Zero-Click Spyware Was Delivered Through Online Ads: How AdFection Worked
Citizen Lab traced zero-click spyware from a targeted ad to 45 Al Jazeera devices. Here is how AdFection worked and what defenders should block.
Ivanti Connect Secure Zero-Day Can Evade Integrity Checks: What Admins Should Do
Attackers chained an Ivanti Connect Secure auth bypass with two other flaws for root access, then erased evidence. Here is what to patch, hunt and rotate now.
GPT-5.6 Sol Helped Build a Full Chrome Exploit in Six Days
XBOW used GPT-5.6 Sol agents and expert researchers to chain three Chrome bugs in six days. Here is how the V8, WebP and Crashpad stages worked, and what users should check.
Firefox Enterprise Is Not Firefox ESR: What Mozilla’s New Browser Adds
Mozilla’s new Firefox Enterprise adds a self-hosted console, DLP, AI controls and SIEM integration. Here is how it differs from Firefox ESR and what IT teams should test.
YouTube Music Labels AI Songs, While Deezer Lets Listeners Hide Them
YouTube Music is labeling AI-made songs, while Deezer will let users hide them from search. Here is what each policy covers and where detection can fail.
Python 3.15 Makes Windows on Arm Native by Default: How to Check Your Stack
Python 3.15 now defaults to Arm64 on Windows-on-Arm PCs. Here is how to verify the runtime, find incompatible wheels, and add native CI.
Windows October Update Fixes Zero-Day but Can Break Remote Desktop
Microsoft’s October 2026 Windows update fixes an exploited Shell bypass but can break Remote Desktop for some non-admin users. Here’s how to prioritize rollout.
NVIDIA Open-Sources Run:ai: What GPU Teams Get and What They Don’t
NVIDIA has open-sourced the full Run:ai GPU orchestration platform. Here is what the Apache-licensed release includes, how GPU sharing works, and where enterprise support still costs extra.
HomePod mini 2 Costs $149, but Siri AI Won’t Be Ready at Launch
Apple’s HomePod mini 2 adds an S10 chip and new audio options for $149, but Siri AI arrives later and four-speaker surround needs $895 in hardware.
North Korean IT Workers Hit 70+ U.S. Companies: What Employers Should Check
The FBI says North Korean remote IT worker schemes reached more than 70 U.S. companies. Here are the laptop-farm, identity and network signals employers should check.