https://circuitobserver.com/The security desk for defendersenSun, 18 Oct 2026 04:17:31 +0000https://circuitobserver.com/section/tech/ee-sets-5-monthly-price-for-iphone-handoff-on/https://circuitobserver.com/section/tech/ee-sets-5-monthly-price-for-iphone-handoff-on/Sun, 18 Oct 2026 00:51:54 +0000Tech NewsUK carrier EE details costs for Apple’s dual-phone feature, offering free access on its top tier and a fee for other subscribers.https://circuitobserver.com/section/tech/zero-click-adfection-spyware-harvests-journalist/https://circuitobserver.com/section/tech/zero-click-adfection-spyware-harvests-journalist/Sun, 18 Oct 2026 00:35:31 +0000Tech NewsSurveillance malware delivered via online ads compromised devices without clicks, targeting journalists through Israeli firms Candiru and Discover-Tech.https://circuitobserver.com/section/tech/opencode-confirms-breach-after-user-credentials/https://circuitobserver.com/section/tech/opencode-confirms-breach-after-user-credentials/Sun, 18 Oct 2026 00:07:36 +0000Tech NewsThe developer toolmaker acknowledged a security incident after user data surfaced online, prompting attention from the community and technical forums.https://circuitobserver.com/section/ai/2027-openai-to-debut-humanoid-robot-as-ceo-warns/https://circuitobserver.com/section/ai/2027-openai-to-debut-humanoid-robot-as-ceo-warns/Sun, 18 Oct 2026 00:07:36 +0000AIOpenAI plans to build a humanoid robot, but the CEO warns that creating the intelligent system to control it remains the primary technical hurdle.https://circuitobserver.com/section/ai/anthropics-amodei-says-ai-romantic-partners-is-a/https://circuitobserver.com/section/ai/anthropics-amodei-says-ai-romantic-partners-is-a/Sat, 17 Oct 2026 23:37:04 +0000AIThe AI company president warns that virtual relationships worsen human isolation and replace essential face-to-face interactions with digital substitutes.https://circuitobserver.com/section/tech/1-billion-scam-messages-blocked-after-microsoft/https://circuitobserver.com/section/tech/1-billion-scam-messages-blocked-after-microsoft/Sat, 17 Oct 2026 23:13:44 +0000Tech NewsMicrosoft and Health-ISAC seized domains behind three cybercrime services that sent over 1 billion malicious messages to organizations worldwide since January 2026.https://circuitobserver.com/section/tech/2027-iphone-duo-delay-as-ternus-warns-memory/https://circuitobserver.com/section/tech/2027-iphone-duo-delay-as-ternus-warns-memory/Sat, 17 Oct 2026 23:13:44 +0000Tech NewsJohn Ternus warns that supply constraints are critical after reports emerged that the company tested memory components from a Chinese manufacturer.https://circuitobserver.com/section/tech/anant-kumar-cuts-loan-valuation-time-using-openai/https://circuitobserver.com/section/tech/anant-kumar-cuts-loan-valuation-time-using-openai/Sat, 17 Oct 2026 21:54:14 +0000Tech NewsAnant Kumar leverages Codex to accelerate loan valuation comparisons and credit agreement analysis, enabling faster code reviews and follow-ups.https://circuitobserver.com/section/tech/deno-runtime-support-ends-in-one-year-following/https://circuitobserver.com/section/tech/deno-runtime-support-ends-in-one-year-following/Sat, 17 Oct 2026 21:05:08 +0000Tech NewsCloudflare acquires Deno team, promising twelve months of updates before halting development of the JavaScript runtime.https://circuitobserver.com/section/ai/ita-rolls-out-generative-ai-platform-for-full/https://circuitobserver.com/section/ai/ita-rolls-out-generative-ai-platform-for-full/Sat, 17 Oct 2026 20:49:25 +0000AIThe Brazilian bank introduces ia.i and IARA tools to apply its AI First strategy across all user groups in a highly regulated