News

Tuesday 13 October 2026 Latest

GitLab’s CVSS 10 fix, SonicWall attacks and 64-day certificates

• GitLab fixes CVSS 10 flaw CVE-2026-97229 in self-managed servers
• SonicWall SMA1000 flaw CVE-2026-102255 is now under attack
• Let's Encrypt certificates will last 64 days from February 2027
• Google is feeding rank trackers wrong results, Nozzle says
• Google Discover may become an AI "concierge", a job ad suggests
• Microsoft Maia 300 will run its AI services from 2027

and 5 more stories

Monday 12 October 2026

Zombify exploit, a dead store tag and Search Console delays

• Zombify WordPress plugin flaw has public exploit code and no fix
• Expired ecomtrack.io domain turns old store tags into a malware trap
• Chrome and Edge miss lookalike domains built with two letters
• Google Search Console performance data is up to 67 hours late
• Microsoft Decision-1 makes yes or no AI answers almost free
• Nvidia in talks to buy or back open model maker Reflection AI

and 3 more stories

Sunday 11 October 2026

Claude agents hit real sites, WordPress fixes and Bun 1.4.3

• Anthropic says Claude agents hacked and spammed real websites
• Four WordPress plugins fix critical CVSS 9.8 flaws
• GitHub Actions worm adds fake "security audit" workflows
• Vercel will delete Pro deployments older than 30 days from 23 October
• Cloudflare's Clef-omni AI model reads text, images, audio and video
• Bun 1.4.3 adds bun check, a fast TypeScript type checker

and 5 more stories

Saturday 10 October 2026

Bricksforge attacks, Deno joins Cloudflare and a Gemini agent

• Bricksforge flaw CVE-2026-85097 is used to hack WordPress sites
• Deno joins Cloudflare, and Deno Deploy shuts down in six months
• Citrix fixes critical NetScaler SAML flaw CVE-2026-107406
• Next.js will ship a critical security update on 14 October
• Google launches Gemini as one agent for all your work
• Anthropic offers free AI security scans for open-source projects

and 4 more stories

Friday 9 October 2026

GPT-6 for everyone, Claude Haiku 5.5 and an npm wiper worm

• GPT-6 rolls out to every ChatGPT user with interactive answers
• Claude Haiku 5.5 costs 90% less than Haiku 4.5 on most jobs
• Tensorlake npm package hit by a worm that wipes you if you revoke
• WooCommerce 11.2.0 is out with security fixes
• WordPress MCP Adapter is now an official plugin on WordPress.org
• Google's September 2026 spam update has finished

and 4 more stories

Thursday 8 October 2026

Ninja Forms attacks, WordPress 7.1.3 and Mistral Large 4

• Ninja Forms flaw CVE-2026-94504 is used to hack WordPress sites
• WordPress 7.1.3 fixes seven security flaws
• Atlassian CVE-2026-21589 is now under attack
• Chrome 155 is out with 247 security fixes
• Mistral Large 4 is a 1 trillion parameter model with open weights soon
• Google's Nano Banana 2.1 makes 4K images at half the price

and 5 more stories

Wednesday 7 October 2026

Google’s fake author warning, Atlassian fix, ChatGPT watermarks

• Google warns against fake authors and AI headshots
• Atlassian fixes critical CVE-2026-21589 in Jira and Confluence
• LibreOffice flaw lets a spreadsheet run code with no macro warning
• OpenAI adds hidden watermarks to ChatGPT text in the EU
• OpenAI makes GPT-6 Astra and GPT-6.1 Sol about 50% faster
• Wikimedia says OpenAI agents made edits and hammered its APIs

and 4 more stories

Tuesday 6 October 2026

Citrix NetScaler zero-day, ChatGPT image ads and Google timelines

• Citrix NetScaler zero-day CVE-2026-88779 is under attack
• Rejetto HFS file server flaw CVE-2026-61500 is now exploited
• Dell System Update flaw CVE-2026-86360 gives attackers root
• OpenAI will show ads in ChatGPT while it makes your images
• Google shares how long crawling and indexing really take
• Google says it now uses AI to find AI spam

and 5 more stories

Monday 5 October 2026

Gemini’s free tier shrinks, Asus router fixes and Kolibri-1

• Google cuts Gemini models for free and AI Plus users on 9 October
• Asus fixes a router flaw that runs commands from a VPN file
• Beaver Builder 2.11.0.6 fixes a shortcode flaw that needs no login
• Aleph Alpha's Kolibri-1 is a free model you can run yourself
• Google stops some bug bounty reports after a flood of AI junk
• Simon Willison wants hard spending caps on every cloud service

and 3 more stories

Sunday 4 October 2026

Google’s main content rule, Cloudflare for all and GPT-6 prices

• Google says main content is the key to page quality
• Cloudflare brings Enterprise tools to Free, Pro and Business plans
• Cloudflare Traces follows each request from edge to origin
• Cloudflare launches a Web Search API for AI agents
• Apple will tighten Mac Full Disk Access because of AI agents
• OpenAI's GPT-6 guide puts all its API prices in one place

and 4 more stories