Israel is holding its first elections since the Hamas-led attacks of 2023 triggered a chain of conflicts across the region — a quick guide the key players, issues and when to expect a result.

Comments

The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics.

The post Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics appeared first on SecurityWeek.

An AI model said it wouldn’t use any tools, then tried to send something to a server in Beijing anyway, and while researchers say it’s probably a training quirk and not espionage, the whole thing has people asking how much to trust free Chinese AI.

CEO admits service used for foreign exchange trading had holes company was slow to fix

Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.

It's more important than chips, 'leccy and the net, after all

Not a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price

Comments

Months after Elon Musk declared that the xAI model would outclass Christopher Nolan’s mythological epic, the bot itself admitted defeat.

Apple has released patches for 304 vulnerabilities in its October 2026 update, maintaining its consistent release schedule with prior updates. This release is crucial for cybersecurity, as it addresses potential threats and ensures the protection of Apple's network, devices, and user data against unauthorized access and cyber attacks.

Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search

The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. […]

Turns out selling to big companies isn’t about having the shiniest tech: it’s about hitching a ride on a giant’s sales team.

How Greptile uses GPT-6 Astra to test user workflows, Daybreak to strengthen security, and Codex to reduce rework.

Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.

But there's not much evidence this is anything more than echoes of unsanitized training data

Anthropic’s S-1 filing is hundreds of pages long—and it leaves out quite a few financial details. “Anthropic owes investors more information,” one analyst tells WIRED.

South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. […]

Comments

A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.

A 'strong illustration of the risks associated with failing to rotate a potentially exposed key'

Included is the ability to limit which applications Siri can directly access.

Voluntary exit offer extended to about one-quarter of existing Softies

Comments

The plaintiffs allege they are no longer able to do their work without reliable access to information delivered by the White House press.

DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. […]

Fusion startups face a new challenge, one unrelated to plasma physics: Give the government shares in exchange for funding awards or go it alone?

US robotics company stands by ICE deal as more than 300 employees warn of risk.

Comments

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.

According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks.

"When you

Ukraine says Starshield back to normal, denies misuse of Starlink commercial service.

AI is accelerating vulnerability discovery and exploitation, shrinking the time between flaw disclosure and attack. Organizations face more known vulnerabilities than ever, with PHP2Shell highlighted as an example requiring urgent leadership attention to cyber defenses.

An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.

Redmond joins growing list of software maintainers scrambling to patch compression flaw

Comments

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code.

PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but

Bedrock Robotics, which is now valued at $4.1 billion, is particularly focused on autonomous excavators, in part because of a growing shortage of skilled operators.

Node.js patched a critical out-of-bounds write vulnerability in its bundled Brotli decoder affecting versions 26.x, 24.x, and 22.x. The flaw, rated CVSS 9.2, enables memory corruption leading to crashes, data disclosure, or remote code execution when applications decompress attacker-controlled Brotli data. No exploitation observed as of October 26, 2026.

Comments

Anthropic’s IPO prospectus is 355 pages and full of never before disclosed company information.

Cellebrite’s Autumn 2026 Release introduces enhanced agentic AI-powered investigations with Genesis, expanded device access and new capabilities to help teams uncover critical evidence faster.

Anthropic’s S-1 shows more than half of its $100,000-plus customers now use both the Claude Platform and a first-party app, a cross-selling playbook reminiscent of Amazon that’s making enterprise customers stickier.

SpaceX has locked in a binding commitment for roughly $40 billion in financing to pay for AI chips and related data center equipment, the company disclosed in a regulatory filing Monday. In a statement, SpaceX called it the “largest committed GPU financing” ever.

Comments

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. […]

Comments

Binalyze discusses how the PHP2Shell vulnerability created simultaneous challenges for MSSPs: handling customer inquiries about potential breaches and managing new incident response requests, while highlighting that patching alone doesn't provide forensic visibility into whether attacks occurred.

Anthropic thinks “closing the loop” is the best path to AI triumph—and a recipe for “existential” threats to humanity.

The buyout offers mark Microsoft's latest efforts to cut costs and rework its workforce.

Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware.

"A consistent pattern of attacker behavior has emerged across these incidents: the use of the same throwaway tenants, the same 'IT

Claude maker reveals financials and warns investors its AI models could blackmail humans, resist shutdown, or go rogue

Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. […]