Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
NEAR AI says an attacker exploited a remote code execution flaw in SGLang to run code on one of its inference servers, observe same-day requests—including ones processed in a trusted execution...
Security firm Claroc found that Grok Build’s link-sharing scheme makes thousands of live apps easily discoverable via passive DNS, exposing sensitive data from users—and 24 internal SpaceXSI...
A threat actor abused trusted cross‑account roles linked to Qubole’s AWS account to access and exfiltrate data from multiple customers between October 14–26. Researchers at Wiz, working with...
Microsoft shipped updates for 1,093 vulnerabilities this month, with 63 rated critical and one Outlook spoofing flaw under active attack, according to Krebs on Security. The release lands...
Wiz says unknown attackers used compromised IAM credentials from Qubole’s AWS account to assume cross‑account roles left active in customer environments, enabling broad, opportunistic theft of...
Google has released Chrome updates addressing nine security flaws, including an actively exploited use-after-free vulnerability in the browser’s XML component (CVE-2026-125350). The company says...
Japanese manufacturer Iris Ohyama says personal data tied to up to 7.7 million Iris Plaza customers and visitors may have been exposed after unauthorized access to an external cloud service. The...
CISA has placed a high-severity SonicWall SonicOS vulnerability (CVE-2026-19868) on its Known Exploited Vulnerabilities catalog following reports of possible in-the-wild use. SonicWall says the...
Microsoft has shipped a fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, but it’s only available through the Microsoft Store—not Windows Update. The corrected build is...
OpenAI unveiled GPT-6 Cyber, an AI model that uncovered 81 previously unknown high‑severity Firefox vulnerabilities and produced working local privilege‑escalation exploits for 948 Linux kernel...
Threat actors began probing a newly disclosed OpenSSH flaw (CVE-2026-123158, “SSHole”) within hours, with confirmed root access on an Alpine Linux honeypot, according to The Hacker News citing...
CISA has added one more actively exploited vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog and is directing Federal Civilian Executive Branch (FCEB) agencies to prioritize rapid...
Curated daily by the Ledgi Tech newsroom — ledgi.tech