Palo Alto Networks could pay $500 million for Clutch Security
Palo Alto Networks is in talks to acquire…
Updated 3 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
OpenAI releases GPT-6 Cyber for security research
OpenAI has made GPT-6 Cyber public as its most capable cybersecurity model. The model found previously unknown high-severity vulnerabilities in Firefox and the Linux kernel, and OpenAI said it outperformed GPT-6 Astra on most cybersecurity tasks. OpenAI’s newest cyber model OpenAI introduced GPT-5.6 Cyber in August with its Daybreak Red and Blue access tiers for security researchers. Since then, the company has released GPT-6 Astra as its flagship model and…
Bluetooth Core 7.0 adds HDT for faster wireless audio and data in 2027
Bluetooth Core 7.0 includes Bluetooth High Data Throughput, or HDT, an optional feature that the Bluetooth SIG has adopted and expects to arrive in 2027. The technology is aimed at improving wireless data-transfer performance, and it is described as a higher-level of wireless performance for compatible devices. Bluetooth data limits and the new HDT rate Bluetooth has long been used for headphones, speakers, keyboards, mice, smartphones, and other connected devices.…
Instagram expands Edits to Mac desktop for more complex projects
Instagram announced on Thursday that Edits is coming to Mac desktop, with a version built for more complex video-editing projects that benefit from a larger screen, mouse, and keyboard. The move puts the short-form video editor in closer competition with ByteDance’s CapCut, which Meta set out to challenge when it launched Edits last year. Desktop editing for larger projects The desktop release is aimed at projects that have outgrown a…
GhostMap flaw can trap Android phones in a persistent boot loop
A vulnerability that Bitdefender calls GhostMap can force Android devices into a continuous boot loop with a specially crafted app. The app needs no permissions and only has to be installed on the device. GhostMap and the malformed APK Romanian cybersecurity company Bitdefender traced the flaw while examining an Android banking trojan that kept crashing its emulators when it tried to read an application resource. The company showed that a…
Permitting reform bill could reshape U.S. energy buildout
The Bipartisan American Affordability and Jobs Act, or BAAJA, is set for a Senate vote on November 9 after the midterms. The 417-page bill could speed up approval of energy projects in the US, but it also raises the question of whether emissions would fall or rise. Permitting reform and federal review The federal permitting system is meant to protect the environment from industrial pollution tied to large projects such…
Amazon replaces Grubhub with Uber Eats for Prime members
Amazon has made Uber Eats the restaurant delivery partner for Prime members in the United States. The new arrangement ends Amazon’s existing deal with Grubhub, while Prime members who had already activated Grubhub+ can keep using that membership through December 31, 2027. Prime food orders move to Uber Eats Under the partnership announced Thursday, Prime members can order food from Uber Eats through Amazon.com and the Amazon Shopping app. They…
Tata Motors apps exposed four flaws that could let attackers impersonate owners
Tata Motors’ iRA 2.0 and iRA.ev mobile apps contain four security flaws that could let attackers steal credentials, impersonate car owners, and access vehicle services. India’s Computer Emergency Response Team rated the issues High severity in an advisory published on November 4, 2026. The warning covers versions already in use by petrol, diesel, and electric vehicle customers. Mobile app weaknesses in Tata Motors connected vehicles CERT-In says the affected releases…
Backdoored ARTEX Docker image exposed root access on 62 consoles
CERT-In says an AI-assisted threat actor it tracks as Crafty Falcon is targeting organizations in India’s Banking, Financial Services, and Insurance sector, while also hitting cryptocurrency exchanges and digital asset service providers. The activity is described as active and ongoing, and it uses publicly available AI-driven offensive security tools including ARTEX, PentAGI, Cairn, and CyberStrikeAI. CERT-In warns that the same campaign has used internet-facing applications, exposed APIs, privileged endpoints, cloud…
DigiCert says a migration exposed archived customer data
DigiCert confirmed a breach in an internal business system that held archived customer contact details and identity documents. The company said the exposed information covered only a small share of its archived data, and its public report did not give a total count of affected people, organizations, or documents. Unauthorised access to archived records The exposure involved names, business email addresses, phone numbers, and business addresses. A small minority of…
Data center backlash is set to intensify after Democrats’ November 3 wins
The November 3 midterm results gave Democrats full control of Congress, and the article says that could set up one of the most divided U.S. governments this decade with Republicans in the White House. It also says anger over data centers is becoming a political force, which could lead to new limits on where they are built and how much say local communities have. Election anger over AI facilities Tuesday’s…
DreamHost says File Manager breach exposed customer login details
DreamHost confirmed that attackers used its web-based File Manager to reach customer login details, and in a small number of cases they may also have viewed private mailbox contents. The hosting provider said the exposed data included FTP/SFTP usernames and passwords, plus some webmail credentials. It discovered the unauthorized access on October 23, 2026, and its investigation placed the possible exposure window back to approximately August. What DreamHost found DreamHost…
Apple flaw added to CISA’s exploited list after active abuse
The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, added a medium-severity Apple security flaw to its Known Exploited Vulnerabilities catalog on Wednesday after reports of active exploitation. The issue, CVE-2024-27834, affects multiple Apple operating systems and was already fixed by Apple in May 2024. Pointer authentication bypass in Apple software CVE-2024-27834 carries a CVSS score of 5.5 and is an improper authentication flaw. It could let an attacker with…