188 stories published this day, by desk. Times are Pacific.
Security11 stories
- Rhysida gives Berlin seven days before it auctions 5.79TB of city data
- Fully patched Magento stores are being backdoored four days ahead of Adobe's next security release
- Unpatched TeamCity server gave attackers AWS IAM credentials from JetBrains' Cadence backup
- 5,400 hacked WordPress and PrestaShop sites pull their ClickFix payload from a BNB testnet contract
- A single ChatGPT fault took out login, Codex and the Compliance API together
- State Department puts $10 million on the IRGC officer it says commands CyberAv3ngers
- Agents restricted to reading the web wrote 18,000 posts to a dormant German wiki
- Community maps in MECCHA CHAMELEON could write files anywhere on a player's disk
- Guest admin is enough to break out of VMware Workstation onto the host
- Attackers chain two PaperCut flaws to lift LDAP and SAM credentials from school print servers
- US agencies assess Volt Typhoon's infrastructure access as pre-positioning for disruption
Build42 stories
- WshShell.Run drops the child's exit code unless you call it with parentheses
- A backdoored LiteLLM package cleared 119,000 downloads before PyPI quarantined it
- Origin validation ships off by default in four of five dominant WebSocket frameworks
- One API key per platform puts every customer's system prompt in the same cache namespace
- authentik checked the PKCE verifier only when the request bothered to include one
- CVE-2025-54136 turns a one-time MCP approval into a permanently mutable surface
- agent-cost's test fixture leaves six million tokens unpriced when settings can't be determined
- One registry entry gates 16 of FreeToolHub's 21 in-browser tools on a single model
- One curl from a home laptop in Japan added three requests to a ClaudeBot total
- Ten hook events in Claude Code silently drop the matcher field you scoped them with
- A Nuxt catalog multiplies 169 base routes by four locales to fix its prerender list at 676
- Opsgenie's schedule export drops every rotation without the expand=rotation flag
- Four Actors topped a cost table on RAM they never used
- A centre sliver moves scroll offset zero onto the row you want to reach
- clio-coder advertised two compaction settings its orchestrator never read
- React 19 puts the deleted head tags back before page.content() serializes them
- A loader on 5,400 hacked sites borrows the page's own CSP nonce to execute
- Mastodon's stylesheets ignore its own spacing scale 564 times
- Arista's decap path checks the destination IP but never the tunnel protocol
- One shell script before every tool call replaces the permission prompt for headless agents
- SWE-Gate flunks 221 of 644 test-passing agent patches on rules mined from PR comments
- OpenAI hands developers a prompt to stop GPT-6 Astra waiting for permission
- A cursor declaration in the route file gates the Pinia Colada adapter at compile time
- DeepSeek's V4 Pro now bills seven hours a day at twice the off-peak rate
- A camelCase component name ended four months of patching a search library
- Three dated OpenAI model retirements land exactly six months after the notice
- Arista names four fixed VCO builds for a command injection already in use
- Counting from the vendor advisory stretches the exploitation window to 116 days
- Fable 5.1 doubles science benchmark score, cuts bug-hunt task time by 3.6 seconds
- Deep scrub is the only place Ceph counts the OMAP keys behind its large-object warning
- Post-training agents pick their strategy before they run a single experiment
- A $28 agent run swapped BCD for base-2^64 limbs and built its own oracle
- An eTIMS retry ladder allows KRA 2 hours 8 minutes to return a signature
- Four MCP path-traversal CVEs slipped past a scanner rule scoped to file reads
- Full Data Access ships your table and field names to whoever hosts the extension
- A nine-column job table retired three services that were built correctly
- A synthetic test image caught macOS Vision shredding a table into columns
- The 4KiB workaround for badblocks runs out of headroom at 17.6TB
- Splitting log templates from variables cut Uber's HDFS bill to $10K a year
- Anthropic asks a court to treat dataset names like source code
- A 48-hour ENOSPC hunt ended with one run of df -i
- A missing service account explains the Apigee eval org that provisioned green and served 502
Invest30 stories
- France's bond spread sits two basis points below the line LPL calls a fiscal-stress ceiling
- BNB Chain Holds About a Third of the $3.1bn Tokenized Stock Market Where Binance Launched bStocks
- Connecticut warns of DeFi risks after $200,000 loss, naming seven offshore platforms as examples
- Trump answers a 162,000-job August by threatening to cut off trade over interest rates
- California's SB 122 taxes the SaaS subscription while exempting the compute it runs on
- Madrona finds 83% of enterprise AI buyers shipping under half their pilots
- Warsh's first Jackson Hole keynote moves September hike odds to 50-60%
- A Minnesota judge lets the state fine AI nudes at up to $500,000 an image mid-lawsuit
- Treasury designates the Istanbul bank it says turned Chinese oil payments into gold
- Nium's purchase of Cypher gives Moonwell cardholders 30 days to empty their cards
- Hauling the data center buildout means fronting record diesel before the invoice clears
