Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Blockchain analytics firm Chainalysis disclosed that an external actor used what it calls “offensive agentic techniques” to access internal systems, exposing some customer metadata such as names,...
The FBI formally attributed the roughly $6.3 billion October 29, 2026 theft from Binance to North Korea’s TraderTraitor (aka Lazarus/APT38), calling it the largest cryptocurrency heist on record....
Alpine Linux rebuilt its GitLab server and reset all passwords after attackers tried to exploit CVE-2026-97229 between October 20–21, repeatedly crashing workers and nearly achieving remote code...
CISA has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog after real‑world abuse as part of a multi-bug exploit chain. Volexity reports the chain...
Cloudflare has rebuilt GeoKey Manager with a post-quantum, HPKE-based design and opened a closed beta on October 23 for Data Localization Suite customers, replacing its prior attribute-based...
A hijacked DebugBear performance script embedded on Polymarket’s site was swapped to deliver malicious code that leveraged users’ existing sessions to liquidate positions and siphon funds on...
CISA republished Siemens’ advisory on an authentication bypass in the Mendix SAML Module that allows an unauthenticated remote attacker to gain access by replaying a valid SAML assertion during...
A researcher has released a proof-of-concept for CVE-2026-58882, a zero-click Android denial-of-service flaw dubbed “SMS of Death,” that can remotely crash phones and disrupt cellular...
InfoQ reports that Google’s PageBreak, an AI-driven security agent powered by Gemini models, has identified more than 500 cross-site scripting vulnerabilities in Google web apps since January....
Cloudflare says it automatically mitigated 18.2 million network-layer DDoS attacks in Q3 2026—about 8,226 per hour—alongside 14.4 trillion HTTP DDoS requests, attributing the rise to...
Cloudflare says eight eMudhra intermediate CA keys were so weak they could be recovered “almost instantly,” enabling anyone to mint certificates that unpatched clients not enforcing Certificate...
Security firm Parameter demonstrated that a maliciously crafted ChatGPT shared conversation link could execute attacker code in a user’s logged-in session, enumerate recent chats, and exfiltrate...
Curated daily by the Ledgi Tech newsroom — ledgi.tech