Amazon's Ring announced its first smart lock, the Ring Smart Lock, which has a manual dial that generates enough power to wake the keypad and fingerprint reader when the battery is dead. The lock supports fingerprint scanning, PIN codes (including temporary codes), Alexa commands and the Ring app. The battery pack, called Quick Release Ul…
Amazon announced three Android-based Alexa Tablets (Tablet 8 from $230, Tablet 11 from $330, Tablet 12 Pro from $500) built around the Alexa+ AI assistant, with shipping set to start on October 14. They are the first of Amazon's newer tablets to support Google Play in addition to Amazon's own app store. Amazon also launched two Kids Table…
F5 Labs published a "canary exploit" generator for CVE-2025-30065, a CVSS 10.0 flaw in the Apache Parquet Java parquet-avro Maven module. The tool lets defenders test whether their environments are vulnerable and confirm that patches and configuration are effective. F5's analysis finds the flaw far less severe than the CVSS score and earl…
Apple has reportedly invited media to an "all-day product launch" in Los Angeles on Oct. 28, according to Bloomberg's Mark Gurman. Expected announcements include its first touchscreen OLED MacBook line (14- and 16-inch, M5 Pro and M5 Max chips, possibly 5G), a 14-inch M6 MacBook Pro, an OLED iPad mini with an M6 chip at a rumored $799, an…
Apple announced the HomeView smart home hub on Oct. 13, with preorders open and general availability on Nov. 13. The device combines a touchscreen, smart speaker, Siri AI and a security camera dashboard, and competes with the Amazon Echo Show and Google Nest Hub. This is consumer product news with no vulnerability, incident or threat acti…
Amazon is funding development of a proposed 960-megawatt nuclear plant near Terre Haute, Indiana, and would be the first customer for its power, according to an announcement on Monday. American Electric Power (AEP) would operate the plant, and X-energy would supply 12 Xe-100 small modular reactors. The site is a demolished coal plant. The…
On October 13, Apple held a small, non-livestreamed "Welcome Home" event and announced seven smart home products. They are the HomeView smart panel, the HomePod mini 2, a new Apple TV 4K, and a Home Collection of accessories built with LG Electronics and Schneider Electric. This is product news with no reported vulnerability, incident or …
Kaspersky researchers report that the APT group Mirage Kitten has moved from native C/C++/Go malware to Node.js and JavaScript implants, NodeRabbit and PollCat. Both are cross-platform RATs delivered through spear-phishing by fake recruiters on LinkedIn and other job platforms, using trojanized coding-challenge archives hosted on Amazon S…
GreyNoise observed automated scanners impersonating the web crawlers of OpenAI, Anthropic, Google, Perplexity, DeepSeek and Amazon while requesting environment files, cloud access keys, private keys and password stores. A cluster of 13 forged AI crawler names from eight companies was seen; six names (belonging to Anthropic, OpenAI, Google…
Sen. Ron Wyden sent a letter to CISA and the Office of Management and Budget (OMB) urging federal adoption of Encrypted Client Hello (ECH). ECH hides the name of the website a user visits from anyone monitoring network traffic. His office identified at least 350 federal sites that do not use ECH. Wyden warned that hackers and foreign adve…
On Tuesday Google released TorchTPU as an open-source project. It lets PyTorch AI applications run on Google's Tensor Processing Units (TPUs) and Google Cloud through a configuration change, with no application rewrite. A day earlier Amazon announced TorchNeuron, which ports PyTorch apps to its Trainium chip and AWS. Amazon is also submit…
Unit 42 reports that threat actors are moving supply chain malware C2 from hardcoded endpoints to Web3 mechanisms, so an entire botnet or worm infrastructure can be re-pointed with a single blockchain transaction. The ChainDrop npm worm (Shai-Hulud family, 400+ npm packages) and the PolinRider campaign (npm, Go modules, Packagist) target …
The weekly InfoStealers report for 12-19 October 2026 summarises stealer-log telemetry on compromised machines, credentials and sessions. The United States ranks 8 by country of infection with 438 machines. Gmail is the most affected email provider with 1,225,748 users, followed by Hotmail (90,554) and Yahoo (33,493). Sessions and saved c…
Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…
A growing number of developers and consumers are using AI coding agents, chiefly Claude Code, to remove sponsored ads, tracking features and preinstalled bloatware from smart TVs. Two GitHub projects, dumbtv (Muzzammil Yasin Sabuwala) and cleanyourtv (Gathin T.), package this approach. Cleanyourtv reportedly spread to a few thousand users…
Dashlane's third annual Passkey Power 20 report found that passkey use is growing but still trails passwords. The report covers millions of aggregated, anonymized authentications between July 2025 and June 2026. Authentications by Dashlane users nearly doubled year on year to 2.5 million per month, and 57% of users now store at least one …