GitLab has patched a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970, that lets an authenticated attacker escape the prompt template sandbox and run arbitrary commands on self-hosted gateway servers. Rated 9.9 out of 10 on the CVSS scale, it affects only organizations that run their own AI Gateway infrastructure. If your team hosts…
The Dutch Institute for Vulnerability Disclosure was breached on September 21 by an autonomous AI agent that chained two previously unknown Zammad vulnerabilities together. The agent went from an unauthenticated connection to full root access on the server in seconds, with no human operator guiding it. One of those flaws still has no patch for…
Meta Muse for Small Business is a set of business skills and connectors built into the existing Muse personal AI agent app, announced by Meta on September 29, 2026. It is not a separate app. Once you connect your business tools inside Muse, you can give it a goal, like running your business or finding…
Cloudflare Clef is a new pair of open-weight AI models announced on October 1, 2026, built for one specific job: making decisions. Unlike ChatGPT or Gemini, Clef never writes paragraphs. You feed it some data and a few typed questions, and it answers with probabilities: how likely the answer is yes, which option from your…
On Friday, October 2, 2026, Amazon Web Services CEO Matt Garman announced a major new initiative aimed at the communities that host Amazon’s sprawling data centers. The company is committing more than $1 billion over the next five years to U.S. towns and counties where it builds and operates data centers, through a new program…
Reddit RSS feeds shut down on November 13, 2026. The company announced on October 1, 2026 that it will switch off RSS support entirely, calling the format “a common surface for large-scale scraping and automated abuse.” Moderators learned about the change a day earlier, on September 30, and regular RSS readers will not get a…
The Pentagon is now notifying more than 3 million people that their personal information was stolen in a breach of its central personnel records system. If you are a current or former service member, a military family member, or a civilian Defense Department employee, a letter from the Defense Manpower Data Center (DMDC) may already…
Apple is having its biggest smart home moment in years. According to Bloomberg reporting cited by MacRumors on October 1, 2026, the company plans to introduce three new smart home products on Tuesday, October 13: a brand-new smart home hub with a square 6-inch display, an updated HomePod mini, and a new Apple TV 4K….
Short answer: NVIDIA RTX Spark is the company’s first processor built specifically for Windows PCs, and it starts shipping in October 2026. It combines an Arm-based Grace CPU with a Blackwell RTX GPU in one chip, with up to 20 CPU cores, 6,144 GPU cores, 128 GB of unified memory, and up to 1 petaflop…
The short version: On October 1, 2026, Fortinet disclosed CVE-2026-104286, a critical zero-day in FortiMail with a CVSS score of 9.8 that lets unauthenticated attackers write arbitrary files on the appliance through crafted web requests. Fortinet confirmed it is already being exploited in the wild, CISA added it to its Known Exploited Vulnerabilities catalog the…