Splunk and SolarWinds released security updates this week for vulnerabilities that allow code execution, privilege escalation, denial-of-service (DoS) and information disclosure. The article does not report exploitation in the wild. Splunk's updates cover Splunk Enterprise and Splunk SOAR, and SolarWinds fixed flaws in Observability and P…
The 2026 SANS Cloud Security Survey Insights report (400 IT and security professionals) finds a persistent cloud security maturity gap. 93% of organizations run production workloads in the cloud and 65% use more than one provider. Only 40% rate their cloud security strategy as advanced or optimized, even though 73% have a dedicated cloud …
GoDaddy revoked 404,607 SSL/TLS certificates effective October 21, 2026, after finding that some subscriber certificates were issued outside the profiles defined in its Certification Practice Statement (CPS) and Certificate Policy (CP). The incident is tracked in Mozilla's CA Certificate Compliance program as Bug 2082703, which remains op…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
Attackers gained unauthorized access to the infrastructure of Onamae.com Desktop Cloud, a VPS service run by GMO Internet in Japan, and installed "unauthorized programs" in some customers' server environments. GMO confirmed the intrusion on October 20, 2026 (bleepingcomputer.com, gbhackers.com). It began rolling shutdowns of all Desktop C…
The United Arab Emirates says it is moving 50% of its government services to agentic AI as part of a transformation of its public service footprint. According to the Dark Reading report, the government says it is building a foundation of security and safety alongside the transition. The available text is only a short teaser, so it gives n…
A ZDNET consumer how-to article describes how to make Waze the default mapping app on a Google Pixel phone. The author says the August Android update removed the option to choose a default mapping app from the Default apps settings. The article describes no security incident, vulnerability or threat activity, and has no direct defender re…
ZDNET's Jack Wallen reviews GridCraft, a free, open-source, Rust-based spreadsheet application from ArtCraft that mimics Microsoft Excel. It runs natively on Linux, FreeBSD, macOS and Windows and supports XLSX files, more than 500 functions, charts and pivot tables. The reviewer notes weak template support, with no .xltx saving, and advis…
Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…
This is a business and finance item with no cyber threat content. Blackstone executive Jas Khaira, who leads the firm's San Francisco AI hub Blackstone N1 (BXN1), said at TechCrunch Disrupt that concerns over AI infrastructure debt are overblown. Rising interest rates, wider credit spreads and the roughly $50 billion in CoreWeave debt hav…
Airbnb has updated its policy to stop hosts from requiring guests to strip beds, wash and put away dishes, start laundry or remove trash before checkout. The rule applies to reservations made on or after November 20. The change responds to long-running guest complaints about burdensome checkout instructions and fines for not disposing of …
Meta said on its Q3 earnings call that its AI agent app Muse has more than 10 million users, with about 25% of those who set it up using it daily. Shopping is a leading activity, and over a quarter of engaged shoppers had an average purchase above $200. Muse uses the Plaid connector to enable agentic shopping and can also connect to users…
This article is promotional event content, not a cyber threat report. TechCrunch announces Founder Summit 2026, a one-day gathering for startup founders and investors on November 4, 2026 at the SoWa Power Station in Boston. The agenda covers fundraising, AI-native company building and leadership, with speakers from Toast, HqO, Bessemer Ve…
A TiDB breach is being used to illustrate flawed assumptions about cloud security. The article argues that cloud providers may be storing sensitive customer data without either the provider or the customer knowing it. When such a provider is breached, that hidden data is exposed. The excerpt gives no details on the breach itself, such as …
Russian satellite Kosmos 2612 carried out rendezvous and proximity operations against ICEYE-X36, a commercial synthetic-aperture radar (SAR) satellite owned by ICEYE's US subsidiary. The satellite may support Ukrainian military imagery. Per LeoLabs, it closed from 350 km to under 5 km on 15-16 October and stayed nearby, making small adjus…
On October 20, 2026, Google announced new Chrome defenses for users of Safe Browsing Enhanced Protection. They include a warning against ClickFix social engineering, in which suspicious commands copied by the user are scrubbed of personal information and sent to Safe Browsing for analysis (thehackernews.com, gbhackers.com, securityweek.co…
Anthropic has been shopping a draft federal AI safety bill to Congress, according to Politico, which was cited by TechCrunch (techcrunch.com) on 2026-10-20 and by Olhar Digital (olhardigital.com.br) on 2026-10-21. An Anthropic spokesperson confirmed the text reflects the company's Advanced AI Framework, which it has promoted to federal an…
Automattic, parent company of WordPress.com, WooCommerce and Tumblr, has begun layoffs, and insiders expect more cuts. Over at least the past week the cuts have hit the communications team, social team, WordPress.com and the VIP enterprise business. The turmoil follows the board's failed attempt in September to oust CEO Matt Mullenweg, wh…
Recursive, an AI startup led by CEO Richard Socher, released its first model, Flint, on 21 October 2026. It is a free coding model that runs locally on a laptop. The company says its automated research system, the Eureka Machine, contributed to nearly every stage of development, which let a small team build the model in under four months.…
Year-old AI startup Flapping Airplanes announced a $1 billion Series A round co-led by Index and Lux, reportedly at a $6 billion valuation. The round comes nine months after a $180 million seed round from GV, Sequoia and Index that valued the company at $1.5 billion. Other investors include Kleiner Perkins, Valor, Atreides, A and Nvidia. …