Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDArista’s VeloCloud Has Another Exploited Zero-Day
Arista says attackers are exploiting a maximum-severity flaw in the on-premises VeloCloud Orchestrator control plane. Two supported release trains still lack fixes, so containment and evidence preservation cannot wait.
All stories

Arista’s VeloCloud Has Another Exploited Zero-Day
Arista says attackers are exploiting a maximum-severity flaw in the on-premises VeloCloud Orchestrator control plane. Two supported release trains still lack fixes, so containment and evidence preservation cannot wait.

Check Point Zero-Day Needs a Manual Hotfix
Check Point says attackers exploited a management-server zero-day before disclosure, while a separate VPN flaw is now drawing a global wave of attempts. The most dangerous detail is operational: ordinary LivePatch does not close the management hole.

F5’s BIG-IP APM Zero-Day Is Already Under Attack
F5 says attackers are already exploiting a critical BIG-IP APM flaw that can turn malicious OAuth traffic into unauthenticated code execution. The affected configuration is narrow; the response window is narrower.

An Exoplanet’s Aurora May Have Broken Radio Silence
Astronomers say they have traced natural auroral radio bursts directly to Beta Pictoris b—a first that could let us measure alien worlds’ magnetic fields. It is not an alien message, and the result is still awaiting peer review.

Alibaba’s AI Chip Bets on a 20-Gigawatt Cloud
Alibaba’s Zhenwu V900 chip is the sharp end of a much larger plan: a vertically integrated AI stack and more than 20 gigawatts of global data-center capacity by 2032. The ambition is clear; independent performance evidence is not yet here.

Meta’s Muse Zero-Day Hands Malware the Keys
A local flaw in Meta’s Muse Mac app can redirect dictation traffic and expose the agent’s authentication token, turning limited malware into a route toward files, messages, camera access and connected services.

Oura’s $2.2B IPO Leaves $6M for Growth
Oura and its shareholders may sell up to $2.2 billion of stock, but the smart-ring maker expects only about $6.2 million of its net proceeds to remain for ordinary corporate work after equity-award taxes.

El Niño Is Already Squeezing Asia’s Food Systems
A very strong El Niño is shifting rainfall as Asian reservoirs, fisheries and farms come under pressure. The forecast is global, but the useful response is local and early.

Grok 4.7 Is Cheap by the Token, Not the Task
SpaceXAI’s Grok 4.7 improves coding-agent performance without raising its per-token price. Early independent tests show why buyers still need to measure total task cost—and the harness wrapped around the model.

Amazon Slammed the Door on Meta’s Shopping Bot
Amazon has blocked Meta’s Muse agent from shopping on its store, citing undisclosed automation and account-security risks. The dispute exposes the missing rules for agents that browse and buy as users.

The Typhoon Missed Japan. The Rain Didn’t.
Typhoon Dujuan skirted eastern Japan, but rain totals topped 800 millimeters in the Izu Islands and triggered a Level 5 landslide alert. The storm shows why distance from the eye is a poor measure of danger.

Europe’s Tokenized Money Bridge Is Open
Pontes now lets tokenized securities settle against central-bank money, and the ECB plans to test it with part of its own portfolio. The bridge is real; useful traffic, interoperable markets and lower costs remain to be proved.