Search
18 stories found
NASA joined the Space Launch System core stage to its boosters at Kennedy. Artemis III's job is now rendezvous and docking practice with SpaceX and Blue Origin landers, not a Moon landing.
Synology says attackers are exploiting a DSM flaw it patched in December 2024 to plant C3RB3R ransomware, which also encrypts backups on the same device. Researchers disagree about the entry point, so the safe move is the latest build for your DSM branch plus a few quick checks.
Four AI providers say they will honor a shared robots.txt token, __usage_ai-training, that states a training preference once for all of them. It is not live everywhere yet, so here is what it does, what it doesn't, and what to put in your robots.txt today.
Attackers chained an authentication bypass with two newer Ivanti Connect Secure flaws to get root on VPN appliances, and CISA's first federal deadline has already passed. Here's which builds fix it and what to check if your box was exposed.
Anomaly's open-source Hex lets you hold a key, talk, and have text pasted into any app without sending audio to the cloud. Version 3.0 brings one app to Mac, Windows and Linux, and it was one of GitHub's fastest-climbing repos on November 2.
Attackers are using a flaw in Cisco's Secure Firewall remote-access SSL VPN to reboot firewalls without logging in. Only devices with secondary authentication on a tunnel group are exposed, so a two-minute config check tells you how urgent this is.
Microsoft Threat Intelligence has graded eight North Korean groups on how deeply they use AI. The findings — bulk-generated lures, AI-coded malware, fake recruiters and an open-source agentic attack framework — show where defenders should tighten up now.
Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.
OLED, IP67 water resistance and an A20 Pro chip make it a real upgrade. But the price is up $100, there's no 120Hz, and the best chip is locked to the 512GB model.
An open-source scanner compares your system against ~12,400 published indicators from 25 sources — without sending anything anywhere. What it can find, what it can't, and how to run it in five minutes.
Three small projects from this week's GitHub trending list that are clever, useful, or both — with what they do, how they work, and the catches.
Floorplan, a free MIT-licensed plugin, scans your repo locally and has your coding agent label every part, producing a browsable map with a security health check. It was one of GitHub's top trending repos on November 2.
Apple says developer testing in China starts November 4 and the public gets Apple Intelligence in December with iOS 27.3, with Alibaba's Qwen built into Siri, Writing Tools and Visual Intelligence. The AI Siri shown at WWDC 2026 isn't part of this phase, and neither are Macs or iPads.
Marvell agreed to buy optical-component maker Lumentum in an all-stock deal valued at about $115 billion, one of the largest tech acquisitions ever. The filing shows a $3.2 billion regulatory break fee and a close that could slip into late 2028.
Two critical flaws in PHP's default upload-progress feature allow unauthenticated remote code execution. Here are the fixed versions, a one-line check, and the config change that buys you time.
DeepSeek's Harness team published an MIT-licensed research prototype that watches a GitHub repo, takes authorized requests and answers with pull requests. It passed 11,000 stars within days — but DeepSeek itself says it is not production-ready and runs with full user access.
Google's Suncatcher prototype satellite returned its first AI response from a data-center-class TPU in orbit. It's a real hardware milestone, but it says very little yet about whether space data centers can compete on cost.
CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.
