Aggregated from vendor advisories, security research, and industry publications.
A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications. He was arrested by
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's reco…
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI. The post Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Comp…
When continuous integration gits you down, there's always an AI-tuned monorepo
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record…
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
Article URL: https://www.newyorker.com/magazine/2026/10/19/the-first-social-network Comments URL: https://news.ycombinator.com/item?id=50079701 Points: 164 # Comments: 61
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF f…
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capab…
Nick Andersen wants to work with private industry on security, but the Trump admin has taken an axe to such efforts.
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Geordie's tests recorded 155 activity traces and multiple subagents after dot was given read-only permissions
Today on Tech Bytes we explore frontier virtual patching with sponsor Palo Alto Networks. Palo Alto Networks recently announced frontier virtual patching as part of PAN-OS 12.2. We…
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-da…
Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. …
The company unites resources from disparate macOS devices
Our October news roundup is a boiling cauldron of consternation. The FBI and the Pentagon suffered breaches, serious exploits are targeting network gear, and researchers discover a…
Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no longer receive monthly security and non-security pr…
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attac…
Collaboration events have rarely been must-attend shows for network engineers. Meetings, contact centers, and room systems ran on the network, and the network team kept latency low…
Sometimes IT is forced to spend money to do nothing. It might be the cost of evaluating the products and services you don’t end up deploying. Or it’s the cost of scrambling to disa…
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, accordin…
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. [...]
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on Septembe…
Take a Network Break! We startup with follow-up on global tech news coverage and pronunciations, then pivot to Red Alerts about Dell Container Storage and SonicWall. This week’s ne…
Microsoft has released the Patch Tuesday Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs, and ad…
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti ha…
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw a…
Anthropic took more than two months to alert cops