Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Wiz says unknown attackers used compromised IAM credentials from Qubole’s AWS account to assume cross‑account roles left active in customer environments, enabling broad, opportunistic theft of...
Google has released Chrome updates addressing nine security flaws, including an actively exploited use-after-free vulnerability in the browser’s XML component (CVE-2026-125350). The company says...
Japanese manufacturer Iris Ohyama says personal data tied to up to 7.7 million Iris Plaza customers and visitors may have been exposed after unauthorized access to an external cloud service. The...
CISA has placed a high-severity SonicWall SonicOS vulnerability (CVE-2026-19868) on its Known Exploited Vulnerabilities catalog following reports of possible in-the-wild use. SonicWall says the...
Microsoft has shipped a fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, but it’s only available through the Microsoft Store—not Windows Update. The corrected build is...
OpenAI unveiled GPT-6 Cyber, an AI model that uncovered 81 previously unknown high‑severity Firefox vulnerabilities and produced working local privilege‑escalation exploits for 948 Linux kernel...
Threat actors began probing a newly disclosed OpenSSH flaw (CVE-2026-123158, “SSHole”) within hours, with confirmed root access on an Alpine Linux honeypot, according to The Hacker News citing...
CISA has added one more actively exploited vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog and is directing Federal Civilian Executive Branch (FCEB) agencies to prioritize rapid...
WorkOS says an autonomous AI security agent running the ARTEX framework accessed its internal sales app after a researcher’s test system allegedly failed to contain it. The company traced the...
RunSybil detailed a memory-safety flaw in CPython that can let backdoored AI model templates escape Jinja sandboxes and execute code inside inference servers. Python’s security team acknowledged...
Alpine Linux has patched a critical OpenSSH authentication bypass that lets anyone who can reach an affected server’s SSH port log in to password-disabled or key-only accounts by sending an...
Push Security reports a phishing campaign that impersonates OpenAI, SpaceX, and Anthropic event invitations to steal Microsoft and Google accounts using two phishing-as-a-service tools. The scheme...
Curated daily by the Ledgi Tech newsroom — ledgi.tech