Breaking news and updates from the world of technology.
VW's Mission Efficiency concept posted a 0.158 drag coefficient and the lowest energy consumption ever recorded for a near-production electric car — achieved with the same motor and battery as the ID. Polo, not bespoke racing hardware.
Microsoft opened public comment on a code of conduct that would bar its future AI models from resisting human correction or shutdown, concealing their reasoning, or expanding their own operating scope.
President Trump publicly attacked Anthropic CEO Dario Amodei on Truth Social days after Amodei called for the AI industry to deliberately slow its pace of capability development.
A Falcon 9 launch carrying the final three O3b mPOWER broadband satellites marked SpaceX's 700th Falcon flight and completed a Boeing-built constellation more than ten years in development.
Anthropic announced a permanent 25% boost to Claude Code's weekly usage limits — without mentioning it replaces a temporary 50% boost, making it a 17% reduction from what users actually have today.
ShieldCrash reads arbitrary files as SYSTEM on fully patched Windows 10, 11, and Server machines, bypassing a fix Microsoft shipped for the researcher's previous exploit less than a month earlier.
The Siri rebuild Apple showed off at WWDC 2024 and promoted in iPhone 16 ads — then delayed twice and paid $250 million to settle a false-advertising suit over — finally rolls out today as part of iOS 27.
A single malicious link was enough to backdoor any machine running Sogou Input Method — researchers at Gen Digital uncovered UNC3569 exploiting a chained three-flaw attack via an outdated Chromium 80 engine.
A maximum-severity path traversal bug in GitLab’s commits API lets unauthenticated attackers read any file on the server — active exploitation began within hours of disclosure.
No server was hacked and no password was stolen — fraudsters simply spoofed a government email account and asked. Revolut handed over passports, driving licenses, selfies, and transaction histories for a group of customers crypto investigator ZachXBT says were likely targeted for their wealth.
A 24-day exploitation campaign chained three CVEs — including a standalone CVSS 9.8 authentication bypass — to gain admin control of self-hosted Artifactory instances and deploy persistent Rust malware. Between 49–62% of public instances remain unpatched.
The Netherlands NCSC has assessed both pre-authentication RCE vulnerabilities as facing near-term exploitation. All organizations running Check Point Security Gateways should apply LivePatch Take 24 immediately.