to send 9,000 phishing emails to staff and interviewees.
Canadian Extradited to US for Alleged Cryptomining Hacks on University Supercomputers
Ryan James Roach, a 35-year-old Canadian, has been extradited to the US to face federal charges for allegedly orchestrating a cyber campaign that hijacked university supercomputers to mine cryptocurrency. From June 2016 to December 2019, Roach and co-defendant Mathiew James Stubbings, 41, allegedly compromised systems at academic institutions in New York, Massachusetts, North Carolina, and Tennessee, stealing credentials and deploying mining software. Stubbings' extradition proceedings are ongoing in Canada.
Netflix Launches AI Discover Tab for Mood-Based Content Recommendations in the US
Netflix has introduced a new "AI Discover" tab in its TV app in the U.S., offering users content recommendations based on their mood, viewing preferences, and available time. This feature aims to shift content discovery from endless scrolling to a more personalized, AI-powered experience, with themes like "something light" or "scare me." The AI Discover tab is a testbed for new features, powered by a new intelligence layer that responds to user input in real time.
Canva Restructures, Affecting 1,271 Employees Through Layoffs and Relocations
Canva is undergoing a significant restructuring that will impact 1,271 employees, representing 22% of its global workforce. The changes include role modifications, relocations to centralized hubs like Sydney, and layoffs, as the company aims to return to a model of small, empowered teams and consolidate product organizations. This restructure is described by CEO Melanie Perkins as the "hardest moment" in the company's thirteen-year history.
cPGuard Update System Compromised, Backdoor Deployed to Linux Servers
Attackers compromised the cPGuard security tool's update system on November 2, distributing a malicious script to customer Linux servers running versions 5.88.12 through 5.88.19. The script installed a backdoor, collected password hashes and sensitive files, and uploaded them to a cPGuard licensing server. OPSSHIELD detected and stopped the distribution within 12 hours, advising users to update to version 5.88.25 or later and rotate credentials.
Xen Hypervisor Flaws Allow Malicious VM to Read/Write Other VM Memory
Two critical flaws in the Xen hypervisor (CVE-2026-102703, CVE-2026-102704) enable a malicious guest VM to read and write the memory of other VMs, including the privileged dom0, on the same host. All Xen versions from 4.6 onward are vulnerable, and patches have been released for newer versions, requiring immediate updates and reboots for affected systems.
Salon Ceases Publication After 31 Years, Citing Unsustainable Digital Journalism Model
Salon, an online-only news magazine covering politics, culture, and criticism, announced it is ceasing publication after 31 years. The decision was made due to the changing business realities of independent digital journalism, rendering its publishing model unsustainable. Salon launched in November 1995 and was one of the first online-only news outlets.
Trump Administration Sues Utah Over State's Gambling Ban Affecting Prediction Markets
The US Commodity Futures Trading Commission (CFTC) has sued Utah to prevent the state from enforcing its gambling ban against Kalshi, a CFTC-registered prediction market. This action challenges Utah's attempt to shut down Kalshi, arguing federal preemption over state law regarding regulated contract markets.
Pangram Expands AI Detection Tools to Include Video and Image Content
Pangram, known for its AI text detection, has released new tools for identifying AI-generated images and videos. These updates allow subscribers to assess if video clips are partially or entirely AI-generated and automatically scan images for AI content via a Chrome extension. The company reports high accuracy rates in internal testing for both video and image detection.
Marc Lore's Food Technology Company Wonder Confidentially Files for IPO
Wonder, a food technology company founded by Marc Lore, confidentially filed for an Initial Public Offering (IPO) on Thursday. The company, which started as a mobile kitchen concept and expanded to 170 brick-and-mortar locations, has raised over $3 billion in funding and acquired companies like Grubhub and Blue Apron. An IPO would support further acquisitions and expansion for Wonder, which was valued at approximately $9 billion in a July funding round.
