Claude Code sends user email through HTTP headers in reported privacy leak
Anthropic’s Claude Code is facing privacy concerns after…
Updated 3 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
Palo Alto Networks could pay $500 million for Clutch Security
Palo Alto Networks is in talks to acquire Clutch Security, a startup that secures AI agents’ access to company systems, for $500 million in cash plus additional milestone-based payouts. The discussion involves a three-year-old company that was last valued at $85 million after a $20 million Series A round in January 2025. Acquisition terms and valuation Clutch is currently approaching $10 million in annual recurring revenue, or ARR. If the…
Microsoft says redesigned Xbox app launches 60% faster
Microsoft has announced a redesigned Xbox app for Windows that is already up to 60% faster when launching. The update also speeds up the Home, Store, and Game Pass pages, and it is rolling out first to Xbox Insiders before a wider release. Xbox app changes on PC The app update is meant to make the Windows version simpler to use. Microsoft says the refreshed design is built to make…
U.S. government warns industrial refrigeration users of an ongoing cyber threat
The U.S. government has warned that industrial refrigeration units face an “ongoing cyber threat” after reports of cyberattacks on freezers and fridges in supermarkets around the world, U.S. military bases, and at least one blood bank. The alert covers internet-connected refrigeration and cold chain monitoring systems in grocery stores and cold storage facilities, and it says the hacks are affecting the food, agriculture, transportation, and medicine-shipping industries. Federal warning on…
OpenMatter Network says decentralized AI can replace big data centers
OpenMatter Network is presenting its decentralized computing platform as an alternative to massive, centralized data center development. The company says the model can keep supporting AI adoption by spreading computing workloads across distributed resources instead of relying mainly on large-scale data centers. The push comes as Tuesday’s midterm elections put public resistance to new data center facilities in the national spotlight. OpenMatter says that resistance does not have to slow…
OpenAI releases GPT-6 Cyber for security research
OpenAI has made GPT-6 Cyber public as its most capable cybersecurity model. The model found previously unknown high-severity vulnerabilities in Firefox and the Linux kernel, and OpenAI said it outperformed GPT-6 Astra on most cybersecurity tasks. OpenAI’s newest cyber model OpenAI introduced GPT-5.6 Cyber in August with its Daybreak Red and Blue access tiers for security researchers. Since then, the company has released GPT-6 Astra as its flagship model and…
Bluetooth Core 7.0 adds HDT for faster wireless audio and data in 2027
Bluetooth Core 7.0 includes Bluetooth High Data Throughput, or HDT, an optional feature that the Bluetooth SIG has adopted and expects to arrive in 2027. The technology is aimed at improving wireless data-transfer performance, and it is described as a higher-level of wireless performance for compatible devices. Bluetooth data limits and the new HDT rate Bluetooth has long been used for headphones, speakers, keyboards, mice, smartphones, and other connected devices.…
Instagram expands Edits to Mac desktop for more complex projects
Instagram announced on Thursday that Edits is coming to Mac desktop, with a version built for more complex video-editing projects that benefit from a larger screen, mouse, and keyboard. The move puts the short-form video editor in closer competition with ByteDance’s CapCut, which Meta set out to challenge when it launched Edits last year. Desktop editing for larger projects The desktop release is aimed at projects that have outgrown a…
GhostMap flaw can trap Android phones in a persistent boot loop
A vulnerability that Bitdefender calls GhostMap can force Android devices into a continuous boot loop with a specially crafted app. The app needs no permissions and only has to be installed on the device. GhostMap and the malformed APK Romanian cybersecurity company Bitdefender traced the flaw while examining an Android banking trojan that kept crashing its emulators when it tried to read an application resource. The company showed that a…
Permitting reform bill could reshape U.S. energy buildout
The Bipartisan American Affordability and Jobs Act, or BAAJA, is set for a Senate vote on November 9 after the midterms. The 417-page bill could speed up approval of energy projects in the US, but it also raises the question of whether emissions would fall or rise. Permitting reform and federal review The federal permitting system is meant to protect the environment from industrial pollution tied to large projects such…
Amazon replaces Grubhub with Uber Eats for Prime members
Amazon has made Uber Eats the restaurant delivery partner for Prime members in the United States. The new arrangement ends Amazon’s existing deal with Grubhub, while Prime members who had already activated Grubhub+ can keep using that membership through December 31, 2027. Prime food orders move to Uber Eats Under the partnership announced Thursday, Prime members can order food from Uber Eats through Amazon.com and the Amazon Shopping app. They…
Tata Motors apps exposed four flaws that could let attackers impersonate owners
Tata Motors’ iRA 2.0 and iRA.ev mobile apps contain four security flaws that could let attackers steal credentials, impersonate car owners, and access vehicle services. India’s Computer Emergency Response Team rated the issues High severity in an advisory published on November 4, 2026. The warning covers versions already in use by petrol, diesel, and electric vehicle customers. Mobile app weaknesses in Tata Motors connected vehicles CERT-In says the affected releases…
Backdoored ARTEX Docker image exposed root access on 62 consoles
CERT-In says an AI-assisted threat actor it tracks as Crafty Falcon is targeting organizations in India’s Banking, Financial Services, and Insurance sector, while also hitting cryptocurrency exchanges and digital asset service providers. The activity is described as active and ongoing, and it uses publicly available AI-driven offensive security tools including ARTEX, PentAGI, Cairn, and CyberStrikeAI. CERT-In warns that the same campaign has used internet-facing applications, exposed APIs, privileged endpoints, cloud…