CDC Warns of Rising Threat of Drug-Resistant Germs
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
https://techcrunch.com/2026/10/27/jio-shares-surge-21-in-market-debut-after-blockbuster-india-ipo/
https://techcrunch.com/2026/10/27/the-data-center-boom-has-an-upside-innovation-for-the-us-grid/
https://techcrunch.com/2026/10/27/guidewire-buys-hyperexponential-for-1-7b-in-cash/
https://www.cnet.com/science/space/astronaut-jessica-meir-peloton-ride-iss-robin-arzon/
https://www.cnet.com/tech/mobile/att-177-million-data-breach-settlement-payouts-checks/
https://www.cnet.com/tech/mobile/battle-smart-rings-oura-filed-lawsuit-against-ultrahuman-again/
https://www.cnet.com/news/halloween-candy-prices-take-a-scary-bite-out-of-shoppers-budgets/
https://arstechnica.com/space/2026/10/chinas-top-secret-spaceplane-cant-hide-in-low-earth-orbit/
https://www.wired.com/story/geoffrey-vos-uk-judge-ai-legal-profession-challenges/
https://www.zdnet.com/tech/iphone-duo-cracked-screen-hinge-what-to-do-crackgate/
https://www.zdnet.com/tech/fitbit-glucose-patterns-blood-pressure-health-features/
https://www.zdnet.com/home-and-office/t-mobile-t-mix-plans-switch-perks/
https://www.zdnet.com/innovation/orisa-tool-recovers-deleted-local-ai-chats-android-phones/
Apple's 14-inch M6 MacBook Pro brings faster AI, Wi-Fi 7, and a $1,999 price. See what changed from M5 and whether upgrading makes sense.
The post Apple’s New M6 MacBook Pro Costs $1,999. Is It Worth Upgrading? appeared first on TechRepublic.
https://www.techrepublic.com/article/news-apple-m6-macbook-pro-whats-new/
Instagram is testing 90-minute horizontal videos called Features. Explore how the format works, who can use it, and what it could mean for creators.
The post Instagram Tests 90-Minute Horizontal Videos Called Features appeared first on TechRepublic.
https://www.techrepublic.com/article/news-instagram-features-90-minute-horizontal-videos/
Compare Apple's OLED iPad Mini and A17 Pro models on display, performance, battery life, and price to see whether the new tablet is worth upgrading to.
The post iPad Mini OLED vs A17 Pro: Is the $699 Upgrade Worth It? appeared first on TechRepublic.
https://www.techrepublic.com/article/news-ipad-mini-oled-vs-a17-pro/
Microsoft Copilot Notebooks turns project files into working drafts. Check feature access, source accuracy, sharing permissions, and review time before adoption.
The post Copilot Notebooks Turns Project Files Into Drafts: What to Check appeared first on TechRepublic.
https://www.techrepublic.com/article/news-microsoft-copilot-notebooks-project-drafts/
Samsung reportedly plans to cut Galaxy A production by 20% as memory costs rise. Here's what the potential cuts mean for phone prices and buyers.
The post Samsung May Cut Production of 10 Million Galaxy Phones appeared first on TechRepublic.
https://www.techrepublic.com/article/news-samsung-galaxy-a-production-cuts-2026/
https://www.geekwire.com/2026/etzioni-on-ai-is-anthropic-worth-2-trillion-do-the-napkin-math/
https://www.techradar.com/pro/malwarebytes-personal-data-remover-review
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
https://www.theregister.com/security
https://hackread.com/cisa-confirm-php2shell-exploit-federal-agencies-patch/
https://hackread.com/microsoft-issues-net-fixes-brotli-linux-privilege-escalation/
https://hackread.com/hackers-abuse-microsoft-teams-external-chats-pc/
https://www.debian.org/security/
https://msrc.microsoft.com/update-guide/vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70277
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20942
https://www.ncsc.nl/alerts/kwetsbaarheden-in-apple-macos-update-nu
https://www.ncsc.nl/alerts/kwetsbaarheden-in-apple-ios-en-ipados-update-nu
https://www.ncsc.nl/alerts/kwetsbaarheden-in-oracle-fusion-middleware-producten-update-nu
https://www.ncsc.nl/alerts/update-php-kwetsbaarheden-nog-steeds-reden-om-direct-te-patchen
https://www.ncsc.nl/alerts/kwetsbaarheid-in-google-brotli-decoder-in-nodejs-update-nu
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4117
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2367
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4185
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4067
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3638
https://thehackernews.com/2026/10/japans-gmo-offers-1-million-bounty-to.html
https://thehackernews.com/2026/10/tailscale-patches-ssh-flaws-that-could.html
https://thehackernews.com/2026/10/shinyhunters-exploited-oracle.html
https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html
https://thehackernews.com/2026/10/cyberstrikeai-uses-44-ai-agents-to.html
https://techrepublic.com/topic/security
Apple's iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices.
