Short answer: A single Chinese-speaking hacker used largely autonomous AI agents running on an open-source platform called Cairn to break into the websites of more than 100 companies, including John Deere, SharkNinja and Cummins. The attacker typed fewer than 100 Chinese characters of instruction, and the agents attempted more than 1,200 breaches at an estimated…
The short answer: On the morning of Tuesday, October 20, 2026, a power failure inside Google Cloud’s London region (europe-west2) took down a swath of major UK online services. Revolut’s app and card payments went offline across Europe, Lloyds, Halifax, HSBC and Bank of Scotland reported service problems, and Royal Mail, DPD, Rightmove, Screwfix and…
Siemens has patched a high-severity flaw in Siemens Software Center after confirming that attackers were already exploiting it to deploy a remote access trojan. Tracked as CVE-2026-110936 with a CVSS v4 score of 8.4, the vulnerability is a DLL sideloading weakness that let attackers piggyback on a signed, trusted Siemens application to run their own…
The short answer: A high-severity flaw in the Redis RESTORE command (CVE-2026-25243, CVSS 7.7) is now being exploited in the wild, according to honeypot data published on October 20, 2026. If you run a self-managed Redis server older than version 8.6.3, upgrade to 8.6.3 immediately. If you cannot patch yet, block the RESTORE command with…
Apple has made its second October launch official. The company will hold a “Pro and Tell” event in Los Angeles on Wednesday, October 28 at 10 a.m. PT, and it is expected to unveil the first MacBook Pro with a touchscreen — 14- and 16-inch models with OLED displays, a Dynamic Island cutout, and significantly…
The short version: Tenstorrent, the Santa Clara AI chip startup led by semiconductor veteran Jim Keller, closed a $1.5 billion Series E funding round on October 19, 2026, at a $6.2 billion post-money valuation, more than doubling its value since late 2024. The round was led by Trace Capital and Innovation X, and the money…
Anthropic, the company behind the Claude AI assistant, is putting part of itself where its mission is. On Sunday, October 18, 2026, the company announced the Anthropic Public Benefit Fund, a new entity that will receive 5% of Anthropic’s shares to support projects that serve the public good. The pledge still needs stockholder approval, and…
The short answer On October 14, 2026, Progress Software published an advisory covering twelve high-severity vulnerabilities in MOVEit Transfer, its enterprise managed file transfer platform. The flaws carry CVSS scores ranging from 7.2 to 8.8 and span authentication bypass, injection, session handling, and insecure data storage. Every release before 2025.1.6 is affected, as is the…
The short answer CenterPoint Energy, the Houston-based utility that keeps the lights on for millions of homes and businesses, has confirmed a data breach affecting 1,062,060 Texas residents. In a filing with the Texas Attorney General, the company says the exposed data includes customer names, addresses, Social Security number information and driver’s license numbers. The…
The short answer: A 16-year-old flaw in Broadcom’s Wi-Fi software lets an attacker within wireless range run code on vulnerable routers without knowing your Wi-Fi password, without the WPS button being pressed, and without any action from you. Security researcher Quentin Kaiser disclosed the bug at the Hexacon conference in Paris on October 19, 2026….