Search
19 stories found
The first reviews of Microsoft's pocket-sized Xbox controller are positive, with caveats for big hands and long sessions. A day after launch, Xbox also opened a US-only preview that lets it connect to Xbox Cloud Gaming directly over Wi-Fi.
Apple's WebKit team says Safari 27.3 beta can repaint light-only websites dark when your device is in dark mode. Here's what it changes, where the setting lives, and the one line site owners can add to keep their design as authored.
Google has dismantled the XCPE botnet and banned Shenzhen device maker Videostrong, which it says deliberately preloaded a backdoor that turned set-top boxes into proxies and ad-fraud engines. The backdoor reinstalls itself after removal, so for affected boxes the practical fix is replacement.
Four AI providers say they will honor a shared robots.txt token, __usage_ai-training, that states a training preference once for all of them. It is not live everywhere yet, so here is what it does, what it doesn't, and what to put in your robots.txt today.
According to the Financial Times, Nvidia has verbally told cloud providers that use its AI chips to sell at least 51% of new capacity to non-Chinese customers. It targets the overseas rented compute Chinese AI labs rely on, and Southeast Asian clouds say it will be hard to meet.
agent-desktop, an Apache-2.0 Rust CLI from Vercel Labs, gives coding agents structured, ref-based control of native desktop apps without a vision model. It added about 2,300 stars in a day and was GitHub's top trending repo on November 3.
Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.
Anthropic has put "message threads" into public beta on the Claude Messages API, so long agent loops send only the newest turn instead of the full history. It is pitched as a latency fix, not a cost cut — pricing is unchanged — and it comes with a five-minute expiry and a replay path you have to build.
A plugin that watches what your agent does, compresses it into searchable memories in a local SQLite database, and feeds the relevant bits back into your next session. How it works and what to watch out for.
SonicWall disclosed two flaws in its Global Management System on November 3, including CVE-2026-109593, an unauthenticated file-disclosure bug rated CVSS 9.1. GMS reached end of support on September 30, and SonicWall says no fix will be released, so the only remedy is to isolate it and move to NSM.
A misconfigured DNS resolver, chained zero-days and a covert channel built from CPU cache timing — OpenAI's own red team found the paths. Here's what happened and why it matters beyond OpenAI.
Attackers chained an authentication bypass with two newer Ivanti Connect Secure flaws to get root on VPN appliances, and CISA's first federal deadline has already passed. Here's which builds fix it and what to check if your box was exposed.
The FBI says North Korea's TraderTraitor group stole more than $6 billion from Binance's hot wallets on October 29, likely the biggest crypto theft on record. Binance says it is covering the loss and has restarted withdrawals, while fake 'compensation' offers circulate.
Synology says attackers are exploiting a DSM flaw it patched in December 2024 to plant C3RB3R ransomware, which also encrypts backups on the same device. Researchers disagree about the entry point, so the safe move is the latest build for your DSM branch plus a few quick checks.
The 22-year-old gamma-ray burst hunter was shut down for good on October 20 and is expected to re-enter the atmosphere around November 3–4, after a commercial boost mission failed. NASA puts the risk to any person at about 1 in 2,100.
The MIT-licensed AiSOC ingests security telemetry, runs thousands of detection rules, has LLM agents investigate alerts and keeps a human in charge of any response. It runs on a laptop-class Docker setup with a small local model — here's what it does, what it needs and where it falls short.
CISA added CVE-2026-119977, a race condition in WordPress core's own updater, to its Known Exploited Vulnerabilities catalog on November 3. It affects WordPress 4.7 through 7.1.3 and can give an unauthenticated attacker code execution during a core update, so every self-hosted site should confirm it is on 7.1.4 or its branch's latest release.
MIT CSAIL researchers say OpenAI's GPT-6 Astra can identify what small networks do from their raw weights and edit a Qwen model to fix its math. The headline result, a jump from 7.9% to 48.1% on MATH-500, came from Python tooling and 50 forward passes, not from reading raw weights. Here's what each setup showed.
Local ballot measures on data centers ran almost one-sided in Tuesday's US midterms. Bans passed and project rezonings failed, often by margins of three or four to one. It's the clearest sign yet that power-hungry AI campuses now face a local veto, and more votes are scheduled for December.