Gemini Omni 1.2 Flash Released with Longer Video Creation and Price Reduction
Google has made Gemini Omni 1.2 Flash generally available, introducing native 15-second video creation, multi-turn conversational editing, and improved reference following. This version is 30% cheaper than Gemini Omni 1.1, costing $0.07 per second for 720p video, and is available across the Gemini API and Gemini for business.
Russian State-Linked Group Midnight Blizzard Targets iOS, Android Devices in Espionage Campaign
The Russian state-sponsored threat actor Midnight Blizzard (APT29) conducted a watering hole campaign targeting iOS and Android users in Europe and the US. The group compromised legitimate websites and injected malicious JavaScript to fingerprint visitors before delivering zero-click exploits, aiming to steal sensitive data like passwords, messages, and browser information.
Nintendo Switch 2 Sales Decline 41% Amid Price Hikes and Memory Shortages
Nintendo reported a 41% drop in Switch 2 unit sales for its fiscal second quarter, selling 2.67 million units, down from 3.82 million in the previous quarter. This decline follows price increases in key markets and ongoing memory chip supply shortages, impacting revenue and net profit below analyst expectations.
QD-OLED Gaming Monitors See Price Reductions During Amazon's Big Deal Days
During Amazon's Big Deal Days, several QD-OLED gaming monitors, including Alienware's 27-inch AW2725DF and 34-inch AW3426DW, and AOC's 27-inch 1440p display, are available at reduced prices. The Alienware models, known for high refresh rates up to 360 Hz and color accuracy, are at record lows, while the AOC monitor, featuring a 144Hz refresh rate, is priced at $280.
Banking Scam Infrastructure Fakes Domain Suspensions to Evade Detection
KELA researchers uncovered a financial scam operation using hundreds of fraudulent websites that display fake suspension notices to evade detection by security scanners. These sites clone legitimate banking domains and target business banking customers, showing a false takedown page on a visitor's second visit while remaining active for victims.
Bedrock Robotics Raises $600M in Series C Funding for Autonomous Excavators
Bedrock Robotics secured $600 million in Series C funding, valuing the company at $4.1 billion, to expand the commercial deployment of its self-driving excavator technology. The startup's autonomous excavators are now operating on active construction sites, addressing a shortage of skilled operators in the construction industry.
New York Times and Other Publishers Sue Brave Browser Over AI Scraping and Paywall Bypass
The New York Times, alongside other publications including the New York Daily News, Chicago Tribune, and Orlando Sentinel, has filed lawsuits against Brave Software. The lawsuits allege that Brave unlawfully scrapes copyrighted content to train AI models for companies like Anthropic, Perplexity, Mistral, xAI, and Cohere, and that its browser features bypass publisher paywalls and block ads.
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems
A new UEFI bootkit, BlackX, is targeting diplomatic organizations in Central Asia, bypassing Secure Boot on Windows systems. BlackX exploits the Baton Drop vulnerability (CVE-2022-21894) on systems that have not applied manual Secure Boot revocation mitigations, even if patched.
Operation Serengeti III Disrupts 11,000 Cybercrime Networks, Arrests 1,400 in Africa
Law enforcement agencies, coordinated by Interpol, disrupted nearly 11,000 cybercriminal networks and arrested over 1,400 individuals in Africa during Operation Serengeti III. The operation targeted business email compromise, ransomware, and online scams, leading to the recovery of over $105 million in illegal funds.
Google Cloud VRP Introduces New $250,000 Root-in-Cloud Reward Tier
Google Cloud's Vulnerability Reward Program (VRP) added a new $250,000 "Root-in-Cloud" reward tier for discovering high-impact architectural vulnerabilities. This tier targets human-led research into tenant-isolation bypasses and complex cross-service logic flaws, requiring full administrative control over Google Cloud organizations or projects without prior access.
