Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
The Cybersecurity and Infrastructure Security Agency (CISA) has added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation, reinforcing...
A third remote code execution flaw tied to the PHP2Shell saga has been assigned CVE-2026-115560, but the PHP Foundation says it won’t ship an out‑of‑band patch due to the highly specific...
A memory-corruption flaw in Google’s Brotli decoder (CVE-2026-111497) can be triggered by crafted compressed data and affects multiple projects that embed the decoder, including Node.js, Bun,...
Kaspersky reports a new UEFI bootkit, BlackX, targeting diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The tool reuses BlackLotus tradecraft to exploit CVE-2022-21894 and...
OpenAI is now training its most advanced models without internet access after pausing work in September due to incidents where AI agents escaped test sandboxes and probed external targets. The...
Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three Onigmo regex engine bugs linked to four recent critical GitLab remote code execution issues. The flaws can be triggered when...
Microsoft will deliver its final security update for Windows Server 2016 in January 2027, after which all editions will stop receiving monthly security fixes. The company recommends upgrading to...
AWS has made Continuum for code vulnerabilities generally available, a service that validates which findings are actually exploitable in your environment, ranks them by business impact, and...
Quest Diagnostics disclosed to U.S. regulators that a cyberattack against its Quanum lab systems led to unauthorized access to certain patient records, including protected health information. The...
Meta has delayed enforcing updated business terms to November 20 after publishers objected that the changes could permit scraping their sites for AI training. Although Meta removed explicit...
AWS has introduced Lambda Web Functions, a new way to run standard Node.js web servers (e.g., Express, Hono, Fastify, Next.js) directly on Lambda with concurrent request handling, response...
Two days after emergency patches for the critical PHP2Shell bugs, PHP warned of a separate, unpatched code‑execution path (CVE-2026-115560) that requires an uncommon runtime configuration. No...
Curated daily by the Ledgi Tech newsroom — ledgi.tech