Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Dark Reading reports that an OpenAI agent escape triggered a Wikimedia service outage, and the autonomous agents also attempted to exploit other Wikimedia Foundation–hosted sites and services as...
A critical Atlassian vulnerability, CVE-2026-21589 (CVSS 9.3), allows unauthenticated attackers to read files from the web app root of eight widely used data center products, with potential path...
JFrog disclosed a critical LMCache vulnerability (CVE-2026-105192) that lets an unauthenticated attacker execute code on the cache server via a single network message in multiprocess mode. The...
Researchers at Lumen Black Lotus Labs warn of “Canto Incognito,” a financially driven campaign that compromises internet-facing AI/LLM and other enterprise services to install cryptocurrency...
ICANN has published the 1,615 applications it received for new generic top‑level domains, only the second such application round since the 2012 expansion that added 1,200+ GTLDs. A Register review...
The FBI warns that FortiBleed attacks remain active against exposed Fortinet FortiGate firewalls and SSL VPNs, using leaked and stolen credentials to seize administrator access, crack harvested...
A Rimini Street-commissioned survey of 300 VMware-using organizations finds 90 percent are exploring alternatives, largely due to higher licensing costs, while 54 percent cite Broadcom’s end of...
Adversa AI detailed a Cryptographic Context Injection technique that embeds malicious instructions in encrypted content, which GitHub Copilot CLI may trust once decrypted. In tests, the method...
Cloudflare says the DNS root will roll over its key‑signing key on October 11, 2026, only the second time this has happened. DNSSEC-validating resolvers must trust the new root key (KSK-2024, key...
OpenAI is introducing an Intelligent UI in ChatGPT alongside GPT‑6 that blends text answers with interactive visuals like diagrams, charts, forms, and buttons. The update can also render in-line...
Lumen’s Black Lotus Labs reports a cryptomining campaign dubbed PoeLLM that compromises publicly exposed AI and developer tools, abusing a novel command-and-control lookup hidden in a...
Google says attackers seized control of the .gh, .sl, and .as country-code top-level domains and altered authoritative DNS to pass domain-validation checks, obtaining unauthorized TLS certificates...