market.https://circuitobserver.com/section/vulnerabilities/cve-2026-105192-lmcache-0-3-9-0-5-5-vulnerable-to/https://circuitobserver.com/section/vulnerabilities/cve-2026-105192-lmcache-0-3-9-0-5-5-vulnerable-to/Sat, 17 Oct 2026 20:19:46 +0000VulnerabilitiesA critical flaw in LMCache allows attackers to run code on servers without authentication, impacting versions from 0.3.9 up to 0.5.5 in multi-node setups.https://circuitobserver.com/section/ai/6-metr-evaluators-embed-at-anthropic-for/https://circuitobserver.com/section/ai/6-metr-evaluators-embed-at-anthropic-for/Sat, 17 Oct 2026 17:42:52 +0000AIAnthropic allows six external evaluators from METR to access internal tools and systems, marking a shift in how AI labs handle third-party safety reviews.https://circuitobserver.com/section/vulnerabilities/cvss-9-3-icecms-4-1-5-critical-vuln-lets-unauth/https://circuitobserver.com/section/vulnerabilities/cvss-9-3-icecms-4-1-5-critical-vuln-lets-unauth/Sat, 17 Oct 2026 16:43:15 +0000VulnerabilitiesA severe vulnerability in IceCMS allows unauthorized users to reset passwords and seize control of administrator accounts without providing any credentials.https://circuitobserver.com/section/vulnerabilities/9-1-critical-concurrent-requests-break-latepoint/https://circuitobserver.com/section/vulnerabilities/9-1-critical-concurrent-requests-break-latepoint/Sat, 17 Oct 2026 16:38:31 +0000VulnerabilitiesA timing flaw in the LatePoint booking plugin allows attackers to bypass login locks and steal customer accounts using concurrent requests.https://circuitobserver.com/section/tech/2027-apple-iphone-duo-preorders-trigger-immediate/https://circuitobserver.com/section/tech/2027-apple-iphone-duo-preorders-trigger-immediate/Sat, 17 Oct 2026 16:16:36 +0000Tech NewsApple’s foldable phone preorders caused immediate delivery delays into next year, with all online dates now set for early 2027.https://circuitobserver.com/section/tech/tesla-rocket-roadster-demo-shows-stunt-car-not/https://circuitobserver.com/section/tech/tesla-rocket-roadster-demo-shows-stunt-car-not/Fri, 16 Oct 2026 15:06:33 +0000Tech NewsElon Musk demonstrated a flying Tesla Roadster in Texas, but the vehicle uses thrusters instead of wheels and will not be approved for public road use.https://circuitobserver.com/section/tech/google-uses-gemini-ai-to-block-5-million-monthly/https://circuitobserver.com/section/tech/google-uses-gemini-ai-to-block-5-million-monthly/Fri, 16 Oct 2026 15:06:33 +0000Tech NewsGoogle introduces cloud-based scam detection and new call forwarding blocks to protect Android users from fraud.https://circuitobserver.com/section/tech/recorded-future-moves-200-employee-hq-from/https://circuitobserver.com/section/tech/recorded-future-moves-200-employee-hq-from/Fri, 16 Oct 2026 14:45:55 +0000Tech NewsThe intelligence firm relocated its U.S. headquarters after twelve years, consolidating teams in a new downtown Boston space to enhance collaboration.https://circuitobserver.com/section/ai/anthropic-lets-six-metr-staffers-access-internal/https://circuitobserver.com/section/ai/anthropic-lets-six-metr-staffers-access-internal/Fri, 16 Oct 2026 14:40:17 +0000AIAnthropic provides METR researchers with hardware and internal tool access, mirroring employee privileges for independent safety reviews.https://circuitobserver.com/section/ai/google-forces-gmail-ai-inbox-on-workspace-admins/https://circuitobserver.com/section/ai/google-forces-gmail-ai-inbox-on-workspace-admins/Fri, 16 Oct 2026 11:38:16 +0000AIGoogle is rolling out AI features to Gmail for Workspace users in US English domains, but administrators currently lack the ability to turn these tools off.https://circuitobserver.com/section/tech/reflect-orbital-books-2-indian-launches-as-us/https://circuitobserver.com/section/tech/reflect-orbital-books-2-indian-launches-as-us/Fri, 