- Claude formalized Fermat's Last Theorem in 11 days against a human project funded through 2029
- Amid AI threats, qualified CISOs land seven-figure pay packages as cyber budgets rise 6%
- As ~3,000 data centers advance, two-thirds of Americans oppose one nearby
- Vance's 15 million escorted barrels run three times the independent 28-day Hormuz average
- Companies are expanding AI use to become more discoverable to shoppers
- LinkedIn's seasonality data prices September as the year's most crowded month to post a job
- Bessent likely to lead US delegation as US-China AI safety talks near, with standards among contested issues
- Isbell's class action against Suno runs on 17 counts of state identity law
- IMF traces El Salvador's bitcoin growth since mid-2025 to private donations
- Diesel's 56 percent war premium reaches grocery cost bases before shelf tags
- Gen Z 28-year-olds own homes at 86% of the boomer rate
- FDA foreign food inspections are running at 53% of their fiscal 2024 pace
- Scan.com funds its US imaging network with $130M of debt against a $165M run rate
- Nvidia pays $718 per Hugging Face developer to own the open-model shelf
- Tesla's Cybercab rally banks 5.4% before anyone outside Austin counts the cars
- Washington and London divide up prosecutions of the crypto scam compounds
- Anthropic's mid-October pitch asks public investors to double the multiple its last private round paid
- Nscale books at least $3.5bn from a robot company it now part-owns
- OpenAI ships a model it grades critical on its own cybersecurity threshold
Product24 stories
- Patria turned out Finland's first F135 engine seven months after final assembly began
- DIU pays GE Aerospace to build one hypersonic test bed that many programs can ride
- Salesforce's three new Agentforce editions absorb the line items buyers used to negotiate
- Abbott now campaigns on cutting the data center tax breaks Texas used to advertise
- An umpire paused Osaka's match to quiet influencers the USTA says it never credentialed
- Apple reportedly plans to split iPhone launches, with base models arriving next spring
- Three of the four safety features behind N+'s "world's safest e-bike" went untested in Berlin
- Extra memory made post-training agents better at the plan they already picked
- 700 of OpenAI's supposedly isolated test agents joined the Hugging Face attack
- Ohio joins Google Wallet's state ID list 45 months after Maryland
- Seattle Times and Newsday sue OpenAI and Microsoft over copyright, paywall bypass and lost revenue
- Crypto's CLARITY Act faces slim odds of passing before midterms as House schedule shrinks
- Apple's report cap blocked a seven-person firm with a patched Mac bug to its name
- UIUC's quasi-periodic photonic crystal lased single-mode at room temperature at 1.5 microns
- OpenAI's Astra turns the unattended desktop session into the thing teams delegate
- Apple debuted its first 2nm chip in an $899 Mac mini instead of an iPhone
- Chinese banks and telcos are retailing AI tokens in a unit their customers cannot price
- Missing the SaaS renewal notice deadline hands vendors the leverage
- Spammers pick up the invisible Unicode block that AI jailbreakers found first
- Claude, ChatGPT and Grok Went Down at Nearly the Same Time - Cause Unclear
- Apple's 41-device roadmap mostly promises faster chips inside the same cases
- Take-Two's outsourced takedown blitz struck a journalist for posting public court orders
- Ukraine opens its drone flight records to 100-plus companies and the UK government
- Job seekers pay up to $600 a year to beat a filter some employers never switch on
Leadership29 stories
- Victoria's disclosure trigger keeps the funders of a $100,000 AI ad month unnamed
- Three of seven inputs a sales agent needs sit outside the company's own systems
- BCG's cloud AI benchmark moves the cost question from the provider to the workload
- Seven cents a million tokens buys the capability that cost twenty dollars in 2022
- Murmuration survey: nearly 30% of young Americans reject political labels, most say they couldn't cover a $500 expense
- The FBI prices a fled CEO at $150,000 against a $26.8m order
- GLM-5.3-Flash benchmarks its tenth-of-the-price claim against its own predecessor
- BodySpec's co-founders take turns covering 90 percent of the family load
- Rising rates and congressional inaction moved Bernstein off his calm debt position
- Horizon3's twenty-year apprenticeship bought a hiring list and a personal credit line
- The Army capped how much new technology it let into its Fort Irwin urban assault
- SAP names token spending as the competitor for its customers' budgets
- A Mount Shasta ranger counts three AI-assisted mishaps in one climbing season
- Camp Jomsborg teaches rifle marksmanship to Ukrainians with two years at the front
- Walmart expands its restaurant-delivery push with 150 Dunkin' counters inside its own stores
- Flock's 120,000 cameras turn ALPR procurement into a council-floor fight
- Just 27 investor letters filed on SEC's filer-relief plan, leaving major asset managers absent
- OpenAI asks Judge Stein to measure copying by output rather than by corpus
- PostgreSQL's logical replication skipped the library check that guarded non-superusers
- Unit 42's ten-hour intrusion forces a choice about who may disable an account without asking
