PwC Faces Data-Extortion Claim: What We Know and What Organizations Should Do
The Everest ransomware group has publicly claimed to…
Updated 29 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
AWS Continuum: Turning Vulnerability Noise into Actionable, Context-Aware Fixes
Security teams are drowning in scanner output: thousands of findings a day, many irrelevant or impossible to exploit. AWS Continuum for code vulnerabilities aims to change that dynamic by validating which findings are actually exploitable in your environment, ranking issues by business impact, and proposing concrete remediations that integrate directly into developer workflows. It combines code analysis, environment context, and sandboxed reproduction to move teams from manual triage to prioritized,…
Accidental Leak Exposes Critical KSMBD Flaws in the Linux Kernel
Several unpatched Linux vulnerabilities were unintentionally posted to public mailing lists in October, exposing technical details before fixes reached production kernels. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), included two critical flaws—each rated CVSS 9.0—that affect the kernel’s built-in KSMBD SMB file server and could enable remote code execution depending on configuration. Other reports described local privilege-escalation and information-disclosure risks across different kernel subsystems and related software.…
Switch 2 Crack Opens a New Chapter for Homebrew—and a Fresh Round of Risks
A recent software-only partial jailbreak for the Switch 2 has stirred the console modding world: a researcher found a chain of vulnerabilities that gives userland access, enabling homebrew apps, file access, and limited modding without a hardware exploit. The discovery—built around the SmileBasic 4 interpreter and aided by clever tooling—demonstrates both the ingenuity of independent researchers and the fragile, ongoing arms race between platform vendors and the hacking community. This…
Global websites taken offline after critical PHP vulnerability forces emergency patches
Websites around the world went dark this week after security researchers uncovered a serious flaw in PHP, the programming language that underpins roughly 70% of the web. Governments and organisations ordered precautionary takedowns while a patch was released, but experts warned that a long tail of unmaintained sites could remain vulnerable for weeks or months — creating a persistent window for exploitation. What happened Researchers reported a critical vulnerability in…
Blaze and Backlash: The Starlink Sabotage That Echoed Across Europe
Last week Bulgaria confirmed a deliberate fire at a Starlink ground facility near Sofia, putting a spotlight on a pattern of attacks against satellite internet infrastructure now being treated as sabotage. Bulgarian authorities and opposition figures say multiple antennas were set ablaze on October 9, and investigators have detained two young men holding German passports in connection with the incident. The attack comes after a separate blaze at a Starlink…
Microsoft Ships Record 1,413 Patches — What Security Teams Need to Know
Microsoft’s October Patch Tuesday smashed previous records: the company released fixes for 1,413 vulnerabilities in a single update cycle, a figure that highlights both the scale of modern software risk and the growing speed of vulnerability discovery. The release spans a broad set of products and includes at least one flaw Microsoft says has been actively exploited in the wild — prompting urgent attention from defenders and federal agencies alike.…
BitLocker Under Scrutiny: How October 2026 Fixes Change Endpoint Defense
Microsoft’s October 2026 security updates patched three BitLocker-related vulnerabilities, and while none of the issues breaks BitLocker’s encryption itself, the flaws underline an important reality: encryption is a vital layer, but not a complete defense. These bugs — CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 — affect BitLocker implementation paths that an attacker can abuse after achieving local or physical access to a device. For security teams, the practical question is not panic,…
Fake PuTTY in Google Search: How Attackers Trick IT Admins with a Trojanized Installer
IT administrators hunting for a trusted SSH client on Google can be lured to a convincing fake download page that drops a trojanized installer. The malicious MSI appears to install the legitimate PuTTY executable so the program opens and looks normal, while a stealthy Node.js-based loader runs in the background and connects to attacker-controlled infrastructure. Because the visible application behaves as expected and the bundled PuTTY binary is signed, many…
Microsoft Patches Windows Shell Zero-Day (CVE-2026-96951) Exploited to Bypass Mark of the Web
Microsoft released an urgent patch in the October 2026 Patch Tuesday cycle to address an actively exploited Windows Shell zero-day that allows attackers to bypass Mark of the Web (MOTW) protections. Tracked as CVE-2026-96951 and rated Important with a CVSS score of 8.8, Microsoft confirmed exploitation had already occurred when the update shipped. The vendor’s “Exploitation Detected” assessment raises this from a theoretical risk to an immediate operational concern for…
Alleged Hidden Recorder in OpenAI Executive Room Prompts Arrest and Security Scrub
A startling insider-security incident at OpenAI has culminated in the arrest of an engineering lead accused of secretly planting an audio recorder inside an executive conference room. Authorities say the device was discovered in late September 2026, and the employee was taken into custody in October after investigators tied him to the device and to activity that suggests deliberate reconnaissance and obfuscation. The case has drawn attention for what it…
Cerebras CEO Predicts a Near Future Where Everyone Has a Personal AI at Home
We’re closer than you might think to a world where a personalized AI assistant lives in your home. At TechCrunch Disrupt 2026, Andrew Feldman, CEO and co-founder of Cerebras Systems, sketched out a practical vision: compact, appliance-like AI agents that run primarily on local devices but lean on the cloud when needed. For Feldman, the pieces are already falling into place — consumer-facing agents from major players and startups show…
Paramount and Warner Become Skydance: What the $111B Merger Means for Media
Paramount has completed its $111 billion merger with Warner Bros. Discovery, forming a new media giant called Skydance. The merger — finalized after a last-ditch legal effort to block the deal was denied — combines two of Hollywood’s largest studios and their streaming platforms, Paramount+ and HBO Max, along with broadcast and cable assets such as CBS, CNN, CBS Sports and TNT Sports. The consolidation marks one of the biggest…