Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to fix three Onigmo regex engine bugs linked to four recent critical GitLab remote code execution issues. The flaws can be triggered when...
Microsoft will deliver its final security update for Windows Server 2016 in January 2027, after which all editions will stop receiving monthly security fixes. The company recommends upgrading to...
AWS has made Continuum for code vulnerabilities generally available, a service that validates which findings are actually exploitable in your environment, ranks them by business impact, and...
Quest Diagnostics disclosed to U.S. regulators that a cyberattack against its Quanum lab systems led to unauthorized access to certain patient records, including protected health information. The...
Meta has delayed enforcing updated business terms to November 20 after publishers objected that the changes could permit scraping their sites for AI training. Although Meta removed explicit...
AWS has introduced Lambda Web Functions, a new way to run standard Node.js web servers (e.g., Express, Hono, Fastify, Next.js) directly on Lambda with concurrent request handling, response...
Two days after emergency patches for the critical PHP2Shell bugs, PHP warned of a separate, unpatched code‑execution path (CVE-2026-115560) that requires an uncommon runtime configuration. No...
Attackers compromised LiteLLM’s release pipeline and published a tainted 1.107.0 release to PyPI and Docker that executes before application startup to steal credentials and secrets across...
VulnCheck says it has crafted an exploit for the PHP2Shell flaw (CVE-2026-109618) that achieves remote code execution on ASLR-enabled x86-64 systems running PHP’s recommended production...
GitLab has released emergency updates to Community and Enterprise Edition addressing a dozen issues, including a critical integer overflow (CVE-2026-110264) that could let an unauthenticated...
Netflix has introduced a workload attestation design that lets Apache Spark jobs on Amazon EMR swap their AWS IAM execution role for a short‑lived internal identity issued by its Metatron PKI,...
Kaspersky reports that North Korea’s Lazarus Group is using the NIST-standardized ML-KEM post-quantum cryptographic mechanism to shield command-and-control traffic and payload delivery in a new...