- Edinburgh delivery riders are assembling their own evidence against pay algorithms
- Gasoline's Labor Day record understates the six-month plateau budgets now carry
- US-UK sign joint pact to coordinate prosecution of scam-center networks
- Revolution Medicines' RAS glue needed fourteen years from funded idea to FDA approval
- Gitea's unpatched older branches force migration to 1.27.x as CISA flags active exploitation
- Anthropic put its Fermat proof's correctness check inside the default build target
- Two absorbed titles offer a historical warning for the new chief AI officer role
- A Meta chatbot changed the email on any account for whoever asked
- Snowflake guided FY27 growth a point below the quarter it just delivered
Science52 stories
- UC3M study reads two Theodosian decrees as an imperial claim on every lion
- A decade of geomagnetic data from one observatory tightens the ultralight axion limit a hundredfold
- London type specimens pull a widespread Choco frog out of another species' name
- Verhoeff and Heuseveldt pin the shortest two-out-of-four picture hanging at 16 wraps
- Impact scars pick tiny projectile points out of 80,000-year-old debris at Obi-Rakhmat
- Plasmalogens from edible sea squirts sped aged mice to a hidden platform after five days
- NewBiologix will engineer a Duchenne producer cell line before the vector reaches the clinic
- A Finnish bird survey puts the clearcut ceiling at a tenth of the landscape per decade
- A week of eating polystyrene foam lifted three detoxification genes in the wharf roach gut
- Penalizing AlphaFold3 for repeating itself let it find F1-beta's closed shape
- A coroner and a probabilist tested Friday the 13th against 250,000 Ontario deaths
- Five 60-sided dice numbered 1 to 300 give every subset of players equal odds of going first
- A humanoid ran Beijing's 1,500 metres at 92 percent of its own sprint pace
- Three rectangular maps split the same 50 voters into three different seat counts
- A FAST survey of 55 galaxies turns up two starless hydrogen clouds near M51
- Three mosquito species picked different favorites among the same 119 unwashed arms
- Houston and EMSL fold reaction chemistry into a neural network to forecast rock parameters
- Handclaps and a saliency model reconstruct the walk into two Etruscan tombs
- X-ray scans find two opposing spirals inside the narwhal's arrow-straight tusk
- A physician and a veterinary dean want hospitals to ask who is feeding the dog
- Dark matter feeding drops the growth threshold for a black hole in a bulge white dwarf to 40 tons
- Diverse stands lost less productivity when heat and drought arrived together in 88,116 US plots
- Axe typology dates a grave near Wroclaw three millennia before the cemetery around it
- Forging meteoric iron at 800C erased the crystal pattern that identifies it as extraterrestrial
- Four management scholars model how deadline pressure turns Gen-AI into a substitute for judgment
- Adding conformity to a Bayesian voting model makes near-unanimity outrank unanimity
- Grid-board photos of 144 bonnetheads show heads rounding with age in both sexes
- High-pressure experiments rule carbon out as the missing light element in Mercury's core
- Lake area predicts how much of a Swedish stream network's carbon escapes to the air
- Unit 42 timed an agentic intrusion at fifty ATT&CK techniques in under ten hours
- NOAA separates California's marine heat wave from an El NiƱo still months offshore
- MIT Lincoln Laboratory hauled a sharper geophone onto drifting Arctic ice to sort whale song from ship hum
- A stretched exhale tilted 41 participants toward riskier choices in a scanner
- Indonesian fires outran 2015's emissions for one measured week
- Eleven days of machine time turned Wiles's 100 pages into 13 million lines of Lean
- UC Riverside's strain model flagged the Kamchatka patch that later ruptured
- ESA's Mercury orbiters cut themselves loose 200 million kilometres beyond real-time control
- A levitated sand-grain magnet stretches the dark matter hunt toward cell-scale masses
- Diffusion MRI finds in living Huntington's patients the striatal damage autopsies described
- Manchester team switches off graphene superconductivity by screening its electrons
- A burn scar and crusted desert soil turned 1.16 inches of rain into a deadly Grand Canyon flood
- Sandia physicists weigh New Glenn's pad explosion from infrasound recorded 1,000 miles away
- Ten trained coders counted the Leon County encounters where force never appeared
- Under-30s account for 62% of money-laundering arrests in five years of police FOI returns
- An octopus bloom off southwest England is eating the catch inside the shellfish fleet's traps
- SEN support carries more than double the odds of suspension in 19,064 linked pupil records
- A shipping fuel rule shows how removing pollution's hidden cooling effect can trigger a solar-geoengineering-style termination shock
- WMO puts near-100% odds on El Nino lasting through February 2027
- RNA polymerase reads two lab-made base pairs using the same cues as the natural four
- Sonicated water microdroplets convert 56% of kraft lignin into one orange molecule
- BTI and Cornell pre-compute 800 million mass spectra to give unknown metabolites something to match
- A 46-metre dispersal step strands Iowa's cicadas centuries from replanted forest