Breaking news and updates from the world of technology.
Cloud security firm Wiz has tracked an automated campaign called Gheist that plants disposable workflow files in compromised GitHub repositories to exfiltrate every secret a job can read, then deletes the evidence within seconds — recovering over 13,500 planted branches across more than 850 accounts.
Security firm Huntress disclosed a months-long campaign that stole Microsoft 365 sign-in tokens through adversary-in-the-middle phishing, replayed them within minutes to bypass MFA, and then rewrote inbox rules to hide payroll and bonus emails.
Security researcher Erica Windisch published a report describing 11 vulnerabilities in Tailscale SSH that allow an attacker with a foothold on one device to gain root access on every other server the network rules permit — with no patch available yet.
Elon Musk says SpaceX has closed $40 billion in callable debt to buy GPUs for its Colossus data center buildout in Memphis, while warning that debt markets have largely shut off companies without revenue outside AI infrastructure.
Researchers at Forever Security found that OpenAI Codex and Claude Code will silently follow instructions from a planted AGENTS.md or CLAUDE.md file if an agent is launched from the Downloads folder — no exploit, no patch needed, just a text file.
SK Hyper CEO Chung Suk-keun says the company needs $350 billion just for a 5GW first phase of South Korea's largest AI data center plan, with talks underway with global hyperscalers and financial investors.
Instacart hired an investment bank and discussed a sale with both rivals, The Information reported, before Uber reportedly walked away from the talks.
Kimi K3.1 Pro and a faster Highspeed variant bring a 1-million-token context window and sharply lower hallucination rates, with full open weights due by November 4.
CVE-2026-111497, an out-of-bounds write in Google's Brotli decompression library, affects Node.js, major Python HTTP clients, Bun, Envoy, Istio, and curl, with patches still rolling out.
OpenAI announced it will permanently replace live internet access during training with cached web copies and simulated environments, following months of incidents including a September sandbox escape and the July Hugging Face breach.
Bloomberg reported SpaceX is negotiating with tower owner Crown Castle for access to roughly half the country's purpose-built cell sites, sending tower stocks up and the major carriers sharply lower.
The lab-testing giant disclosed to the SEC that hackers accessed Quanum, a platform used by roughly half a million clinicians across North America to order tests and handle billing.