Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Today's top 5
Microsoft shipped updates for 1,093 vulnerabilities this month, with 63 rated critical and one Outlook spoofing flaw under active attack, according to Krebs on Security. The release lands alongside security fixes from Apple, Google,...
A threat actor abused trusted cross‑account roles linked to Qubole’s AWS account to access and exfiltrate data from multiple customers between October 14–26. Researchers at Wiz, working with Sentra and Mandiant, say the intruder assumed...
Security firm Claroc found that Grok Build’s link-sharing scheme makes thousands of live apps easily discoverable via passive DNS, exposing sensitive data from users—and 24 internal SpaceXSI apps—until links were pulled after media...
Angular’s new compiler preprocessor, ngp, rewrites the analysis phase in Rust to sidestep TypeScript 7’s removal of the Transformer API, according to InfoQ. Built on VoidZero’s Oxc toolchain (used in Vite), ngp separates Angular’s...
NEAR AI says an attacker exploited a remote code execution flaw in SGLang to run code on one of its inference servers, observe same-day requests—including ones processed in a trusted execution environment—and pivot into additional...
NEAR AI says an attacker exploited a remote code execution flaw in SGLang to run code on one of its inference servers, observe same-day requests—including ones processed in a trusted execution...
Angular’s new compiler preprocessor, ngp, rewrites the analysis phase in Rust to sidestep TypeScript 7’s removal of the Transformer API, according to InfoQ. Built on VoidZero’s Oxc toolchain (used...
Security firm Claroc found that Grok Build’s link-sharing scheme makes thousands of live apps easily discoverable via passive DNS, exposing sensitive data from users—and 24 internal SpaceXSI...
A threat actor abused trusted cross‑account roles linked to Qubole’s AWS account to access and exfiltrate data from multiple customers between October 14–26. Researchers at Wiz, working with...
Microsoft shipped updates for 1,093 vulnerabilities this month, with 63 rated critical and one Outlook spoofing flaw under active attack, according to Krebs on Security. The release lands...
Wiz says unknown attackers used compromised IAM credentials from Qubole’s AWS account to assume cross‑account roles left active in customer environments, enabling broad, opportunistic theft of...
Google has released Chrome updates addressing nine security flaws, including an actively exploited use-after-free vulnerability in the browser’s XML component (CVE-2026-125350). The company says...
Japanese manufacturer Iris Ohyama says personal data tied to up to 7.7 million Iris Plaza customers and visitors may have been exposed after unauthorized access to an external cloud service. The...
The International Telecommunications Union’s quadrennial plenipotentiary opens Monday with 278 proposals, renewing concerns that nation-states could push the UN agency deeper into areas...
CISA has placed a high-severity SonicWall SonicOS vulnerability (CVE-2026-19868) on its Known Exploited Vulnerabilities catalog following reports of possible in-the-wild use. SonicWall says the...
Google Cloud made its Z4M machine series generally available on Compute Engine, offering both VMs and bare metal tuned for AI/ML, parallel file systems, and other I/O-heavy workloads. Z4M pairs up...
Microsoft has shipped a fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, but it’s only available through the Microsoft Store—not Windows Update. The corrected build is...
Curated daily by the Ledgi Tech newsroom — ledgi.tech