The short version: On October 22, 2026, Arista disclosed an actively exploited SQL injection flaw in its VeloCloud Orchestrator (VCO), the central management console for VeloCloud SD-WAN networks. Tracked as CVE-2026-114625 and rated 9.9 out of 10 in severity, it lets any logged-in user, even one with the lowest read-only role, escalate to full operator…
On October 21, 2026, a judge in New Mexico ordered Meta Platforms to pay the state $25 billion after a jury found the company had misled Facebook users about the privacy of their data. The case grew out of the Cambridge Analytica scandal, and the penalty is one of the largest ever imposed on a…
Node.js has released security updates for its 26.x, 24.x and 22.x lines, fixing ten vulnerabilities across DNS, TLS, HTTP, crypto and the Brotli decoder. The patched versions are 26.12.1, 24.22.1 and 22.23.4, released Wednesday, October 21, 2026. Four of the ten flaws are rated high severity, and the most serious — a Brotli decoder flaw…
On October 21, 2026, Jensen Huang walked onto the stage at GTC Berlin with a clear message for every company rushing to deploy AI agents: capability and safety have to advance together. The centerpiece of his keynote was the NVIDIA OpenShell Reference Architecture, a full-stack hardware and software design for building, containing, observing, and enforcing…
Quick answer: On October 20, 2026, Google launched a dedicated business landing page inside the Gemini app, giving small business owners a central hub to build their brand, analyze finances, and understand customer insights. It connects to Google Business Profile, Google Ads, Google Workspace, and third-party apps like Shopify, Wix, Canva, Dropbox, Adobe, Zoho, and…
The United States has formally banned DeepSeek from federal civilian systems. On October 20, 2026, the Department of Homeland Security published an order requiring civilian agencies to remove every product and service developed by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), its affiliates, and any third-party tool built on its technology from their IT systems,…
Salesforce has agreed to acquire customer engagement platform Braze in one of the largest marketing software deals of the year. The definitive agreement, announced on October 20, 2026, values Braze at approximately $5.66 billion in enterprise value, with Salesforce paying $47.50 in cash for each Braze Class A share. The short answer: Salesforce will pay…
On October 17, 2026, a security researcher reported that the private keys of eight intermediate certificate authority certificates operated by India’s eMudhra had effectively been compromised. The keys were so poorly generated that anyone could recover them in seconds, and whoever holds them can issue browser-trusted HTTPS certificates for any website on the internet. Within…
Plex2Shell is the name researchers have given to a chain of four vulnerabilities in Plex Media Server that, combined, let an attacker run code on a server without logging in. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has now added all four flaws to its Known Exploited Vulnerabilities (KEV) catalog and ordered federal agencies…
The short version: A former OpenAI engineer, Abdulrahman Alfozan, 35, is in federal custody after allegedly planting a custom-built recording device in an executive conference room at OpenAI. On October 19, a San Francisco judge denied his request for release, ruling he is a flight risk. Prosecutors say he had frequent WhatsApp contact with an…