OpenAI has reportedly lowered the target for its latest private fundraising round, a move that signals softer demand for one of the most closely watched companies in AI. Previously reported targets ranged as high as $30 billion at valuations around $1.4 trillion and $1.25 trillion; according to multiple reports, the company has now set a $20 billion goal with an initial close expected to be smaller. What changed in the…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two Ivanti Connect Secure (ICS) vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after evidence of active exploitation. Security researchers documented an exploit chain that combined multiple flaws to yield unauthenticated root-level code execution, and Ivanti has released updates to address the issues across affected releases. The flaws involved CVE-2026-111357 — A high-severity (CVSS 8.8) missing-authentication-for-a-critical-function vulnerability that could allow…
Blockchain analytics firm Chainalysis has disclosed a security incident after attackers used what the company described as "offensive agentic techniques" to gain unauthorized access to internal systems and tools. The company says some customer information—names, email addresses, user IDs, and organizational role labels—was accessed, but it has found no evidence that sensitive investigation data, authentication credentials, or session tokens were exposed. Chainalysis is still determining the full scope of accessed…
For two decades, Reddit allowed most of its content to be browsed without an account. That era is changing: co‑founder Steve Huffman announced the company will gradually shift toward a “logged‑in service,” limiting some content for visitors who aren’t signed in. The stated goals are straightforward—deliver better personalization for members and reduce unauthorized data harvesting that has become a persistent problem for the platform. Why Reddit is changing access Huffman…
Cursor confirmed that weaponized builds of the Claude Code extension briefly appeared in its Visual Studio Code extension marketplace on October 29, 2026. For roughly eleven hours those tampered packages attempted to harvest host details and install an SSH backdoor intended to provide persistent remote access. Cursor says the compromised builds were not produced by Anthropic and that distribution was limited to specific versions of the extension. Timeline and affected…
Chainalysis has confirmed a cyberattack that used what the company described as “offensive agentic techniques” to access internal systems and tools, exposing customer account information. The firm says the incident was detected in October and that it has notified affected customers while engaging outside cybersecurity experts to investigate and harden its platform. What Chainalysis says about the incident Chainalysis reported that an external attacker accessed user IDs, full names, email…
A recently disclosed vulnerability in TeamViewer can turn an ordinary remote support session into a serious risk for the technician on the other end. Tracked as CVE-2026-111585 and rated High with a CVSS score of 8.8, the flaw lets a malicious host crash the viewer application and, in some cases, execute code on the technician’s machine after a connection has been established. How the flaw works TeamViewer separates sessions into…
Hackers flooded WordPress sites with tens of thousands of requests targeting a Core remote code execution (RCE) weakness in the hours after a security patch was released. Wordfence’s threat intelligence recorded 60,471 blocked attempts in a 24‑hour window — a clear signal that attackers were actively probing the update process, even though the majority of those requests were firewall‑blocked and not confirmed compromises. What attackers were trying to exploit The…
Threat actors ramped up automated disruption in the third quarter of 2026, with Cloudflare reporting a dramatic rise in the frequency and variety of distributed denial-of-service (DDoS) attacks. The company mitigated 18.2 million network-layer (L3) DDoS attacks and handled 14.4 trillion HTTP DDoS requests during the quarter — a scale that underscores how persistent and rapidly evolving DDoS activity has become. Quarterly volume and pace Cloudflare’s numbers translate to roughly…
Apple has sent a new round of targeted threat notifications to selected iPhone users, warning they may have been the focus of sophisticated mercenary spyware campaigns. Announced in a notice shared by security researcher Costin Raiu on October 30, 2026, this latest wave is separate from the alerts Apple sent in August and is being delivered to users in 99 countries. Apple says it has now notified users in over…
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability—tracked as CVE-2026-98432—that can allow unauthenticated attackers to execute commands as root on servers running Multipath TCP (MPTCP) listeners. The flaw is a use-after-free in the kernel's IPv4 TCP networking code and has been scored 9.8/10 by the Linux kernel CVE team, although some vendors assess exploitation complexity differently. What the flaw is CVE-2026-98432 stems from a…
Applebee’s patched a security flaw after a researcher found a database password embedded inside the chain’s Android app, a lapse that allowed access to customers’ personal information. TechCrunch held the story until the issue was confirmed fixed. The exposed credential, discovered in the app’s source code, could be extracted by anyone with the app and used to access the company’s customer database. Discovery and verification Robert Wiggins, a U.K.-based cybersecurity…
Sign in to TECHNO CHAT / TECH BLOG
New here? Create an account
Already have an account? Sign in
40+ free network and other tools in one place. No signup. Click explore or visit https://technochat.in/tools