Breaking news and updates from the world of technology.
Xiaomi's first flagship built on its in-house XRing O3 chip adopts the wide passport foldable form factor with a 200MP Leica camera, 6,000mAh battery, and LPDDR6 RAM. It launches in China on September 7.
The Ban Artificial Superintelligence Act would prohibit AI capable of exceeding human cognition, pause all advanced AI development, and apply criminal penalties up to 20 years — triggered by the July 2026 OpenAI agent escape incident.
ChatGPT for Healthcare now connects directly to Epic's electronic health record system, letting authorized clinicians pull patient notes, labs, and medications into a chat without leaving their workflow. Access is strictly read-only.
Attackers are actively chaining two SonicWall SMA 1000 vulnerabilities, one with a maximum CVSS score of 10, to gain full remote code execution on perimeter appliances without needing a password. Patches are out; SonicWall is urging immediate upgrades.
A CVSS 9.8 authentication bypass in JFrog Artifactory's default configuration is being actively exploited to mint fake administrator tokens, letting attackers read, tamper with, and poison software packages that downstream systems trust automatically.
Tesla's purpose-built two-seat robotaxi makes its commercial debut September 3 in Austin, Texas, running the same Full Self-Driving stack as its existing unsupervised fleet.
The Department of War has deployed Starshield AI's Grok for Government on GenAI.mil, the Pentagon's generative AI platform, giving troops and civilian staff a second frontier model alongside Google's Gemini for tasks from acquisition research to supply chain logistics.
A critical unauthenticated remote code execution bug in the open-source Langflow platform is being actively exploited, with attackers specifically querying environment variables for OpenAI API keys, AWS secrets, and Langflow superuser credentials. Attack volume has grown from 50 to 360 attempts in days.
A high-severity authentication bypass in Exchange Server 2016, 2019, and Subscription Edition lets attackers take over any mailbox on a vulnerable server. Microsoft patched it in August, but Shadowserver found nearly 22,000 unpatched servers still exposed online — 85% of Germany's on-premises fleet among them.
An attacker inflated the price of Tectonic's TONIC token by 100x to borrow $74 million against it on Cronos — the DeFi protocol's TVL collapsed from $122M to $3M, and the blockchain had to halt and restart from a pre-exploit block.
The European Commission has designated ChatGPT as a Very Large Online Search Engine and Reddit and Roblox as Very Large Online Platforms under the DSA, giving all three four months to comply with the EU’s most stringent content and algorithmic transparency requirements.
Attackers exploited CVE-2026-63077, a vulnerability JetBrains itself disclosed and patched a month earlier, to compromise the Cadence cloud service and a 2024 backup.