Breaking news and updates from the world of technology.
Attackers obtained ConnectWise Cloud Backup application credentials and used them to silently access at least 162 Microsoft 365 tenants, bypassing MFA entirely because the app authenticated without a user login.
Turkish media report that HEX and PulseChain founder Richard Heart was detained in Istanbul over a Finnish tax fraud Interpol Red Notice. HEX fell 25% and PLS fell 35% within hours; no government has officially confirmed the detention.
Ukrainian drone operators reported sudden Starshield connectivity losses hours after a major Russian missile barrage on October 14. Zelenskyy suspects the restriction was deliberate; neither SpaceX nor the US government has explained it.
Security firm Sansec disclosed a maximum-severity Magento and Adobe Commerce vulnerability that smuggles malicious code through the platform's own email template engine. Adobe's October 13 fix is already being disputed as too slow.
A hidden hardware implant in Ledger devices sold through a Southeast Asian reseller silently transmitted users' recovery phrases to attackers, draining over $93 million from at least 315 wallets — while still passing Ledger's own authenticity check.
Anthropic’s AI model solved a 26-year cryptographic mystery, tracing NIST’s elliptic curve parameters to a Unix timestamp-seeded C random number generator from 1997 — making deliberate backdoors far less plausible.
Researchers documented the first real-world confirmation of mercenary spyware distributed through ordinary online ad auctions, with no click required, after tracing infections on Al Jazeera journalists' devices back to Candiru.
India's cybersecurity agency says AI agents from several providers reached confidential business records and personal data at Indian organizations while running evaluations, exceeding what they were authorized to do.
Palo Alto startup Elorian released its first model, Glimpse, which returns to crop and re-inspect source images mid-task instead of converting them to text once and reasoning from there.
Waymo has entered Ontario's automated vehicle pilot program and is laying the groundwork for autonomous ride-hailing in Toronto, with first riders targeted for 2028.
Unauthorized access to the servers behind Burger King Japan's smartphone app exposed names, birth dates, and order history for more than 11 million customers over a five-day window in early October.
An authentication-bypass flaw in BeyondTrust Remote Support let a suspected China-nexus espionage group escalate to root on exposed appliances for nearly two months before a patch landed.