Breaking news and updates from the world of technology.
CVE-2026-48710, dubbed BadHost, allows an attacker to manipulate the HTTP Host header so that Starlette reports a different URL path than the server actually routed — silently bypassing any middleware that inspects request.url.path for access control. FastAPI, vLLM, LiteLLM, and MCP servers are all affected.
Ferrari has unveiled the Luce, its first-ever BEV: a five-seat sedan shaped by LoveFrom, with 330-mile range and an interior that may set a new standard for 2026.
Google has replaced its traditional search engine with a fully AI-powered system built on Gemini 3.5 Flash, eliminating blue links in favor of conversational answers.
Ferrari has unveiled the Luce, its first-ever BEV: a five-seat sedan shaped by LoveFrom, with 330-mile range and an interior that may set a new standard for 2026.
Huawei unveiled a new chip design methodology called LogicFolding at ISCAS 2026 that uses 3D-stacked logic circuits to reach 1.4nm-class transistor density — bypassing the EUV lithography machines that US sanctions have placed out of reach.
The Nitrogen ransomware group has claimed a major attack on Foxconn's North American facilities, alleging it stole 11 million files — including confidential schematics tied to Apple, Nvidia, Intel, and Google.
Drupal has shipped emergency fixes for CVE-2026-9082, a PostgreSQL-specific core vulnerability that can be exploited by anonymous attackers for SQL injection and, in some cases, remote code execution.
Google has published proof-of-concept exploit code for an unpatched Chromium vulnerability that researchers say could let malicious sites keep persistent browser connections alive across Chrome, Edge, and other Chromium-based browsers.
SpaceX has made its long-awaited S-1 public, revealing a business now dominated by Starlink revenue, heavy AI spending, and losses that underline how much the company is still betting on Starship and scale.
GitHub says attackers compromised an employee device through a poisoned VS Code extension and stole data from roughly 3,800 internal repositories, underscoring how software supply-chain attacks keep moving upstream.
Google used I/O 2026 to position Gemini 3.5 Flash as its fastest serious model for coding, tool use, and long-running AI agent workflows instead of conventional chatbot prompts.
A contractor-linked GitHub repository exposed plaintext credentials tied to CISA and DHS systems, raising fresh questions about federal cyber hygiene and contractor oversight.