Google has confirmed that attackers compromised three country-code domain registries and used the hijacks to obtain 12 unauthorized HTTPS certificates for Google and YouTube domains. Google’s own systems were not breached, but the incident put every domain under .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa) at risk. With one of those certificates, an…
The short answer Microsoft has launched its most powerful laptop ever: the Surface Laptop Ultra, the first Surface built around Nvidia’s RTX Spark chip. It starts at $2,599, goes up to $5,899 fully loaded, and starts shipping on October 16, 2026. The headline spec is up to 128GB of unified memory and one petaflop of…
Mistral just announced the biggest AI model it has ever built. Mistral Large 4 — nicknamed Le Chonk inside the company — is a 1 trillion-parameter multimodal model that will be released as open weights at the end of October 2026. It is available right now in public preview through Mistral’s API, it is priced…
Revolut has promised to cover the cost of new identity documents for customers whose personal data was handed to hackers through a scam built on a real Italian government email account. Around 680 customers were affected after the bank answered fraudulent data requests that looked like legitimate law enforcement inquiries. Here is what happened, what…
Day one of Pwn2Own Ireland 2026 is over, and the scoreboard says it all: on October 6, 2026, security researchers earned $388,500 in prizes after exploiting 32 zero-day vulnerabilities across smartphones, smart home gear, printers, and AI systems. Samsung’s brand-new Galaxy S26 flagship was hacked twice before the day ended. Pwn2Own Ireland is the annual…
The short version: Apple is reportedly teaming up with LG Electronics on a new line of smart home accessories — a video doorbell, a smart deadbolt lock, a thermostat, indoor and outdoor security cameras, a floodlight camera, and a temperature sensor — all designed to work with Apple’s upcoming smart home hub. The products will…
Apple just changed the rules for one of the most powerful permissions on the Mac, and it did so because of AI agents. In a notice posted to its developer news site on October 2, 2026, the company said it will introduce new controls so that granting Full Disk Access requires, in its words, very…
Direct answer: On October 5, 2026, the FBI removed an Accenture contractor after a cyberattack by the ShinyHunters group breached the bureau’s Oracle PeopleSoft platform and exposed the personal details of thousands of FBI employees. FBI cyber chief Brett Leatherman said the intrusion happened because a contractor failed to apply a security patch that Oracle…
Short answer: On the morning of October 6, 2026, thousands of ASOS customers received a rogue push notification claiming the retailer had been hacked, with a message addressed to the company’s data protection officer saying its Snowflake data instance was “fully compromised.” ASOS said it was aware of the reports and is investigating, but has…
A security researcher has reported a full guest-to-host virtual machine escape in KVM, the Linux hypervisor that underpins most of the public cloud, and Vercel has confirmed it as a genuine zero-day. The finding came through Vercel’s Sandbox bug bounty program, which paid out its maximum single-report award of $50,000. No CVE number, affected versions,…