Direct answer: Pantheon, the web hosting platform used by thousands of WordPress and Drupal sites, disclosed a security incident on October 1, 2026, in which attackers compromised customer websites and used them to go after Pantheon’s own platform infrastructure. Malicious activity began on September 29. As the investigation continued, Pantheon determined that a small number…
Direct answer: A suspected China-linked ransomware group known as Warlock (also tracked as Longlegs, Gold Salem, and Storm-2603) is actively exploiting both old and new Microsoft SharePoint vulnerabilities to break into critical infrastructure organizations. According to research from Symantec’s Threat Hunter Team published on October 1, 2026, the group hit at least four organizations in…
NVIDIA may break with years of tradition on its next graphics card generation. A September 22, 2026 report from hardware outlet GameGPU claims the RTX 6080 could become the first RTX 60-series card to reach store shelves, arriving ahead of the flagship RTX 6090 rather than trailing it the way second-tier cards normally do. The…
On September 27, 2026, Citrix published emergency security bulletin CTX697096 disclosing eight vulnerabilities in NetScaler ADC and NetScaler Gateway. Two of them, CVE-2026-88771 and CVE-2026-88772, are critical remote code execution flaws, both rated CVSS 9.5, that attackers had already been exploiting as zero-days before any patch existed. CISA added both to its Known Exploited Vulnerabilities…
In short: On September 29, 2026, President Donald Trump and the leaders of six major AI companies signed a voluntary White House accord on AI safety. Instead of new regulations, the pact asks companies to police themselves through internal controls, independent external audits, and board-level review. Days later, Trump named intelligence chief Jay Clayton as…
GitLab has patched a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970, that lets an authenticated attacker escape the prompt template sandbox and run arbitrary commands on self-hosted gateway servers. Rated 9.9 out of 10 on the CVSS scale, it affects only organizations that run their own AI Gateway infrastructure. If your team hosts…
The Dutch Institute for Vulnerability Disclosure was breached on September 21 by an autonomous AI agent that chained two previously unknown Zammad vulnerabilities together. The agent went from an unauthenticated connection to full root access on the server in seconds, with no human operator guiding it. One of those flaws still has no patch for…
Meta Muse for Small Business is a set of business skills and connectors built into the existing Muse personal AI agent app, announced by Meta on September 29, 2026. It is not a separate app. Once you connect your business tools inside Muse, you can give it a goal, like running your business or finding…
Cloudflare Clef is a new pair of open-weight AI models announced on October 1, 2026, built for one specific job: making decisions. Unlike ChatGPT or Gemini, Clef never writes paragraphs. You feed it some data and a few typed questions, and it answers with probabilities: how likely the answer is yes, which option from your…
On Friday, October 2, 2026, Amazon Web Services CEO Matt Garman announced a major new initiative aimed at the communities that host Amazon’s sprawling data centers. The company is committing more than $1 billion over the next five years to U.S. towns and counties where it builds and operates data centers, through a new program…