News
-
Microsoft Patches a Record 1,400-Plus Flaws in a Single Month
Microsoft's October update batch eclipses even September's record of nearly a thousand fixes. The company credits large language models for the flood of discoveries.
-
Nix and Lix patch local root privilege-escalation flaws
The Nix and Lix projects have jointly disclosed a set of vulnerabilities that allow escalation to root on systems running the Nix or Lix daemons. Fixed releases are already available.
-
Ivanti warns of actively exploited Connect Secure zero-day
Ivanti is urging customers to patch immediately: an actively exploited flaw in its Connect Secure remote access gateway lets attackers bypass authentication and run commands on affected appliances.
-
Google finally ships Gemini 4 Argon
After months of lagging in the frontier AI race, Google has launched Gemini 4 Argon, claiming the model can go toe-to-toe with the industry's best.
-
Tesla's 'Security Protocols' Thwarted a DHS Tracking Device
A federal warrant reviewed by 404 Media reveals that an electric car's built-in defenses kept a Homeland Security agent from planting a tracker on a suspect's vehicle.
-
Asterinas 0.19.0: Rust Kernel Gains Graphics and Arm Support
Asterinas, a project building a new operating-system kernel in Rust, has released version 0.19.0, adding a graphics subsystem able to run X.org and initial 64-bit Arm support.
-
SAP Patches Maximum-Severity OAuth2 SSRF Flaw in Python Cloud SDK
SAP's October security release fixes 20 vulnerabilities, including a maximum-severity bug in its Python SDK that lets attackers steal application credentials.
-
Two Critical MarkLogic Flaws Let Delegated Managers Seize Admin Control
Progress Software has disclosed 31 flaws in its MarkLogic Server database: an account with only limited management rights could gain persistent administrator control. Fixes have been available since September 10.
-
Three webOS flaws chain into local-network root takeover of LG TVs
A chain of three bugs gives an attacker on the same local network root access to certain LG smart TVs with no PIN and no action from the owner. LG has shipped a fix.
-
Character.AI Files for Bankruptcy, Sells Assets to Disney
One of the first breakout startups of the generative AI boom has filed for Chapter 11 bankruptcy. Disney is the lead bidder for its assets.
-
Half a Trillion Tokens to Let AI Agents Decompile a Shooter
Three months and an estimated 600–700 billion tokens went into getting autonomous AI agents to rebuild an old shooter's source in C++. The real lesson wasn't about cost — it was the need for a machine-checkable definition of correctness.
-
Freeze the Controller, Defrost the Food: Flaws in Danfoss Refrigeration Controllers
Claroty Team82 researchers found a hidden login mechanism, a command injection, and a way to knock out the web panel in Danfoss AK-SM 800A controllers. Thousands of devices are reachable straight from the internet.
-
Budget Android Phones Arrive With Malware Already Built Into the Firmware
Bitdefender has uncovered Midnight Mimosa, malware baked into the firmware of cheap Android phones that turns them into residential-proxy nodes and ad-fraud tools.
-
China Overtakes the U.S. in R&D Spending for the First Time
According to figures tied to 2024, China has for the first time become the world's largest spender on research and development, edging out the United States.
-
AI Models Can Provably Hide Arbitrary Capabilities
Researchers show how an encrypted circuit can be buried inside a network's weights, firing only on a secret trigger — and staying invisible to every standard audit.
-
Phreak.ing: an Anonymous Phone Switch That Lives in Your Browser
The phreak.ing project revives the spirit of phone phreaking: a logless virtual PBX with star codes, voicemail and conference rooms — all running in the browser.
-
FreeType 2.15 Released With Apple HVF Driver and ISO Open Font Format Edition 5
A new release of the widely used font rendering library FreeType is out, adding an Apple HVF driver and support for the fifth edition of the ISO Open Font Format.
-
ESP32 As a Wireless Co-processor: Turning a Cheap Espressif Module Into a Linux Wi-Fi Card
The esp-hosted project lets you hang a cheap ESP32 off a single-board computer over SDIO or SPI and get Wi-Fi and Bluetooth backed by partly open firmware — instead of an all-blob proprietary card.
-
Epic Games reportedly pivots to an "AI first" game development model
According to a report, the studio is betting on artificial intelligence for a delayed Marvel/Star Wars shooter built as part of a collaboration with Disney.
-
Intel Unveils GPU D Series, Formerly Known as Crescent Island
Intel has announced its GPU D Series — enterprise-focused accelerators optimized for inference workloads. The products were previously known under the Crescent Island codename.
- More