News
-
Claude cracks the origin of the ECDSA curves: it was just timestamps
In under half an hour, an internal Anthropic model solved a mystery that had vexed cryptographers for a quarter-century: the enigmatic "seeds" behind NIST's standard curves turned out to be the output of a weak 1990s random-number generator seeded from the Unix clock.
-
GNOME OS Preview: a step toward a stable release
The GNOME project has unveiled GNOME OS Preview — a transitional stage between nightly builds and a future stable release of the distribution.
-
Critical BlockStrap flaw threatens Magento servers
Researchers warn that the maximum-severity vulnerability CVE-2026-103849 in Magento and Adobe Commerce could let attackers run arbitrary PHP code on store servers.
-
A 37-Year-Old Bug Surfaces: Rooting OpenBSD via Code Older Than BSD Itself
Researchers at Calif gained root on OpenBSD with KARL, SMAP and SMEP enabled by overflowing a counter that had stayed 16-bit since the original BSD sources.
-
OpenAI Model Spent a Stranger's Test ETH to Deploy a Contract
OpenAI has disclosed seven new cases of misaligned model behavior. In one, a research model with no funds derived private keys from public seed phrases and paid with someone else's test coins.
-
AOMEI Backupper Update Servers Tampered With in 5–10 Minute Windows to Push a Backdoor
Between May and July 2026 attackers repeatedly swapped the update files served from AOMEI's own servers, so the Windows backup program only downloaded a backdoor during those brief intervals.
-
Meta's new terms may let it train AI on news sites for free
Meta's revised commercial terms, taking effect on October 30th, appear to let the company crawl websites "associated" with business accounts, including news publishers, and use their content to train its AI.
-
Burger King Japan Breach Exposes 11 Million Customer Records
Burger King's Japanese arm has disclosed a breach of a server holding data on users of its official app, affecting more than 11 million records.
-
AI Finishes Off AVX-512 Support in Mesa's LLVMpipe Software Driver
Red Hat engineer David Airlie had put off 512-bit vector support in LLVMpipe for years — AI models helped wrap it up. Trouble is, nobody has the hardware to test it yet.
-
Goodbye to the leap second: global timekeeping rewrites the rules
The International Bureau of Weights and Measures has voted to abolish the leap second. The move was brought forward over fears that, for the first time, time would have to be subtracted rather than added.
-
Backdooring Open-Weight AI Models: the Hidden Cost of "Uncensored" Builds
Any model with edited weights can carry a hidden backdoor. Researchers built a poisoned model for next to nothing and made it steal a project's credentials straight through the Codex CLI.
-
CERT-In: AI Agents Reached Live Systems of Indian Firms During Testing
While being tested, autonomous AI agents went beyond their assigned tasks, broke into organizations' live systems and read personal and confidential data — and nobody noticed.
-
China-Linked Hackers Used BeyondTrust Zero-Day to Seize Remote Support Servers
The espionage group Armory Castle exploited a critical flaw in BeyondTrust Remote Support as a zero-day back in late August — a month and a half before a fix shipped.
-
BAE Systems breach knocks out US bankruptcy court notice system
The Administrative Office of the US Courts says a cyberattack on contractor BAE Systems has taken down the notice system relied on by federal bankruptcy courts.
-
The Tesla Roadster flew, drove upside down, and hit 60mph in under a second
At an event in Waco, Texas, Tesla showed off its next-gen Roadster: the supercar clung to a vertical wall, briefly flew, and sprinted to 60mph in 0.81 seconds.
-
Epic's new Linux anti-cheat looks beatable with a $20 adapter
Matthew Garrett took apart the upcoming second version of Easy Anti-Cheat for Linux and showed that its TPM-and-attestation defences fall to a few simple tricks for anyone with hardware access.
-
NVIDIA and IIT Madras Release 2.8 Trillion Tokens for Indian Languages
The Nemotron-pretraining-Indic-v1 corpus spans 22 of India's languages and ships with an open, GPU-accelerated data generation pipeline.
-
Steam's Linux Client Finally Goes 64-bit
Valve has released a Steam client beta for Linux in which the main client binary is now a 64-bit application and runs inside the Steam Runtime container.
-
ChatGPT's Chrome extension can now read your open tabs
OpenAI has shut down its Atlas browser, but its Chrome extension now gains the ability to work with tabs you already have open and control them from the sidebar.
-
Targeted ads used to deliver 0-click exploits and install mercenary spyware
Researchers report what appears to be the first confirmed case of commercial spyware delivered through targeted advertising.
- More