Security · High impact
Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password. The vulnerability exists in the interaction between OpenSSH, the code library implementing…
Biz & IT - Ars Technica · Dan Goodin · · 7 sources · 💬 193
Security · High impact
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek .
SecurityWeek · Eduard Kovacs · · 3 sources · 💬 353
A screenshot of Salon’s website. | Screenshot by Jay Peters / The Verge Salon launched 31 years ago as one of the first online-only news magazine outlets, and it announced today in an unsigned post that it's ceasing publication. The company said that the "business realities of…
Tech | The Verge · Jay Peters · · 2 sources · 💬 106
Security · High impact
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data…
The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources
Security · High impact
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on…
The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources
OpenAI on Thursday launched GPT-6 Cyber , the latest release in its series of cybersecurity-focused models. The company ranks GPT-6 Cyber’s ability to identify vulnerabilities and develop exploits as ‘critical,’ up from ‘high’ for its predecessor. Just like with previous Cyber…
The New Stack · Frederic Lardinois · · 3 sources · 💬 6
Release
OpenBao has released version 2.7, adding read scaling for PostgreSQL-backed deployments, support for external hardware security module (HSM) and key management service (KMS) keys, and post-quantum cryptographic algorithms. The release also introduces control groups for human…
InfoQ · Matt Saunders ·
Release
GitHub has made workflow dependency lockfiles for GitHub Actions generally available on October 28, 2026, two weeks after the feature entered public preview. Workflows can maintain clear tag and branch references. By Claudio Masolo
InfoQ · Claudio Masolo ·
Security · High impact
The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks.
The Record from Recorded Future News · · 3 sources
Security · High impact
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without…
The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources
Security · High impact
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on SecurityWeek .
SecurityWeek · Ionut Arghire · · 3 sources
Release
Gemini Omni 1.2 Flash brings native 15-second video generation and editing, stronger consistency, and 30% lower pricing.
AI · Anish Nangia · · 2 sources · 💬 1
Release
Hugging Face - Blog · · 2 sources
With Personal Finance in Claude, users can connect their bank and card accounts through Plaid and ask questions about their finances.
AI News & Artificial Intelligence | TechCrunch · Aisha Malik · · 2 sources
Airbnb plans to roll out an AI agent in the first half of 2027 that will help users plan and book travel, the company said in its Q3 2026 earnings shareholder letter released today . "Today's AI agents are good at simple, routine tasks, like making a restaurant reservation or…
Tech | The Verge · Jay Peters · · 2 sources
Letterboxd’s homepage. The New York Times Company is in talks"exclusive negotations" to acquire Letterboxd, the social network for film lovers, for around $330 million, The New York Times reports . The Times Company, Sony Pictures Entertainment, and A24 were all recently rumored…
Tech | The Verge · Jay Peters · · 2 sources
TikTok has released a standalone app for TikTok Shop in a few countries, as spotted by social media consultant Matt Navarra . According to its App Store listing , the TikTok Shop app offers: - Personalized picks inspired by your interests - LIVE streams & short videos to see…
Tech | The Verge · Jay Peters · · 2 sources
On 12 November 2026, PostgreSQL 14 gets its final release. After that date, no more fixes, not even for a security flaw. One week later, PostgreSQL 19 is due to ship as a final release. Prepare your upgrade before support ends. Before you pick 18 or 19, ask yourself a simple…
DEV Community: backend · Jules Robineau ·
Outage
In August, GitHub went down for almost eight hours. It started when one part of its system got overloaded. Then everything that couldn’t connect kept trying again, all at the same moment. All that extra traffic made it even harder for GitHub to recover. In one case, the retries…
DEV Community: backend · The Unmeshed Team ·
Release
Welcome to an overview of the most important fixes and usability improvements in IntelliJ IDEA 2026.3. IntelliJ IDEA 2026.3 ships over 1,000 bug fixes and over 300 performance fixes . We focused on performance, Java and Kotlin code intelligence, and the core workflows that matter…
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog · Dmitriy Smirnov ·
The legacy Fitbit Web API and its OAuth endpoints were scheduled to be turned off on 2 November 2026. Apps that still call it stop receiving Fitbit and Pixel Watch data. The replacement is the Google Health API v4 , and there was no Python client for it, so I wrote one…
DEV Community: python · Muhammet Savaş ·
Update, October 31, 2026: This month gave the post a real-world example. At least nine AI developer platforms disclosed breaches in October, and the attackers were specifically hunting stored environment variables, especially AI API keys, which they then validated and resold. One…
DEV Community: python · Lycore Development ·