Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDIvanti VPNs Get Two More Fixes After Zero-Day Chain
CISA added two more Ivanti Connect Secure flaws to its exploited-vulnerability catalog after they were used in an attack chain. Builds patched earlier this month still need a follow-up update.
All stories

NVS-03 Clears Its First Orbit-Raising Burn
India’s new NavIC satellite has completed its first orbit-raising maneuver. The milestone clears an early risk, but further burns and commissioning remain before it can provide service from its assigned slot.

DeepSeek Opens a Coding Agent for Team Requests
DeepSeek published an MIT-licensed research prototype that routes coding requests from a team’s work conversation into a separate agent session and returns results for human review. Its authors stress that the public code is experimental, not production-ready.

Android’s Silent SMS Bug Can Drop Your Calls
A malformed WAP Push message can crash Android’s calling service without a tap. A code fix appears to exist, but public guidance still leaves its rollout across phones unclear.

Ivanti VPNs Get Two More Fixes After Zero-Day Chain
CISA added two more Ivanti Connect Secure flaws to its exploited-vulnerability catalog after they were used in an attack chain. Builds patched earlier this month still need a follow-up update.

Linux TCP Flaw Spurs Emergency Kernel Patches
A newly disclosed IPv4 TCP race can crash Linux hosts and, under specific conditions, may permit remote code execution. AWS has issued Amazon Linux fixes; distribution-specific exposure and severity vary.

Tech in 5: Tech’s Hidden Systems Took the Test
This week’s stories traced technology’s hidden dependencies—from exploited libraries and certificate chains to AI’s infrastructure bill, a lunar mission plan and the social habits a new platform hopes to build.

Binance Reopens Some Withdrawals After $6.3B Theft
Binance has begun restoring withdrawals in phases after the $6.3 billion theft, while the FBI officially attributes the attack to North Korea-linked TraderTraitor. The restart remains partial, and the exchange has not yet published a full technical postmortem.

DailyBooth Revives the Everyday Social Feed
An independent project is bringing DailyBooth’s everyday-sharing idea into a live, mixed-media social platform. The old service made small daily photos feel communal; the new one wants that feeling to travel across formats.

Alphabet’s AI Buildout Faces a Cash-Flow Test
Alphabet’s AI infrastructure spending pushed its free cash flow below zero; a broader tech selloff after Intel and Amazon results is putting the same payback question to the rest of the buildout.

Cisco’s Exploited VPN Flaw Can Reboot Firewalls
Cisco confirms active exploitation of a flaw that can remotely reload some ASA and FTD firewalls. The risk depends on specific SSL VPN settings, and no workaround fully fixes it.

Apple Brings Touch to MacBook Pro at a Premium
Apple’s first touchscreen MacBook Pro pairs a tandem OLED display with the familiar keyboard and trackpad. Touch is reserved for the higher-priced models, leaving software support to prove whether the new input earns its premium.

Google’s TPUs Move Beyond Google Cloud
Oracle will offer Google’s AI accelerators through OCI from 2027, while Bloomberg reports OpenAI intends to buy them. The moves could expand Google’s chip business, but the OpenAI purchase remains unconfirmed.