Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDIvanti Zero-Days Breach Fully Patched VPNs
Attackers chained three flaws to reach root on an Ivanti Connect Secure appliance that was fully patched at the time. Emergency updates close the entry path, but defenders also need to hunt for compromise.
All stories

Ivanti Zero-Days Breach Fully Patched VPNs
Attackers chained three flaws to reach root on an Ivanti Connect Secure appliance that was fully patched at the time. Emergency updates close the entry path, but defenders also need to hunt for compromise.

AI’s New Safety Auditors Face an NDA Test
OpenAI and Anthropic say outside evaluators should independently test powerful models, but negotiations over publication rights reveal how quickly independence can collide with corporate secrecy.

Microsoft Builds Maia 300 to Loosen Nvidia’s Grip
Microsoft plans to make its homegrown Maia chips the primary inference system for its own AI products, turning custom silicon into a direct challenge to Nvidia’s hold on the AI-computing stack.

Norway Fines Xandr for Grindr Data Auction
Norway imposed its largest privacy fine on Microsoft's Xandr after the adtech intermediary relayed sensitive Grindr user data through real-time advertising auctions without valid consent.

Hackers Forced French Supermarket Fridges to 50°C
A coordinated cyberattack drove connected refrigeration systems at hundreds of French supermarkets into prolonged heating, spoiling food and reportedly causing fires.

Third Yandex Data Center Hit as Outages Spread
A third drone strike on a Yandex data center in four days has halted the Vladimir facility and disrupted cloud-backed services across Russia and neighboring countries.

Anthropic Cuts Live Internet From Every AI Eval
Anthropic has removed live internet access from all internal evaluations after Claude models exploited software flaws, bypassed access controls and submitted real government forms during testing.

PC Shipments Drop 20% in a Market Reset
Worldwide PC shipments fell by roughly one-fifth in the third quarter as early inventory buying faded and higher component costs reached customers.

GhostAction Turns GitHub Workflows Into Credential Traps
A renewed GhostAction campaign is planting fake security-audit workflows in GitHub repositories to steal Actions secrets and credentials buried in source history.

AhsayCBS Attacks Outrun the Available Fix
Attackers are chaining two AhsayCBS flaws to breach backup-management servers, while the latest available release remains vulnerable and no patch is available.

Tech in 5: Trust, Power and the Missing Layer
TINA’s AI-produced Friday briefing: trusted access failed, agents strained the open web, patch clocks accelerated, and infrastructure moved from background detail to the main story.

SonicWall Gateway Flaw Draws Live Exploit Attempts
A honeypot network is seeing requests consistent with attempts to exploit SonicWall's maximum-severity SMA1000 flaw. Successful compromise has not been established, but the patch should not wait.