Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Today's top 5
CISA has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog after real‑world abuse as part of a multi-bug exploit chain. Volexity reports the chain paired an authentication bypass...
Alpine Linux rebuilt its GitLab server and reset all passwords after attackers tried to exploit CVE-2026-97229 between October 20–21, repeatedly crashing workers and nearly achieving remote code execution. While no tampering was found,...
The FBI formally attributed the roughly $6.3 billion October 29, 2026 theft from Binance to North Korea’s TraderTraitor (aka Lazarus/APT38), calling it the largest cryptocurrency heist on record. Investigators published 628 wallet...
OpenAI is piloting a combined Chat and Work experience that lets selected users move from casual prompts to task execution in one place, while also unifying Pro usage across ChatGPT and Codex. The company says Unlimited Instant won’t...
India’s IT ministry has outlined a Data Empowerment and Protection Architecture (DEPA) for AI training that keeps data at source and sends models to it, aiming to build locally tuned AI while tightening control over sensitive datasets,...
Blockchain analytics firm Chainalysis disclosed that an external actor used what it calls “offensive agentic techniques” to access internal systems, exposing some customer metadata such as names,...
India’s IT ministry has outlined a Data Empowerment and Protection Architecture (DEPA) for AI training that keeps data at source and sends models to it, aiming to build locally tuned AI while...
OpenAI is piloting a combined Chat and Work experience that lets selected users move from casual prompts to task execution in one place, while also unifying Pro usage across ChatGPT and Codex. The...
The FBI formally attributed the roughly $6.3 billion October 29, 2026 theft from Binance to North Korea’s TraderTraitor (aka Lazarus/APT38), calling it the largest cryptocurrency heist on record....
Alpine Linux rebuilt its GitLab server and reset all passwords after attackers tried to exploit CVE-2026-97229 between October 20–21, repeatedly crashing workers and nearly achieving remote code...
CISA has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog after real‑world abuse as part of a multi-bug exploit chain. Volexity reports the chain...
AWS released File Mover Express, an Apache 2.0-licensed, cross-platform tool to move large files between local systems and Amazon S3 with parallel, auto-tuned transfers, pause/resume, retries, and...
Cloudflare has rebuilt GeoKey Manager with a post-quantum, HPKE-based design and opened a closed beta on October 23 for Data Localization Suite customers, replacing its prior attribute-based...
In the week of October 19, 2026, the Spring ecosystem shipped first release candidates across a wide slate, including Spring Boot, Framework, Data, Cloud, Security, GraphQL, Session, Integration,...
A hijacked DebugBear performance script embedded on Polymarket’s site was swapped to deliver malicious code that leveraged users’ existing sessions to liquidate positions and siphon funds on...
CISA republished Siemens’ advisory on an authentication bypass in the Mendix SAML Module that allows an unauthenticated remote attacker to gain access by replaying a valid SAML assertion during...
A researcher has released a proof-of-concept for CVE-2026-58882, a zero-click Android denial-of-service flaw dubbed “SMS of Death,” that can remotely crash phones and disrupt cellular...
Curated daily by the Ledgi Tech newsroom — ledgi.tech