CISA adds exploited Ivanti Connect Secure flaws to its KEV catalogNew
Agencies must fix CVE-2026-111357 by November 2 and CVE-2026-118527 by November 13; UTA0576 chained them with CVE-2026-104935 for root access.
84
Country
United States
- Mentions · 7d278
- Mentions · 30d1.1K
- All mentions2.3K
- First seenAug 11, 2026
- Last mentioned1h ago
Timeline
2,343 articles · newest firstUS Copyright Office denies copyright to AI-generated worksNew
Copyright Office claims only human authorship qualifies for copyright, making AI slop uncopyrightable.
20
Retired professor arrested for blocking a Philadelphia delivery robot
Carolyn Marvin, 78, says she will keep delaying Uber Eats sidewalk robots for about 15 minutes as protest.
6
Syrian Electronic Army hacker sentenced to 42 months in US
Ahmad Umar Agha, known as Th3Pr0, was sentenced Thursday after more than a decade as a fugitive; accomplice Firas Dardar remains at large.
48
Microsoft offers voluntary severance to about a quarter of staff
The offer covers U.S., Canada, India, and UK roles at VP level or below, while data centers, sales, cybersecurity, and quantum stay out.
45
Attackers chain PHP2Shell flaws to root Palo Alto PAN-OS firewalls
Hunt.io says 24 perimeter firewalls and one internal management server were compromised, including a US government-affiliated environment.
84
Cloudflare reports 18.2 million L3 DDoS attacks in Q3
That is about 8,226 network-layer attacks an hour, up from 13.2 million in Q2, plus 14.4 trillion HTTP DDoS requests.
52
Google unveils Gemini 4 Carbon for flaw finding, exploitation tests, and patches
Selected defenders get first access; Google cites 88.2% on SEC-bench Pro and has not set a general-availability date.
76
Nvidia weighs guaranteeing Nscale’s West Virginia AI data center debt
A residual-value guarantee would cover Nscale construction debt for a campus whose first building has a $44.6 billion Anthropic contract.
55
Intel shares fall about 28%, cutting $12B from US stake
Intel guided fourth-quarter revenue of $15 billion to $16 billion, below about $17 billion expected, and a 37% margin.
58
Applebee’s Android app held a database password exposing customer data
Dine Brands says it found no unauthorized access, but would not say whether database logs exist.
64
United CEO says Boom’s Overture will miss its 2029 debut
Boom also lost a $1.25 billion Crusoe order for 29 data-center gas turbines, its CEO said.
24
Vapor Panda used agentic AI tool ARTEX against about 140 targets
CrowdStrike says the China-linked campaign has hit more than 200 organizations in at least 14 countries since October 17.
84
Friday squid blogging notes bigfin squid off California
The September 2 sighting is described as the first live Magnapinna bigfin squid recorded in the northeastern Pacific.
2
DOJ seeks privacy ombudsman for a possible Character.AI chat sale
A bankruptcy filing says Character.AI has 12 million monthly users and an ambiguous policy that may allow chat histories to be sold.
60
CISA adds exploited GitLab and Cisco firewall flaws to KEV
Federal agencies must fix unauthenticated GitLab code execution and a Cisco firewall reload bug by November 1, 2026.
84
Operation Blackout targeted West African scam networks
The Justice Department says the effort led to dozens of arrests and removal of more than 3.7 million fake accounts.
52
n0n extortion operator exposed AI-aided attack files on open server
SOCRadar says every examined break-in used weak or stolen credentials, not a software vulnerability.
74
Revolve says attackers stole saved customer payment card data
An SEC filing says automated access yielded names, contacts, card numbers and expiration dates, including 127,200 people in Texas.
62
CrowdStrike: Vapor Panda used ARTEX against over 200 organizations
From October 17 the China-linked group hit ministries, telecoms, and U.S. defense-related targets; post-exploitation is confirmed at nine.
86
DOJ charges five in AI-aided ghost-student loan fraud
Officials tie more than $32 million in confirmed loss to the charged subjects and seized over $750,000 in cryptocurrency.
