983 casos · pág. 9/50
CrowdStrike published a blog post dated 2026-10-20 announcing that it has achieved the UK National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) Enhanced Level assurance. The captured article text contains only site navigation and a list of other blog titles. It has no body text describing the assurance scope, requirements or…
Google is rolling out Gemini Personal Intelligence on Android Auto, letting the Gemini assistant draw on a user's Gmail, Calendar, Photos and other Google services to tailor in-car responses. The feature is opt-in and off by default, and users can choose which apps and services to permit. The article reports no vulnerability, attack or in…
A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…
OpenAI announced on 2026-10-20 that it acquired Orchestra Bio, a four-year-old AI biotech software startup. Deal terms were not disclosed. Orchestra had reportedly raised about $20 million as of 2025 from backers including Andreessen Horowitz, Atria and 8VC. Orchestra builds AI agents that help biotech companies manage drug discovery oper…
SpaceX reported $14.6 billion in third-quarter revenue in a regulatory filing, with its AI business now accounting for 52% of income. The renamed "Super Intelligence" segment includes the recently acquired Cursor coding tool, the Grok bot and a neocloud business with 1.7 GW of compute. Net income was $4.4 billion, against a $1 billion los…
Google announced on 20 October 2026 that it is upgrading the Gemini assistant in vehicles with a Personal Intelligence feature. The feature draws on data from Gmail, Google Calendar, YouTube, Maps, Google Search history and other connected Google services. It launches today in Android Auto and will reach cars with Google Built-in in the c…
GM confirmed to TechCrunch that it will close the Brownstown Battery Assembly Plant south of Detroit, as first reported by Automotive News. The site assembled battery packs for the Cadillac Celestiq and electric drive units and battery packs for the Chevrolet Corvette E-Ray. A GM spokesperson said the closure is unrelated to its EV strate…
A former OpenAI engineer with reported Saudi ties was detained after allegedly planting a secret recording device in a conference room at OpenAI's headquarters. Dark Reading presents the case as an example of a preventable insider threat vector. The available text is only a short teaser, so it gives no detail on the device, how long it wa…
Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…
Objective-See analyzed Heartbreaker, a previously unknown macOS ransomware sample (ad hoc-signed ARM64 Mach-O written in Rust). It was uploaded to VirusTotal in May 2025 and remains undetected by all AV engines. It was found by researcher Megan Carney. It encrypts files in ~/Downloads with AES-256-GCM, renames them to .heartbreaker, drops…
Hardware hacker Joe Grand found tampered Trezor Model T and Trezor One wallets sold through unauthorized third-party channels (Facebook Marketplace in Canada in 2025, and a TikTok shop in August 2026, shipped from China). The attackers replaced the microcontroller with one running malicious firmware that hands users one of about a dozen p…
Palo Alto Networks PSIRT published advisory CVE-2026-0318, a denial-of-service (DoS) vulnerability in PAN-OS affecting Panorama management appliances. The excerpt lists affected builds across the 11.1, 11.2, 12.1 and 12.2 release trains, including many hotfix (h) builds. It gives no CVSS score, attack vector, authentication requirements, …
Palo Alto Networks disclosed CVE-2026-0313, an OS command injection vulnerability (CWE-78) in the OS Query content pack for Cortex XSOAR and Cortex XSIAM. An authenticated administrator can execute arbitrary OS commands on remote endpoints. The vendor rates it MEDIUM with MODERATE suggested urgency (CVSS-BT 6.1 / CVSS-B 8.6) and states it…
Palo Alto Networks PSIRT published advisory CVE-2026-0314, a local denial-of-service (DoS) vulnerability in the GlobalProtect App for Windows. The advisory lists a wide range of affected releases across the 6.0, 6.2 and 6.3 branches. The excerpt gives no CVSS score, exploitation status, attacker prerequisites or fixed versions. Defenders …
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any m…
Palo Alto Networks disclosed CVE-2026-0311, a server-side request forgery (SSRF, CWE-918) vulnerability in Checkov by Prisma Cloud. A local unauthenticated user can make unauthorized network requests from the host to internal services. The vendor rates it LOW severity with MODERATE suggested urgency (CVSS-B 4.8, CVSS-BT 1.1) and says it i…
Palo Alto Networks published advisory CVE-2026-0312 describing path traversal vulnerabilities (CWE-22) in Checkov by Prisma Cloud that let an unauthenticated local user write files to arbitrary locations on the scanning filesystem. No special configuration is required to be exposed. The vendor rates it MEDIUM (CVSS-B 6.8, CVSS-BT 4.3) wit…
Palo Alto Networks PSIRT published advisory CVE-2026-0315, a local privilege escalation vulnerability in the GlobalProtect App on macOS. The excerpt lists affected versions only, in the 6.2.x and 6.3.x branches. It gives no CVSS score, root cause, exploitation status, or fixed versions. Defenders running GlobalProtect on macOS endpoints s…
Palo Alto Networks PSIRT published an advisory for CVE-2026-0317, a denial-of-service vulnerability in PAN-OS, the operating system of its firewalls. The text provided contains only the advisory title and a list of affected-version CPE entries. It does not give a CVSS score, attack conditions, exploitation status or fixed versions. Defend…
Palo Alto Networks PSIRT published advisory CVE-2026-0320, an authenticated admin command injection vulnerability in PAN-OS. The advisory lists a wide range of affected releases across the 10.2, 11.1, 11.2, 12.1 and 12.2 branches, including many hotfix builds. The excerpt provided does not mention active exploitation, a CVSS score, or fix…
