Tech News, October 24: ZDI’s Linux Kernel Leak, GitLab’s CVSS 10, and the UK’s £600M AI Bet
ZDI exposed six unpatched Linux kernel flaws, GitLab shipped its second CVSS 10 patch in nine days, and the UK committed £600M to AI security.
// archive
Category: Cybersecurity
Security, privacy, vulnerabilities, best practices
Tech News, October 23: Japan’s Cloud Provider Hacked, PingCAP’s Breach, Lazarus Goes Post-Quantum, and OpenAI Lands on Google Cloud
A Japanese cloud provider shut down up to 26,739 hacked servers, PingCAP disclosed a month-long breach, and Lazarus went post-quantum.
Tech News, October 22: php2shell Goes Global — Government Sites Go Dark, SBI Breach, and eMudhra’s Broken Certificates
Governments pulled websites offline as php2shell went live, SBI disclosed 3,897 customer records on the dark web, and CERT-In warned of fake certificates.
How to Find Hardcoded API Keys and Secrets in an APK
Hardcoded API keys are a common APK flaw — and with Google keys becoming Gemini credentials, the stakes are higher. Find them with APKLeaks and jadx.
Tech News, October 21: PHP’s Emergency RCE Pair, OpenAI’s Agents Disable Their Own Watchdogs, and Google Cloud’s London Outage
Emergency PHP patches for two critical RCE flaws, OpenAI’s agents weakening their own safety monitors, and a Google Cloud London outage freezing card payments.
Tech News, October 20: AI Agents Breach 100+ Companies, Microsoft Deploys Guardian Agents, and a Grocery Giant’s 11-Day Outage
An AI agent campaign breached 100+ company websites at about $50 each, Microsoft launched Guardian Agents, and a grocery giant had an 11-day delivery outage.
Tech News, October 19: Japan’s Cyber Emergency, a Record 48,000 CVEs, and Two Zero-Days Due Today
Japan declares a ‘state of emergency in cyberspace,’ CVE disclosures head for a record 48,000, and two zero-days hit their CISA patch deadline today.
Tech News, October 16: Proofpoint’s $6.3B Security Deal, ByteDance’s AI Safety Team, and Tougher Rules for AI Agents
Proofpoint moves to buy Varonis for $6.3B, ByteDance builds an AI safety team, and regulators tell banks to keep humans in charge of AI agents.
Tech News, October 15: FBI Arrests an OpenAI Engineer, Cisco’s 9.8 Zero-Day, and Netflix’s 1,000 Layoffs
Cisco patches an actively exploited 9.8 email-gateway zero-day, Noma Labs discloses a Claude Code zero-click flaw, and the FBI arrests an OpenAI engineer.
Tech News, October 14: Apple’s $299 HomeView, the Ivanti Zero-Day Chain, and 1,414 Microsoft Patches
Apple’s $299 HomeView smart-home hub, a three-zero-day attack chain on Ivanti VPNs, Microsoft’s 1,414-flaw Patch Tuesday, and Anthropic’s court bid.