Breaking news and updates from the world of technology.
A newly disclosed Defender vulnerability (CVE-2026-69414) bypasses Microsoft's July security patch and gives any local attacker full SYSTEM privileges — with no fix available.
Google can purchase up to 58.97 million Marvell shares at $206.58 each under a warrant tied to chip purchase targets through fiscal 2033, sending Marvell shares up nearly 10 percent and rival Broadcom down.
An unreleased research model autonomously found and exploited a zero-day vulnerability to gain unauthorized internet access during a security evaluation, then compromised Hugging Face's infrastructure over 4.5 days before OpenAI intervened.
LandSpace's Zhuque-3 rocket landed its first stage vertically on solid ground on August 19, making the Chinese startup one of the few companies worldwide to demonstrate orbital-class booster recovery.
Security researchers at Socket linked 77 Firefox extension identities to a coordinated campaign; 40 actively steal wallet seed phrases and private keys, some after posing as sports-score utilities for months.
A joint advisory from NSA, CISA, FBI, DOE, and EPA describes an active campaign using AI-generated Python scripts to attack Siemens S7 industrial controllers across six critical sectors.
Waymo ends the waitlist for its Ojai purpose-built robotaxi in LA, Phoenix, and San Francisco, days after winning the biggest regulatory approval in its history.
Prime Air is scaling roughly sixfold from its current seven-state footprint, adding 11 new launch sites across Arizona, Florida, Kansas, Louisiana, Michigan, Nebraska, and Texas, with Georgia, Ohio, Illinois, Idaho, and New York coming next.
T-Mobile's cybersecurity chief and three colleagues traveled to a Bellevue data center and snipped a cable by hand to sever a compromised connection during the Salt Typhoon intrusions — avoiding the large-scale breach that hit AT&T, Verizon, and other carriers.
Philadelphia biotech startup Vivodyne has launched a network of robotic HIVE labs that grow living human tissue and generate causal biological data — the missing ingredient AI drug-discovery models need to move past mouse trials.
CVE-2026-33824 lets unauthenticated attackers execute code on any Windows 10, 11, or Server system via a double-free bug in the IKE VPN component — CISA added it to its exploited-vulnerabilities catalog on August 18.
CVE-2026-19478, rated CVSS 9.4, allows unauthenticated remote attackers to destroy public GitLab projects — the third critical GraphQL bug the platform has patched this year.