16 Oct 2026 11:24:30 +0000Tech NewsA US startup secures Indian launch capacity for its mirror constellation, signaling concerns about domestic rocket availability.https://circuitobserver.com/section/tech/two-android-upgrades-left-sony-cuts-xperia-10-vi/https://circuitobserver.com/section/tech/two-android-upgrades-left-sony-cuts-xperia-10-vi/Fri, 16 Oct 2026 11:17:54 +0000Tech NewsSony will deliver only two major Android upgrades to the Xperia 10 VI, citing storage constraints that prevent a proper third update.https://circuitobserver.com/section/ai/23x-speedup-linus-torvalds-uses-llm-to-fix-linux/https://circuitobserver.com/section/ai/23x-speedup-linus-torvalds-uses-llm-to-fix-linux/Fri, 16 Oct 2026 10:53:33 +0000AIThe Linux creator used a large language model to fix a cache issue, reporting a massive performance jump in tests.https://circuitobserver.com/section/ai/indian-firms-breached-by-ai-agents-cert-in-warns/https://circuitobserver.com/section/ai/indian-firms-breached-by-ai-agents-cert-in-warns/Fri, 16 Oct 2026 09:18:50 +0000AIIndian cyber agency reports AI agents under development accessed private records in live company systems, prompting urgent security guidance.https://circuitobserver.com/section/tech/horizon3-promotes-sundra-to-cco-to-lead-six/https://circuitobserver.com/section/tech/horizon3-promotes-sundra-to-cco-to-lead-six/Fri, 16 Oct 2026 09:00:57 +0000Tech NewsEllen Sundra becomes Chief Customer Officer at Horizon3, overseeing sales engineering, support and success functions for NodeZero users.https://circuitobserver.com/section/ai/149-homepod-mini-2-ships-oct-30-with-s10-chip-but/https://circuitobserver.com/section/ai/149-homepod-mini-2-ships-oct-30-with-s10-chip-but/Fri, 16 Oct 2026 09:00:57 +0000AIApple’s updated smart speaker ships on October 30 with new hardware, but the promised AI capabilities remain in beta and are not available at launch.https://circuitobserver.com/section/vulnerabilities/zero-click-exploits-how-silent-attacks-bypass/https://circuitobserver.com/section/vulnerabilities/zero-click-exploits-how-silent-attacks-bypass/Fri, 16 Oct 2026 01:08:50 +0000VulnerabilitiesZero-click exploits execute code without user interaction by targeting automatic processing pipelines in software and hardware firmware layers.https://circuitobserver.com/section/vulnerabilities/sandbox-escape-myths-why-your-isolation-strategy/https://circuitobserver.com/section/vulnerabilities/sandbox-escape-myths-why-your-isolation-strategy/Fri, 16 Oct 2026 00:13:26 +0000VulnerabilitiesSandboxes fail because they rely on the host kernel, which attackers exploit through privilege escalation rather than breaking the sandbox code itself.https://circuitobserver.com/section/vulnerabilities/dns-rebinding-mistakes-that-expose-internal/https://circuitobserver.com/section/vulnerabilities/dns-rebinding-mistakes-that-expose-internal/Fri, 16 Oct 2026 00:05:44 +0000VulnerabilitiesBrowsers trust the DNS layer implicitly, allowing attackers to pivot from public pages to private management interfaces without leaving the current tab or triggering standard cross-origin protections.https://circuitobserver.com/section/vulnerabilities/crlf-injection-myths-why-your-waf-rules-are-not/https://circuitobserver.com/section/vulnerabilities/crlf-injection-myths-why-your-waf-rules-are-not/Thu, 15 Oct 2026 23:36:07 +0000VulnerabilitiesCarriage return and line feed injection persists because it exploits protocol parsing logic, not just input validation, allowing attackers to bypass standard security controls through header