Tech

Technology news: AI, chips and devices, programming, security, crypto and the companies building them.

2282 articles · page 1 of 48 · The Tech front page

Security

CISA confirms active exploitation of maximum-severity GitLab flaw

The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers are actively exploiting a maximum-severity vulnerability in GitLab, tracked as CVE-2026-97229. The flaw, which was patched earlier this month, could allow unauthenticated remote attackers to run arbitrary code via a maliciously crafted regular expression in CI/CD configuration files. CISA has added the vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog and ordered federal agencies to secure their servers by Sunday.

·2 min
Hardware & Devices

Intel CFO says Wildcat Lake chips sold out, expects no memory improvement in 2027

Intel CFO David Zinsner said during the company's latest earnings call that its budget-focused Wildcat Lake laptop chips are sold out, with demand having 'seen significant growth.' CEO Lip-Bu Tan said the chips' demand 'is outstripping supply,' adding that the industry is navigating one of the most significant supply shortages in history, driven by demand for artificial intelligence. Zinsner also warned that the memory shortage is unlikely to ease before 2028, telling investors, 'Make no mistake, we are not optimistic about next year in terms of memory.'

·2 min
Security

Researchers find 'Embrace' flaws in five AI developer tools; OpenAI, Microsoft bugs unpatched

Researchers at security firm Forever Security have discovered vulnerabilities in five popular AI developer tools that could let attackers execute code on host machines, steal files, or spoof website addresses. The flaws, which affect Cursor, GitHub Copilot, Anthropic's Claude Desktop, Microsoft's VS Code and OpenAI's Codex, stem from a common class of weakness the company calls 'Embrace', over-empowered embedded browsers. While Cursor and GitHub Copilot have been patched, flaws in VS Code and Codex remain unpatched, according to the researchers.

·3 min
Tech

Microsoft begins Windows 11 preview rollout with customisable menu as licence business declines

Microsoft has begun rolling out a preview update for Windows 11 that allows users to customise the right-click context menu, addressing a persistent complaint from power users about familiar command locations being hidden behind icons or an additional click. The update arrives alongside the company's quarterly financial report, which showed a continued decline in the business of selling Windows licences for new PCs.

·2 min
Hardware & Devices

Intel confirms Nova Lake will use 18A-P node, more details at CES

Intel CEO Lip-Bu Tan confirmed that the next-generation Nova Lake desktop processors will be the first client product to use the company's enhanced 18A-P manufacturing node, with further details to be shared at CES in January. The announcement came during Intel's Q3 2026 earnings call, where executives also said the company intends to take Panther Lake capacity offline to produce more Granite Rapids data center chips and warned of a significant contraction in the PC market.

·3 min
Crypto

Polymarket suspends trading after crypto-draining script breach, about $2.5M traced to suspected attacker wallet

Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. The company said it had fixed the issue and referred the breach to law enforcement, promising to make affected users whole.

·3 min·5 sources
Crypto

Binance uncovers additional breach points as $3bn of $6.3bn hack frozen

Binance said investigators have found additional breach points in the security incident that saw about $6.3 billion in digital assets stolen, with roughly $3 billion of the funds frozen on-chain so far. The world’s largest cryptocurrency exchange, which initially suspected a compromised DevOps engineer’s laptop, said withdrawals would remain suspended for up to 48 hours while a security revamp is completed.

·3 min·63 sources
Security

Hackers exploit Cisco SD-WAN flaw to deploy 'KeyDrift' malware, researchers say

A hacking group was observed exploiting a patched Cisco vulnerability to deploy a custom malware framework called KeyDrift in attacks on space and satellite services, defense and aerospace technology, and policy research organizations, Cisco Talos researchers reported. The group, tracked as UAT-11473, appears to overlap with the Chinese state-sponsored Volt Typhoon's 'Silent Train' covert access network, though Talos made no definitive links.

·2 min
AI

Ex-Palantir executives raise $17M for Dream’s AI building-design models

Dream, a startup founded by former Palantir executives Andy Elder and Arjun Mathur, emerged from stealth Wednesday with $17 million in seed funding led by Andreessen Horowitz to build AI world models that automate building design and engineering. The company aims to overhaul the architecture, engineering and construction (AEC) industry, where professionals still manually draw designs on legacy software.

·3 min·3 sources
Crypto

Hyperliquid’s HYPE Jumps 13% as NYSE Owner ICE Moves to Bring Perpetual Futures to US

Hyperliquid’s HYPE token surged about 13% on Thursday to roughly $91 after Intercontinental Exchange (ICE), the owner of the New York Stock Exchange, signed a definitive agreement to bring Hyperliquid-based perpetual futures to the United States through Trade[XYZ], a company that runs markets for real-world assets on Hyperliquid. The deal still requires regulatory approvals and has no launch date.

·2 min·2 sources
Security

GCHQ cannot account for thousands of storage devices, watchdog finds

Britain's intelligence agency GCHQ cannot locate thousands of removable storage devices that may contain highly sensitive intercepted communications, according to a report from the Investigatory Powers Commissioner (IPCO) published Thursday. Brian Leveson, the Investigatory Powers Commissioner, said GCHQ "still cannot tell me what has happened to removable media that may hold sensitive data, years after I first raised it with them."

·2 min
Security

Ransomware hits exposed Synology NAS, likely exploiting 18-month-old flaw

A Reddit user says files on their Synology DS918+ NAS were encrypted in a ransomware attack; analysis of logs and operating system files suggested the attack likely involved CVE-2024-10441, a remote code execution vulnerability revealed 18 months ago. The device had its web interface exposed to the internet and was roughly a year and a half out of date with security patches, according to a detailed write-up by user NakamuraHwang.

·2 min
Security

CISA warns of Fragnesia Linux flaw exploited alongside PHP2Shell vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug, tracked as CVE-2026-46300 and named Fragnesia. In a Monday report, Dream Security analysts said the vulnerabilities were used to breach more than two dozen servers, including three belonging to a U.S. government-affiliated organization.

·2 min·2 sources