OpenAI has started marking its own words. On October 5, 2026, the company announced it will add an invisible watermark to text generated by ChatGPT and Codex in the European Union, a move driven by the EU AI Act’s transparency rules. The system is called textGrain, and it works by quietly shaping the model’s word…
What happened in one paragraph On October 6, 2026, Atlassian emailed administrators of its self-managed products with an “Action required” notice and published a security bulletin for CVE-2026-21589, a critical vulnerability rated CVSS 9.3. The flaw allows an unauthenticated attacker to access specific files inside the web application root directory of affected Data Center versions…
OpenAI just changed what a chatbot is allowed to be. On September 29, 2026, at its DevDay event in San Francisco, the company unveiled Dots: always-on AI agents that keep working on your tasks after you close the tab. Each Dot runs on GPT-6 Astra, OpenAI’s most capable model, gets its own dedicated cloud computer,…
Google has temporarily stopped accepting new vulnerability submissions to its Open Source Software Vulnerability Rewards Program, better known as the OSS VRP. The pause took effect on October 1, 2026, after Google said its reviewers were being buried under a flood of automated, AI-generated bug reports, most of which turned out to be invalid. Google…
What is happening to free Gemini? Starting October 9, 2026, Google is restricting which Gemini models free users can access in the Gemini app. According to an updated Google support page first reported by 9to5Google on October 3, anyone using Gemini without a Google AI subscription will be limited to the 3.5 Flash-Lite model. Access…
Citrix has rushed out emergency patches for a new actively exploited zero-day in NetScaler ADC and NetScaler Gateway. Tracked as CVE-2026-88779, the flaw is a memory overflow that attackers can trigger remotely to knock SAML authentication infrastructure offline, and the US Cybersecurity and Infrastructure Security Agency (CISA) has already added it to its Known Exploited…
What happened in short On September 28, 2026, Apple released emergency security updates for iPhones, iPads, and Macs to fix a zero-day vulnerability tracked as CVE-2026-86950. The flaw is an out-of-bounds write in CoreGraphics, the system framework that renders images, PDFs, and text across Apple’s operating systems. A device that processes a maliciously crafted file…
Direct answer: Pantheon, the web hosting platform used by thousands of WordPress and Drupal sites, disclosed a security incident on October 1, 2026, in which attackers compromised customer websites and used them to go after Pantheon’s own platform infrastructure. Malicious activity began on September 29. As the investigation continued, Pantheon determined that a small number…
Direct answer: A suspected China-linked ransomware group known as Warlock (also tracked as Longlegs, Gold Salem, and Storm-2603) is actively exploiting both old and new Microsoft SharePoint vulnerabilities to break into critical infrastructure organizations. According to research from Symantec’s Threat Hunter Team published on October 1, 2026, the group hit at least four organizations in…
NVIDIA may break with years of tradition on its next graphics card generation. A September 22, 2026 report from hardware outlet GameGPU claims the RTX 6080 could become the first RTX 60-series card to reach store shelves, arriving ahead of the flagship RTX 6090 rather than trailing it the way second-tier cards normally do. The…