Search
4 stories found
Binarly found that the exploit used to break into nearly 1,000 Zyxel GS1900 switches still worked on firmware patched in June for CVE-2026-7273. Zyxel has now fixed the underlying flaw as CVE-2026-107441, and every GS1900 owner needs the new ".3" firmware.
Google has dismantled the XCPE botnet and banned Shenzhen device maker Videostrong, which it says deliberately preloaded a backdoor that turned set-top boxes into proxies and ad-fraud engines. The backdoor reinstalls itself after removal, so for affected boxes the practical fix is replacement.
NOIR, a new MIT-licensed desktop tool, scans an Android phone over USB debugging and links each app's sensitive permissions to the tracking and ad domains hard-coded in its code. It went from zero to about 1,800 GitHub stars in four days. It's a useful map of risk, but its findings show what apps can do, not proof of what they actually sent.
Google's Suncatcher prototype satellite returned its first AI response from a data-center-class TPU in orbit. It's a real hardware milestone, but it says very little yet about whether space data centers can compete on cost.