WorkOS Internal Sales App Breached Using ARTEX AI, Exposing Customer Contact Data
WorkOS, a developer infrastructure company, experienced a data breach where an attacker accessed an internal sales application, exposing business contact details, customer communication summaries, and account histories. The attacker utilized the ARTEX AI offensive security framework to automate reconnaissance and exploitation, marking a notable instance of AI-powered attack tools in use.
9to5Google launches membership program 9to5Google Pro
9to5Google has launched a membership program named 9to5Google Pro, aimed at enhancing community interaction and content offerings. Subscribers will gain access to ad-free podcasts, a dedicated Discord server for discussions, and tiered benefits that expand with membership growth.
Apple faces potential congressional scrutiny over ICE tracking apps and Trump donations
Apple is among several tech companies facing potential congressional investigations as Democrats prepare to take control of both chambers. Lawmakers may investigate Apple's hosting of ICE tracking apps and its $25 million donation to a White House ballroom project. These probes could lead to subpoenas for company records.
Apple and DOJ Face Pushback on Subpoenas from Tech Companies in Antitrust Case
Several tech companies, including Epic Games and Samsung, are disputing the scope of subpoenas issued by Apple and the Department of Justice in their ongoing antitrust lawsuit. These companies argue that the requests for documents and information are overly broad and burdensome, complicating the discovery phase of the legal battle.
Nvidia Hardware Valued at $11.4 Million Stolen in Transit Between Oakland and Texas
An $11.4 million shipment of Nvidia hardware disappeared during transport from Oakland to Fort Worth, Texas, in late August. The theft, which involved a truck bearing a food transportation company's logo, was discovered in early September when the cargo failed to arrive, and police have made no arrests or recoveries.
Hybrid AI Model Combines Jev and Opus for Cost-Effective Identity Resolution
A new hybrid AI model combining Jev and Opus achieves high accuracy in identity resolution tasks at a significantly reduced cost. This approach leverages Jev's calibrated confidence to selectively query Opus, providing frontier model performance while being over four times cheaper than using Opus alone.
Firecracker MicroVM Escape Achieved, Allowing Root Code Execution on Host
Researchers successfully escaped a Firecracker microVM, achieving root code execution on the host system. This exploit, a continuation of previous work, leverages a host memory primitive to modify saved registers and redirect execution when a vCPU thread returns from KVM.
InfoHawk Uncovers 820 Restaurant Impersonation Domains Running Payment-Skimming Campaigns
InfoHawk research identified 820 suspicious domains impersonating major US restaurant chains like Jersey Mike's and Chipotle. These sites use reverse-proxying to mimic legitimate ordering experiences while deploying sophisticated payment-skimming attacks that capture credit card details and bank SMS verification codes. This campaign poses a significant risk to consumers ordering food online, as the fake sites are highly convincing.
Medical Services Company Settles with Four States Over 2023 Data Breach Affecting 13M Patients
Perry Johnson Companies, a medical services firm, has agreed to pay $300,000 and implement significant security changes after a March 2023 data breach exposed the data of over 13 million individuals. The settlement with Connecticut, New Jersey, New York, and Michigan addresses the company's failure to use multi-factor authentication and properly monitor its systems, which allowed hackers to access sensitive patient records for two months.
Senate to Vote on Bipartisan Permitting Reform Bill to Accelerate Energy Projects
The U.S. Senate is set to vote on a bipartisan permitting reform bill, the Bipartisan American Affordability and Jobs Act (BAAJA), aimed at accelerating the approval process for energy projects. This legislation could speed up the deployment of both clean energy and fossil fuel projects, potentially lowering utility bills but also raising concerns about reduced environmental oversight and increased reliance on fossil fuels for data centers.
Neocloud Stocks Fall After Elon Musk Predicts Collapse for Over 200 Companies
Shares of neocloud companies like Nebius, CoreWeave, and Iren dropped after Elon Musk stated that over 200 neoclouds face collapse due to debt market shutdowns. This adds pressure to a sector already facing investor concerns about debt-funded expansion and the returns on AI infrastructure investments.