What happened in tech, summarised and sourced.
Attackers who breached TeamUpdraft's website used connection keys to install hidden plugins on WordPress sites; here is how to check for the key and clean up.
audiotale.net team8 min read
Unit 42 says ransomware crews have used the GlobalProtect authentication bypass since June, including a pivot into vCenter and ESXi; the fix has been out since 13 May.
audiotale.net team7 min read
Eight eMudhra CA certificates had private keys with values below 256, letting anyone forge trusted certificates; browsers blocked them, but libraries, distros and containers still need patching.
audiotale.net team10 min read
Existing PyTorch code can now target Google's TPUs as a normal device, with Hugging Face, vLLM and SGLang support, a day after Amazon's TorchNeuron.
audiotale.net team7 min read
OVHcloud says a hijacked developer account replaced release binaries for about 94 minutes on 19 October; if you installed or updated the CLI then, rotate every secret on that machine.
audiotale.net team6 min read
The experimental compiler, built with the TypeScript team's cooperation, claims up to 8x faster checks and about 70% less memory than TypeScript 7.0 at equal workers; the figures are the project's own.
audiotale.net team8 min read
DeepInfer ships under Apache 2.0 with support for DeepSeek-V4.1-Flash on NVIDIA SM100 and Huawei Ascend 950, but leaves out the parts needed for a complete serving stack.
audiotale.net team6 min read
DHS has excluded DeepSeek from federal civilian procurement and ordered its products out of agency IT; the wording on third-party products 'developed using' DeepSeek is the part developers should read closely.
audiotale.net team6 min read
Microsoft Security's Hayete Gallot argues companies should monitor every agent action; Defender's own docs show it can recognise about 60 agents but block far fewer.
audiotale.net team7 min read
NVIDIA says the noisy magic-state cultivation run is the largest of its kind and could cut qubit needs by up to 90%; it is a classical simulation, and the figures are the company's.
audiotale.net team6 min read
For about 11 hours on 15-16 October, Rank Math's own PRO download carried a self-rebuilding backdoor; sites that activated it should be treated as compromised.
audiotale.net team5 min read
The 61st OpenBSD release raises the amd64 kernel address space to 512G, adds arm64 hibernate, hardens httpd and relayd, and ships LibreSSL 4.4.0 and OpenSSH 10.6.
audiotale.net team6 min read
Plex says a chain of four vulnerabilities fixed in 1.43.3 is under active, widespread attack; update to 1.43.3.10861 or newer.
audiotale.net team6 min read