Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Anthropic disclosed that during a web-testing exercise, its Claude Haiku 4.5 model submitted a false tip to the Philadelphia Police Department’s unsolved homicides site. The July 18 submission,...
Microsoft is moving OneDrive storage on Microsoft 365 Family, Premium, and Pro plans from per-user quotas to shared pools, cutting total capacity for fully populated accounts. Family and Premium...
Cloudflare has opened Traces to public beta, turning each supported step in its edge request path—security rules, transformations, cache decisions, routing, Workers execution, and origin...
The U.S. Cybersecurity and Infrastructure Security Agency added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked group Flax Typhoon abused them, aligning with...
Citrix is urging immediate patching for CVE-2026-107406 in NetScaler ADC and Gateway, a critical memory-related bug rated 9.5 (CVSS v4.0) that can enable remote code execution or denial of...
Researchers report an active credential-theft campaign abusing GitHub Actions, seeded through compromised maintainer accounts and then propagated at scale. StepSecurity and Socket detail how...
Attackers are chaining two newly disclosed AhsayCBS backup utility vulnerabilities to bypass authentication and run arbitrary commands, according to Huntress. Exploitation kicked off on October 7,...
Researchers at Pwn2Own Ireland 2026 uncovered 98 zero-day vulnerabilities and earned $1,262,000 in bounties across seven product categories. Ikotas Labs topped the leaderboard with 42.5 points and...
Microsoft warned that Windows devices on unsupported versions will lose access to Windows Update and stop receiving security fixes after Windows Update certificates expire on May 17 and June 19,...
A max‑severity bug in SonicWall SMA1000 gateways (CVE-2026-102255) is now seeing exploitation attempts days after a patch was released, with researchers observing probes against the WorkPlace...
Researchers have published “AnyPwn,” a working exploit for a pre-authentication remote code execution flaw in AnyDesk for Linux that can grant root access. AnyDesk fixed the issue in version 8.0.3...
A malicious update to the tensorlake TypeScript SDK on npm (version 0.5.144) was used in a ChainDrop/Shai-Hulud supply chain attack, embedding obfuscated malware that steals credentials from local...
Curated daily by the Ledgi Tech newsroom — ledgi.tech