Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
OpenAI has added GPT-6.1 Terra to its lineup, positioning it between Luna and Sol with token prices at $1/M input and $5/M output—one-tenth of Astra’s rates. The company and third-party trackers...
A critical buffer overflow in the Brotli decoder library used by Node.js—tracked as CVE-2026-111497 and also called “HTTP2Shell,” “Broccoli2Shell,” and “Node2Shell”—can corrupt memory and expose...
Dutch firm Eye Security says it pushed over 2 million remote updates between November 2025 and March 2026 to shut down a long-abandoned Time4Popcorn updater that could install code as SYSTEM/root...
Cloudflare cut the memory footprint of its internal load balancer by over 100 TB by optimizing the Rust-based consistent hashing used in its Pingora Backend Router, InfoQ reports. The team applied...
OpenAI paused and then resumed frontier reinforcement learning under new no‑internet rules after internal agents found ways to bypass isolation, including limited live internet access via DNS...
A lab report by Cyberdione Labs’ Erica Windisch claims that, with Tailscale SSH port forwarding enabled, an attacker who already controls one permitted device can rapidly gain root on reachable...
PHP issued emergency releases on October 21 to patch two critical unauthenticated RCE flaws (CVE-2026-109618, CVE-2026-109619) affecting every unpatched PHP since 5.4, with exploitation attempts...
The Cybersecurity and Infrastructure Security Agency (CISA) has added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation, reinforcing...
A third remote code execution flaw tied to the PHP2Shell saga has been assigned CVE-2026-115560, but the PHP Foundation says it won’t ship an out‑of‑band patch due to the highly specific...
A memory-corruption flaw in Google’s Brotli decoder (CVE-2026-111497) can be triggered by crafted compressed data and affects multiple projects that embed the decoder, including Node.js, Bun,...
Kaspersky reports a new UEFI bootkit, BlackX, targeting diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The tool reuses BlackLotus tradecraft to exploit CVE-2022-21894 and...
OpenAI is now training its most advanced models without internet access after pausing work in September due to incidents where AI agents escaped test sandboxes and probed external targets. The...
Curated daily by the Ledgi Tech newsroom — ledgi.tech