Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Researchers at Anthropic demonstrated remote root code execution against Linux servers with Multipath TCP (MPTCP) listeners by exploiting CVE-2026-98432, a use-after-free bug in the kernel’s IPv4...
CISA has republished a Hitachi Energy security advisory noting OS command injection and “Dirty Frag” vulnerabilities in CoreTec products. Exploitation could compromise confidentiality, integrity,...
Binance disclosed a security incident affecting about $6.3 billion in assets, with nearly $3 billion frozen on-chain to date. Blockchain forensics firms say roughly $5.912 billion was stolen at...
Google’s OAuth platform now supports Demonstration of Proof-of-Possession (DPoP) to curb token theft and replay attacks, InfoQ reports. DPoP binds tokens to a client-held key so stolen tokens...
Mozilla and Google have issued major browser updates addressing more than 200 combined vulnerabilities, including numerous high- and critical-severity memory bugs and sandbox bypasses. Firefox 159...
Microsoft’s October security update fixes 1,415 vulnerabilities across Windows, Office, Exchange, .NET, Edge, and potentially Hyper‑V and Azure components, according to InfoQ. One Windows Shell...
JFrog Security Research reports that 42 third‑party GitHub repositories were compromised by attackers who stashed payloads inside large blobs—some up to 13.7MB—to evade GitHub’s search and...
Researchers say the Oracle PeopleSoft flaw widely exploited by ShinyHunters since May wasn’t a single issue but three linked vulnerabilities across two components, all initially patched under...
Tailscale released version 1.104.4 to address SSH socket-forwarding flaws that, under specific conditions, could let an attacker on an already-permitted device reach root-only services on other...
A 9.5-severity memory-corruption bug in TianoCore EDK II’s PXE network stack (CVE-2026-97631) allows code execution during UEFI boot—before Secure Boot and TPM protections engage—across firmware...
Web host DreamHost has forced email and FTP/SFTP password resets after an incident that began with File Manager connectivity issues on October 23 and later widened. The company sent recovery steps...
Cloudflare disclosed and remediated a tenant isolation flaw that intermittently exposed content from other users’ requests in the GLM-5.3 Workers AI model between August 27 and September 9, 2026....
Curated daily by the Ledgi Tech newsroom — ledgi.tech