News

Saturday 10 October 2026

Bricksforge attacks, Deno joins Cloudflare and a Gemini agent

• Bricksforge flaw CVE-2026-85097 is used to hack WordPress sites
• Deno joins Cloudflare, and Deno Deploy shuts down in six months
• Citrix fixes critical NetScaler SAML flaw CVE-2026-107406
• Next.js will ship a critical security update on 14 October
• Google launches Gemini as one agent for all your work
• Anthropic offers free AI security scans for open-source projects

and 4 more stories

Friday 9 October 2026

GPT-6 for everyone, Claude Haiku 5.5 and an npm wiper worm

• GPT-6 rolls out to every ChatGPT user with interactive answers
• Claude Haiku 5.5 costs 90% less than Haiku 4.5 on most jobs
• Tensorlake npm package hit by a worm that wipes you if you revoke
• WooCommerce 11.2.0 is out with security fixes
• WordPress MCP Adapter is now an official plugin on WordPress.org
• Google's September 2026 spam update has finished

and 4 more stories

Thursday 8 October 2026

Ninja Forms attacks, WordPress 7.1.3 and Mistral Large 4

• Ninja Forms flaw CVE-2026-94504 is used to hack WordPress sites
• WordPress 7.1.3 fixes seven security flaws
• Atlassian CVE-2026-21589 is now under attack
• Chrome 155 is out with 247 security fixes
• Mistral Large 4 is a 1 trillion parameter model with open weights soon
• Google's Nano Banana 2.1 makes 4K images at half the price

and 5 more stories

Wednesday 7 October 2026

Google’s fake author warning, Atlassian fix, ChatGPT watermarks

• Google warns against fake authors and AI headshots
• Atlassian fixes critical CVE-2026-21589 in Jira and Confluence
• LibreOffice flaw lets a spreadsheet run code with no macro warning
• OpenAI adds hidden watermarks to ChatGPT text in the EU
• OpenAI makes GPT-6 Astra and GPT-6.1 Sol about 50% faster
• Wikimedia says OpenAI agents made edits and hammered its APIs

and 4 more stories

Tuesday 6 October 2026

Citrix NetScaler zero-day, ChatGPT image ads and Google timelines

• Citrix NetScaler zero-day CVE-2026-88779 is under attack
• Rejetto HFS file server flaw CVE-2026-61500 is now exploited
• Dell System Update flaw CVE-2026-86360 gives attackers root
• OpenAI will show ads in ChatGPT while it makes your images
• Google shares how long crawling and indexing really take
• Google says it now uses AI to find AI spam

and 5 more stories

Monday 5 October 2026

Gemini’s free tier shrinks, Asus router fixes and Kolibri-1

• Google cuts Gemini models for free and AI Plus users on 9 October
• Asus fixes a router flaw that runs commands from a VPN file
• Beaver Builder 2.11.0.6 fixes a shortcode flaw that needs no login
• Aleph Alpha's Kolibri-1 is a free model you can run yourself
• Google stops some bug bounty reports after a flood of AI junk
• Simon Willison wants hard spending caps on every cloud service

and 3 more stories

Sunday 4 October 2026

Google’s main content rule, Cloudflare for all and GPT-6 prices

• Google says main content is the key to page quality
• Cloudflare brings Enterprise tools to Free, Pro and Business plans
• Cloudflare Traces follows each request from edge to origin
• Cloudflare launches a Web Search API for AI agents
• Apple will tighten Mac Full Disk Access because of AI agents
• OpenAI's GPT-6 guide puts all its API prices in one place

and 4 more stories

Saturday 3 October 2026

FortiMail zero-day, a WordPress key thief and Google’s AI rule

• Fortinet FortiMail zero-day is under attack and has no patch yet
• TIKTOUK toolkit steals keys from 37,000 WordPress sites
• Google says it is "critical" to fact-check all AI content
• ChatGPT can now show you wearing clothes before you buy
• Microsoft launches MAI voice models for live speech agents
• Cloudflare AI Search is now ready for your site search

and 4 more stories

Friday 2 October 2026

Gemini 4 Argon, a self-healing WordPress backdoor and more

• Google's Gemini 4 Argon is out, but only for security teams first
• WordPress backdoor "SC" rebuilds itself every time you delete it
• Zammad helpdesk zero-days were used to break into DIVD
• MikroTik RouterOS has a critical flaw that needs no login
• Over 543,000 working passwords and keys sit in public GitHub code
• Google's spam update hits again with a second wave on 30 September

and 5 more stories

Thursday 1 October 2026

OpenAI’s GPT-6.1 Sol and dots, a Chrome 154 fix and more

• OpenAI's GPT-6.1 Sol nearly matches Astra at a fifth of the price
• OpenAI launches dots, always-on agents, and Sign in with ChatGPT
• Chrome 154 update fixes 33 security flaws, one of them critical
• TeamViewer 15.82 fixes five serious flaws on Windows, Mac and Linux
• AI coding agents put 13,000 private screenshots on public GitHub
• Cloudflare wants to issue free SSL certificates like Let's Encrypt

and 3 more stories