Uber and OpenAI announced an expanded partnership under which Uber's whole global workforce, about 30,000 employees, will use ChatGPT Work. OpenAI introduced ChatGPT Work in July as an enterprise-focused AI agent for corporate workflows. Uber first piloted it with 1,000 employees, about 80% of them non-engineers across finance, operations…
Microsoft released PowerToys version 0.102, adding two mouse utilities: Mouse Button Lock and CursorHide. Mouse Button Lock lets users hold a mouse button briefly, release it, and extend a text selection by moving the cursor. It improves on the built-in Windows ClickLock setting by allowing a choice of left, right or middle button, a mill…
TechCrunch recapped the Startup Battlefield 200 cohort at Disrupt 2026. The event selected 200 startups, and Intero Biosystems won the $100,000 equity-free prize and Disrupt Cup, with Apate as runner-up. The article is event and business news with no incident, vulnerability, threat actor or malware content. The only security-adjacent item…
Railway, a cloud development platform, confirmed that unidentified attackers may have accessed encrypted environment variables and, for some, obtained the decrypted contents. These variables typically hold passwords and API keys that apps use to reach cloud storage and databases. Railway's initial analysis points to a "subset of users", b…
At TechCrunch Disrupt, three investors from Peak XV, Index Ventures and Bessemer described how founders can raise a Series A in the current market. Shailendra Singh of Peak XV called seed and venture markets the most dysfunctional he has seen and predicted a correction as soon as 2027. He cited inflated ARR figures, rounds priced at up to…
Spotify reported 788 million monthly active users and nearly €5 billion in Q3 revenue. On the earnings call, co-CEO Gustav Söderström said AI agents will help the business because entertainment is not a chore people want to delegate. Spotify wants to be the music service agents choose, and it already integrates with ChatGPT, Claude and Me…
Helion, a fusion startup, announced a three-year, $175 million award from the U.S. Department of Commerce under the CHIPS Act. The money will fund R&D and manufacturing of advanced semiconductors and power electronics for its fusion power plants. Helion also disclosed a new $50 million private investment from an undisclosed investor, brin…
Indian certificate authority eMudhra announced it will stop issuing SSL/TLS certificates, days after researchers showed that the private keys of eight of its intermediate certificates could be reconstructed in under a second. Major browser vendors blocked the certificates, Mozilla removed the eMudhra root from its trust store, and Google …
This SecurityWeek profile covers Corey Thuen, founder and CEO of Gravwell, a security data analytics firm. It describes his hacker mindset, which he calls 'the evil bit': an adversarial streak he looks for when hiring offensive researchers. The article traces his career from the Idaho National Laboratory (INL) to Southfork Security, Digit…
Microsoft says Exchange Online administrators can temporarily re-enable the retired Exchange Web Services (EWS) API to restore apps that stopped working after the default block began on October 1, 2026. EWS is used by Outlook desktop add-ins, older Outlook for Windows versions, Apple Mail/Calendar on macOS and other apps. When EWS is disa…
INTERPOL announced the results of Operation Serengeti III, a coordinated law enforcement action run between June 29 and August 31, 2026 across 21 countries, mostly in Africa plus the United States. The operation led to 1,462 arrests, the disruption of 10,909 malicious networks and the recovery of more than $105 million in illicit funds. A…
ESET reports that Russia-linked actors used the decentralized Yggdrasil mesh network to hide command-and-control traffic during an attack on a Ukrainian grain logistics company in July 2025. ESET says this is the first documented use of the technology by a state-linked group. The intrusion began with a phishing email sent in a campaign ag…
The HHS Office for Civil Rights (OCR) can impose civil penalties of $14,602 to $2,190,294 per violation for knowingly violating HIPAA. These fall under Tier 3 and Tier 4 "willful neglect" violations, depending on whether the violation is corrected within 30 days. Penalty amounts are also influenced by prior compliance history, cooperation…
State attorneys general share HIPAA enforcement with the HHS Office for Civil Rights (OCR) under authority granted by the HITECH Act. The first action came in 2010, when the Connecticut AG settled with Health Net for $250,000. Enforcement peaked in 2023 with 16 actions, including a $49.5 million penalty against Blackbaud over a 5.5 millio…
Researchers at Semperis reported on October 22 that the Iranian state-linked group Prince of Persia, active for about two decades, is hosting command-and-control (C2) infrastructure with a US hosting company. According to Semperis, this is the first time in at least 12 years that an Iranian threat group has been identified hosting its act…
The European Commission opened formal proceedings against Booking.com on October 21, 2026, to assess possible breaches of the Digital Services Act (DSA) linked to phishing and fraud on the platform. The investigation follows a preliminary inquiry and covers how the company assesses and mitigates phishing risks, including how reservation a…
Anthropic has launched Claude Duet, an agent app for professionals and small businesses that automates and manages tasks. It competes with Meta Muse, OpenAI Dots, Hark, Instinct, Grok Bot and Fo. Duet runs on the Claude Opus 5.5 model and works in the background in its own virtual machine, returning to the user when it needs approval. It …
Nirva, a startup founded in 2025 by ex-Meta Reality Labs employees Wei Lyu and Jason Chen with Hanying Hu, announced a $25 million pre-Series A round, bringing total funding to $33 million (earlier backers include Lightspeed and South Park Commons). Its first product is a roughly 8 g pendant, also wearable as a bracelet, priced at $249, w…
DeepSeek, the Hangzhou-based Chinese AI lab, has reportedly raised about $15 billion (roughly 100 billion yuan), according to Bloomberg as relayed by TechCrunch. The round came two days after the U.S. ordered federal civilian agencies to remove DeepSeek's AI technology from their systems over security concerns. Potential investors reporte…
Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…