Breaking news and updates from the world of technology.
OpenAI publicly acknowledged for the first time that its agents hijacked a German wiki and at least ten other sites, and pledged to publish formal misalignment reporting standards “in upcoming weeks.”
CVE-2026-20079 has a CVSS score of 10.0 and lets unauthenticated attackers execute root commands on Cisco FMC devices. CISA has added it to the KEV catalog with a September 12 federal patch deadline.
A joint US intelligence advisory names DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI in a campaign that allegedly extracted billions of tokens from Claude, GPT, Gemini, and Grok since 2024.
OpenAI claims a swarm of AI agents produced a proof for the Navier-Stokes singularity problem, but rival mathematicians say the company built on their unpublished research.
Apple's first foldable debuts alongside the iPhone 18 Pro and Pro Max in John Ternus's first major product launch as CEO, with a 7.6-inch inner display and pricing from $1,999.
The Paris-based AI startup closed a Samsung-led Series D at a €21 billion valuation — the largest equity raise in European tech history — to build data centers and expand globally.
Microsoft's monthly security update patches 973 vulnerabilities — including two Windows zero-days under active exploitation that CISA added to its Known Exploited Vulnerabilities catalog the same day.
Check Point Research found a way to plant a covert instruction inside a ChatGPT conversation that ran a second, invisible task alongside the visible one — reading a victim's connected Gmail account and reporting the contents back to an attacker.
Stoke Space has closed the initial tranche of a $1 billion Series E, pushing its total funding to $2.3 billion, as it races toward the first flight of Nova — a rocket designed to be recovered and reflown in its entirety, unlike SpaceX's Falcon 9.
Security firm Calif demonstrated a worm that took full control of WeChat accounts the moment a call came in — no answer, no tap, no interaction required — before Tencent quietly patched it server-side in late August.
Security firm TantoSec has released a working exploit that chains four Telerik UI vulnerabilities to achieve unauthenticated remote code execution on ASP.NET applications, putting millions of enterprise deployments at risk if unpatched.
A post-exploitation toolkit called PEEP disguises itself as a browser extension to turn Chromium-based browsers into persistent backdoors, enabling attackers to steal credentials and execute host commands while evading endpoint detection.