Salesforce has agreed to acquire customer engagement platform Braze in one of the largest marketing software deals of the year. The definitive agreement, announced on October 20, 2026, values Braze at approximately $5.66 billion in enterprise value, with Salesforce paying $47.50 in cash for each Braze Class A share. The short answer: Salesforce will pay…
On October 17, 2026, a security researcher reported that the private keys of eight intermediate certificate authority certificates operated by India’s eMudhra had effectively been compromised. The keys were so poorly generated that anyone could recover them in seconds, and whoever holds them can issue browser-trusted HTTPS certificates for any website on the internet. Within…
Plex2Shell is the name researchers have given to a chain of four vulnerabilities in Plex Media Server that, combined, let an attacker run code on a server without logging in. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has now added all four flaws to its Known Exploited Vulnerabilities (KEV) catalog and ordered federal agencies…
The short version: A former OpenAI engineer, Abdulrahman Alfozan, 35, is in federal custody after allegedly planting a custom-built recording device in an executive conference room at OpenAI. On October 19, a San Francisco judge denied his request for release, ruling he is a flight risk. Prosecutors say he had frequent WhatsApp contact with an…
PHP is about to push an emergency security update that could affect a huge slice of the internet. At 14:00 UTC on Wednesday, October 21, 2026, the PHP security team will ship an out-of-cycle release fixing two critical vulnerabilities, both rated 9.2 out of 10 under CVSS v4.0. Security researchers who studied the flaws under…
Short answer: A single Chinese-speaking hacker used largely autonomous AI agents running on an open-source platform called Cairn to break into the websites of more than 100 companies, including John Deere, SharkNinja and Cummins. The attacker typed fewer than 100 Chinese characters of instruction, and the agents attempted more than 1,200 breaches at an estimated…
The short answer: On the morning of Tuesday, October 20, 2026, a power failure inside Google Cloud’s London region (europe-west2) took down a swath of major UK online services. Revolut’s app and card payments went offline across Europe, Lloyds, Halifax, HSBC and Bank of Scotland reported service problems, and Royal Mail, DPD, Rightmove, Screwfix and…
Siemens has patched a high-severity flaw in Siemens Software Center after confirming that attackers were already exploiting it to deploy a remote access trojan. Tracked as CVE-2026-110936 with a CVSS v4 score of 8.4, the vulnerability is a DLL sideloading weakness that let attackers piggyback on a signed, trusted Siemens application to run their own…
The short answer: A high-severity flaw in the Redis RESTORE command (CVE-2026-25243, CVSS 7.7) is now being exploited in the wild, according to honeypot data published on October 20, 2026. If you run a self-managed Redis server older than version 8.6.3, upgrade to 8.6.3 immediately. If you cannot patch yet, block the RESTORE command with…
Apple has made its second October launch official. The company will hold a “Pro and Tell” event in Los Angeles on Wednesday, October 28 at 10 a.m. PT, and it is expected to unveil the first MacBook Pro with a touchscreen — 14- and 16-inch models with OLED displays, a Dynamic Island cutout, and significantly…