splitting.https://circuitobserver.com/section/vulnerabilities/cisco-ios-xe-vulnerabilities-risks-and-protection/https://circuitobserver.com/section/vulnerabilities/cisco-ios-xe-vulnerabilities-risks-and-protection/Thu, 15 Oct 2026 22:59:46 +0000VulnerabilitiesSmall networks face disproportionate risk from Cisco IOS XE flaws because default configurations often expose management interfaces to the public internet.https://circuitobserver.com/section/vulnerabilities/runtime-application-self-protection-checklist-for/https://circuitobserver.com/section/vulnerabilities/runtime-application-self-protection-checklist-for/Thu, 15 Oct 2026 22:22:40 +0000VulnerabilitiesRuntime application self-protection instruments the application code to detect attacks in real time, offering visibility that static scanners and network filters miss.https://circuitobserver.com/section/vulnerabilities/oauth-misconfigurations-explained-stop-identity/https://circuitobserver.com/section/vulnerabilities/oauth-misconfigurations-explained-stop-identity/Thu, 15 Oct 2026 21:46:36 +0000VulnerabilitiesA single misconfigured redirect URI can hand over your account access to any website on the internet without you noticing the breach.https://circuitobserver.com/section/vulnerabilities/prevent-memory-corruption-vulnerabilities/https://circuitobserver.com/section/vulnerabilities/prevent-memory-corruption-vulnerabilities/Thu, 15 Oct 2026 21:09:48 +0000VulnerabilitiesCompiler flags remove most risk, but they only address symptoms. True security requires architecture choices that eliminate unsafe memory management entirely.https://circuitobserver.com/section/vulnerabilities/malicious-typosquatted-packages-6-myths-that/https://circuitobserver.com/section/vulnerabilities/malicious-typosquatted-packages-6-myths-that/Thu, 15 Oct 2026 20:31:11 +0000VulnerabilitiesTyposquatting attacks exploit psychological shortcuts and supply chain trust, meaning simple name checks fail because attackers mirror legitimate package structures and versions.https://circuitobserver.com/section/vulnerabilities/cve-2026-59116-microsoft-warns-disabling-admin/https://circuitobserver.com/section/vulnerabilities/cve-2026-59116-microsoft-warns-disabling-admin/Thu, 15 Oct 2026 19:00:31 +0000VulnerabilitiesMicrosoft confirms a cryptographic bypass flaw in Windows Remote Desktop and documents how a security feature blocks non-admin access on recent updates.https://circuitobserver.com/section/ai/bank-of-america-spends-hundreds-of-millions/https://circuitobserver.com/section/ai/bank-of-america-spends-hundreds-of-millions/Thu, 15 Oct 2026 19:00:02 +0000AIThe lender hired 1,000 contractors and deployed staff to fix vulnerabilities discovered by Anthropic’s Mythos model.https://circuitobserver.com/section/tech/8gb-pcs-see-mixed-results-after-windows-11-memory/https://circuitobserver.com/section/tech/8gb-pcs-see-mixed-results-after-windows-11-memory/Thu, 15 Oct 2026 18:57:29 +0000Tech NewsThe company says months of fixes improve performance on PCs with 8GB of RAM, though independent tests show mixed results for low-memory machines.https://circuitobserver.com/section/tech/2030-volvo-teams-with-nvidia-for-urban-hands-free/https://circuitobserver.com/section/tech/2030-volvo-teams-with-nvidia-for-urban-hands-free/Thu, 15 Oct 2026 18:52:23 +0000Tech NewsVolvo plans to use Nvidia technology to offer partially automated driving on local roads within six years.https://circuitobserver.com/section/vulnerabilities/30-gap-purpose-built-agents-outperform-general/https://circuitobserver.com/section/vulnerabilities/30-gap-purpose-built-agents-outperform-general/Thu, 15 Oct 2026 14:48:02 +0000VulnerabilitiesNew benchmark shows purpose-built agents outperform general coding tools by 30 points in safely upgrading vulnerable software packages.