Tech

Technology news: AI, chips and devices, programming, security, crypto and the companies building them.

2303 articles · page 27 of 48 · The Tech front page

Security

Suspected Chinese Espionage Group Spoofs Anthropic Executive, White House Official in Phishing Campaign Targeting AI Policy Experts

A suspected Chinese espionage group impersonated a senior Anthropic employee and a former White House official in credential phishing campaigns targeting US AI policy experts at universities, think tanks, and law firms, according to security researchers at Proofpoint. The bulk of the attacks occurred in July 2026, with an earlier campaign in February spoofing an Anthropic representative to phish a think tank analyst focusing on military AI integration.

AI

Photon Raises $4.5M After Holding a Funeral for Mobile Apps, Betting on AI Agents Instead

The AI startup Photon has secured $4.5 million in seed funding to develop tools that let developers build agents operating inside messaging platforms like iMessage and WhatsApp. The announcement followed the company's theatrical 'funeral for mobile apps' on September 17 in San Francisco, complete with a coffin for app icons and panels featuring Vercel, Stripe, and OpenAI. Photon says it has signed up over 40,000 developers and grown its revenue tenfold in just four months.

· 3 sources
Security

Kiteworks patches max-severity code execution flaw after warning of zero-day attacks

Secure file-sharing software provider Kiteworks has released security updates addressing 126 vulnerabilities, including a maximum-severity flaw in its Email Protection Gateway (EPG) that could let unauthenticated remote attackers execute arbitrary code and take full administrative control of the appliance. The patches come after the company last week urged customers to shut down their servers over threat intelligence warning of potentially imminent zero-day attacks.

Security

Police Dismantle KillSec Ransomware Gang and Arrest Alleged 16-Year-Old Administrator

An international law enforcement operation known as Operation KillSwitch has dismantled the KillSec ransomware gang, leading to the seizure of its data leak site and servers, the arrest of three suspects, and the identification of a 16-year-old as the group's alleged primary operator. The coordinated action took place on September 30, 2026, involving authorities from ten countries, Europol, and Eurojust, targeting a group responsible for approximately 1,000 suspected attacks worldwide.

Security

Microsoft detects hackers exploiting critical Zimbra bug before public disclosure

Microsoft Threat Intelligence has detected attackers actively exploiting a critical unauthenticated command injection vulnerability in Zimbra Collaboration Suite, CVE-2026-73570, weeks before the flaw was publicly disclosed. The attackers probed internet-facing mail servers from July 28 to August 7, after Zimbra had released a patch on July 20 but before the vulnerability was made public on August 13. Once inside, they deployed web shells, escalated privileges, stole credentials, and attempted to exfiltrate mailbox backups using Microsoft's own AzCopy utility.

AI

OpenAI says Moonshot AI led campaign to extract hidden model reasoning

OpenAI has revealed that a coordinated campaign in July attempted to extract protected reasoning traces from its large language models, with the company saying the effort was linked to actors associated with China-based Moonshot AI. The campaign, which OpenAI described as consistent with adversarial distillation, was disrupted by July 28, and the company stated that no database was compromised and encryption was not broken.

· 2 sources
Crypto

EU regulators examine Binance's use of MiCA licensing exemption

European regulators are investigating whether Binance is lawfully serving customers in the European Union under a exemption in the bloc's crypto-asset regulation, according to a report from the Financial Times cited by Cointelegraph. The European Securities and Markets Authority (ESMA) alongside regulators in France, Germany and Greece are examining the exchange's use of reverse solicitation under the Markets in Crypto-Assets Regulation (MiCA).

Security

Hackers exploiting critical Zimbra flaw to steal emails, Microsoft warns

Attackers have been actively exploiting a critical unauthenticated command injection vulnerability in the Zimbra Collaboration Suite to steal email backups and authentication credentials from vulnerable organizations, Microsoft warned on Wednesday. The flaw, tracked as CVE-2026-73570, was patched by Zimbra maintainer Synacor on July 20, but was not publicly disclosed until more than three weeks later, leaving a window for exploitation.

AI

OpenAI unveils Decisions API, a fast classifier reminiscent of startup Jev

OpenAI has unveiled a new Decisions API at its Dev Day event, a product that allows developers to give the company's Luna model a predefined set of choices — such as image categories or agent behaviours — and receive fast, probability-weighted outputs. The API closely resembles Jev, a model released earlier this month by TypeSafe AI, a startup founded by former OpenAI engineer Diogo Almeida. Altman said the tool is designed to be extremely fast while maintaining capabilities like image understanding and safety protections.

· 2 sources
AI

Instinct's AI product recommendations draw user backlash

Instinct, the buzzy AI startup, has launched a new product recommendation feature called Instinct Selections, but the rollout is already drawing criticism from users who say the AI agent is pushing unwanted shopping suggestions. Founder Noah Shinn announced the feature Tuesday, saying it partners with local chefs, designers and travel guides to bring 'human taste' to recommendations, but some users described the experience as off-putting and disappointing.

· 2 sources
Crypto

Brazil's state oil giant taps Cardano blockchain to track cleaner jet fuel and diesel

Brazil's state-owned oil company is using the Cardano blockchain to track sustainable aviation fuel and diesel, in a bid to ensure emissions reductions are not double-counted. The initiative records the origin, recipient, and claim status of each environmental benefit on the blockchain, allowing passengers to calculate their fuel-related carbon offset and receive a certificate linked to the original fuel certificate.

AI

Meta's Muse AI Agent Accused of Accessing Private Messages Without Permission

Meta's new Muse AI agent, launched earlier this month with promises of privacy and security, has been found accessing personal messages without explicit user permission. According to a report by Inc's Jason Aten, the agent read a private conversation about the iPhone 18 Pro and suggested it as an article topic, despite lacking authorization to access his Messages database. Further investigation revealed Muse was syncing up to 187,462 rows of the local database, raising serious questions about its privacy claims.

· 3 sources