The post Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk appeared first on TechRepublic.
https://www.techrepublic.com/article/news-ios-27-2-security-flaws-patched/
The US Treasury proposes tighter China investment restrictions covering AI, biotechnology and advanced chips. Here's what businesses and investors should know.
The post New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding appeared first on TechRepublic.
https://www.techrepublic.com/article/news-us-treasury-china-investment-rules-ai-biotech-chips/
Google is extending scam-call protection to Android 15 and earlier, adding safeguards against malicious apps that abuse accessibility permissions.
The post Your Older Android Phone Is Getting a New Scam Defense — Here’s What Google Changed appeared first on TechRepublic.
https://www.techrepublic.com/article/news-google-android-scam-call-protection/
Zoom unveils AI agents and its Unified Context Layer at Zoomtopia 2026. Learn how its new automation and security tools could affect IT teams.
The post Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls appeared first on TechRepublic.
https://www.techrepublic.com/article/news-zoom-ai-agents-conversation-to-completion/
ChatGPT now lets users lock private conversations with a PIN or biometrics. Learn how Locked Chats works, its limitations, and the risks of resetting a PIN.
The post ChatGPT Locked Chats Explained: How to Use It and What to Know appeared first on TechRepublic.
https://www.techrepublic.com/article/news-chatgpt-locked-chats-pin-biometric-privacy/
https://www.bleepingcomputer.com/
https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/
https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
https://krebsonsecurity.com/2026/10/u-k-sanctions-cryptomus-for-ru-money-laundering/
https://krebsonsecurity.com/2026/10/microsoft-patches-more-than-1400-security-flaws/
https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/
As the news from last week has settled down, it would seem this headline was pretty spot on. The foretold apocalypse didn't eventuate, and there were no internet-destroying outages. In fact, it took days before I could find a single story of PHP2Shell being reliably attributed back
I have this sense that we've passed the point where "vibe coding" is a derogatory term. I have no empirical evidence for this; it's more a feeling that those weaponising the term have now accepted the inevitability and are just getting with the program.
I remember the name of that AI doco now - The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: "it'
I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly. This week, there are two ShinyHunters arrests in the news: Pepijn in the Netherlands and then Saif
How's that view?! With NDC Oslo now done, it's a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott's and my "Cyber-broken" talk. In the meantime, this week is mostly about the ShinyHunters trajectory targeting both
Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities”
Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights, decrypting and executing them only upon receiving a secret trigger. Using digital lockers, these hidden circuits remain provably hard to elicit and interpret under cryptographic assumptions, even given full access to model weights, extending prior work from hiding fixed strings to arbitrary computations. We implement our proof of concept constructions in PyTorch and evaluate elicitation through fine-tuning, weight noising, gradient-based trigger search, and latent adversarial training, using a small chemical reaction prediction task as a proxy for CBRN-relevant capabilities. Our results demonstrate resistance to these methods and, together with our cryptographic guarantees, reveal a limit of elicitation-based capability audits. We release our models to support the improvement of defenses...
https://www.schneier.com/blog/archives/2026/10/hiding-capabilities-in-ai-models.html
Interesting research:
TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it.
https://www.schneier.com/blog/archives/2026/10/bias-in-qwen3-coder-model.html
This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys:
The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...
https://www.schneier.com/blog/archives/2026/10/compromised-tls-certificates.html
PHP maintainers have released fixes for two critical vulnerabilities:
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs...
https://securityaffairs.com/201810/ai/cohere-finds-qwen-ai-model-contacting-a-server-in-china.html