64
GM agrees to $220 million multistate settlement over driver data
Investigators say OnStar’s Smart Driver data reached insurers through brokers, and the OnStar app misled more than 370,000 drivers.
55
U.S. oil industry earned over $130B during Iran war
A New York Times business story posted on Hacker News is not a cybersecurity or AI event.
3
US tech shares fall as AI spending worries hit earnings
Intel fell as much as 30% and Reddit 26% after weaker outlooks, while Alphabet had already lost more than $500 billion.
38
California election offices confirm DOJ grand jury subpoenas
Los Angeles County received multiple subpoenas last week; voting-rights groups sued Friday to block the federal effort.
48
Florida financial aid breach exposed data of 4.9 million people
The state learned of the breach on October 19, took the site down, and says aid payments are unaffected.
78
Schneier notes bloatware found in a cheap car head unit
A Civic owner reportedly used Claude to inspect an Amazon head unit and found a call recorder, Baidu location services, and an always-on WebView assistant.
22
Defense contractor pleads guilty in North Korea remote-job scheme
John Allen Kurrle Jr. faces up to 20 years; sentencing is set for January 28, 2027, with restitution of about $7,000.
48
Roundup: UEFI boot flaw, Anthropic access dispute, Cloudflare AI leak
The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.
62
Syrian hacker Ahmad Umar Agha sentenced to 42 months in US
Prosecutors say he hit about 47 targets from 2011 to 2024, including a 2013 fake AP tweet that briefly erased $136 billion.
48
Syrian Electronic Army hacker sentenced to 42 months
Ahmad Umar Agha, known as Th3Pr0, was jailed Thursday; co-defendant Firas Dardar remains a fugitive.
48
FBI seizes virtualine.net, domain of bulletproof host Virtualine
TRM Labs ties the host to ransomware and StealC payments and says the seizure may leave infrastructure online.
58
Syrian regime hacker sentenced to 42 months in US prison
Ahmad Umar Agha, also known as Th3Pr0, was sentenced after a conspiracy that ran from August 2011 until January 2024.
55
Attackers exploit max-severity GitLab flaw CVE-2026-97229
The integer overflow allows unauthenticated code execution through a crafted CI/CD regular expression; fixes are 19.4.2, 19.3.5, and 19.2.8.
84
Runware plans factory production of modular AI data center pods
The CEO targets 30 megawatts a day by 2028 and says customers have committed interest worth $1 billion.
34
Suspected Chinese actor roots PAN-OS firewalls via chained PHP2Shell
The chain rooted 25 servers in four countries and reached a US government Active Directory domain, Unit 42 says.
86
Hackers publish work details on more than 41,000 DHS employees
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.
76
Polymarket confirms third-party compromise after trading outage
Blockchain firms allege more than $2.1 million was siphoned; Hudson Rock names DebugBear, which Polymarket has not confirmed.
68
Maine data center fight shapes Collins Senate race and AI policy
A vetoed statewide moratorium and a poll showing 76 percent local opposition frame the contest.
46
Palo Alto confirms PHP2Shell attacks on exposed PAN-OS management
Unit 42 verified tools that pair the PHP flaws with kernel bug CVE-2026-46300 for root; about 0.02% of the installed base was exposed.
86
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-8877278%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-4630016%7.8Shared-frag marker loss in Linux kernel skb coalescing (LPE)
- CVE-2026-8877911%8.7Unauthenticated denial of service in NetScaler ADC and Gateway
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-8207863%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157885%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-1042865%9.8Unauthenticated path traversal file write in Fortinet FortiMail
Appears with
- CISAorganization · 314
- FBIorganization · 287
- OpenAIvendor · 237
- OpenAIorganization · 236
- Microsoftvendor · 224
- Googlevendor · 201
- Anthropicorganization · 185
- Anthropicvendor · 169
- Googleorganization · 103
- Metavendor · 98
- ShinyHuntersthreat actor · 90
- U.S. Department of Justiceorganization · 84
- Metaorganization · 77
- Microsoftorganization · 76
- Claudeai model · 73
- ChatGPTproduct · 68
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.