Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDChainalysis Says Customer Tokens Exposed in Breach
Chainalysis says a malicious actor obtained information that included password hashes and live tokens for its users. Its login page and several products are offline as customers await password resets and API-key rotation.
All stories

Chainalysis Says Customer Tokens Exposed in Breach
Chainalysis says a malicious actor obtained information that included password hashes and live tokens for its users. Its login page and several products are offline as customers await password resets and API-key rotation.

Docomo Confirms Customer Data Leak After Intrusion
NTT Docomo says unauthorized access to its online shop and My Docomo exposed customer information, with up to roughly 300,000 records potentially involved. The carrier warns of impersonation scams while the cause and precise scope remain under investigation.

Swift’s 22-Year Mission Ends Over Indonesia
NASA and the U.S. Space Force confirmed the Swift observatory re-entered over Indonesia after nearly 22 years in orbit. The loss closes a rapid-response platform for studying gamma-ray bursts and leaves a practical lesson for future satellite servicing.

CISA Adds WordPress Update Flaw to Its Exploited List
CISA says attackers are exploiting a WordPress Core flaw fixed last week. The bug needs a narrow update window, but site owners should verify their patch.

OpenAI Pledges Grid Relief; Details Remain Open
OpenAI’s Grid Protectors program promises demand cuts at future data centers when the grid is strained. Its only quantified example is a planned Georgia campus, and the national framework still lacks operating targets.

NVS-03 Clears Its First Orbit-Raising Burn
India’s new NavIC satellite has completed its first orbit-raising maneuver. The milestone clears an early risk, but further burns and commissioning remain before it can provide service from its assigned slot.

DeepSeek Opens a Coding Agent for Team Requests
DeepSeek published an MIT-licensed research prototype that routes coding requests from a team’s work conversation into a separate agent session and returns results for human review. Its authors stress that the public code is experimental, not production-ready.

Android’s Silent SMS Bug Can Drop Your Calls
A malformed WAP Push message can crash Android’s calling service without a tap. A code fix appears to exist, but public guidance still leaves its rollout across phones unclear.

Ivanti VPNs Get Two More Fixes After Zero-Day Chain
CISA added two more Ivanti Connect Secure flaws to its exploited-vulnerability catalog after they were used in an attack chain. Builds patched earlier this month still need a follow-up update.

Linux TCP Flaw Spurs Emergency Kernel Patches
A newly disclosed IPv4 TCP race can crash Linux hosts and, under specific conditions, may permit remote code execution. AWS has issued Amazon Linux fixes; distribution-specific exposure and severity vary.

Tech in 5: Tech’s Hidden Systems Took the Test
This week’s stories traced technology’s hidden dependencies—from exploited libraries and certificate chains to AI’s infrastructure bill, a lunar mission plan and the social habits a new platform hopes to build.

Binance Reopens Some Withdrawals After $6.3B Theft
Binance has begun restoring withdrawals in phases after the $6.3 billion theft, while the FBI officially attributes the attack to North Korea-linked TraderTraitor. The restart remains partial, and the exchange has not yet published a full technical postmortem.