Tech News

1. Data Breaches and Leaks:

   • SaaS giant Workiva disclosed a data breach following a Salesforce attack. 👉 bleepingcomputer.com
   • Chess.com disclosed a recent data breach via a third-party file transfer app. 👉 bleepingcomputer.com
   • Online chess players' data leaked in third-party breach. 👉 cybernews.com
   • A massive data breach at PowerSchool exposed the personal information of 62M students, including 880k Texans, leading to a lawsuit from Texas. 👉 bleepingcomputer.com
   • A student loan breach exposed 2.5M records. 👉 threatpost.com (1 week ago)
   • Zscaler data breach exposes customer info after Salesloft Drift compromise. 👉 bleepingcomputer.com (4 days ago)
   • US sues robot toy maker for exposing children's data to Chinese devs. 👉 bleepingcomputer.com (1 day ago)

2. AI and Security:

   • Threat actors are abusing X's Grok AI to spread malicious links. 👉 thehackernews.com
   • Cybercriminals are exploiting X’s Grok AI to bypass ad protections and spread malware to millions. 👉 thehackernews.com 👉 bleepingcomputer.com (1 day ago)
   • Police disrupts Streameast, largest pirated sports streaming network. 👉 bleepingcomputer.com (1 day ago)
   • Hackers use new HexStrike-AI tool to rapidly exploit n-day flaws. 👉 thehackernews.com 👉 bleepingcomputer.com (2 days ago)
   • DeepSeek is developing an agentic AI model to rival OpenAI. 👉 bloomberg.com^$
   • Cybercrime groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services. 👉 krebsonsecurity.com (1 week ago)
   • As the Pentagon races to deploy AI into its weapons systems, some experts fear humans can't keep up with models that prefer to escalate aggressively in a crisis. 👉 politico.com (3 days ago)
   • OpenAI plans to launch a jobs platform next year to match employers with candidates with AI skills, and a certification program for AI roles in the coming months. 👉 bloomberg.com^$
   • They know where you are: Cybersecurity and the shadow world of geolocation. 👉 bleepingcomputer.com (2 days ago)
   • At IFA 2025, tech giants like Amazon, Google, Samsung, and LG, and startups like Doma, are expected to showcase how AI could make smart homes more intuitive. 👉 theverge.com (1 day ago)

3. Government and Regulations:

   • The US Army awards a $98.9M contract to TurbineOne to deploy AI software that helps identify drones and other threats, processing all data on soldiers' devices. 👉 wsj.com^$
   • US offers $10 million bounty for info on Russian FSB hackers. 👉 bleepingcomputer.com (2 days ago)
   • US banking groups warn that a GENIUS Act loophole that lets crypto exchanges reward stablecoin holdings could push people to pull money from traditional banks. 👉 wired.com (1 day ago)
   • Disney to pay $10M to settle claims it collected kids’ data on YouTube. 👉 bleepingcomputer.com (2 days ago)
   • The Trump administration plans to ease rules for self driving cars by removing some requirements designed for human drivers, such as windshield wipers. 👉 bloomberg.com^$
   • The French data protection authority has fined Google €325 million ($378 million) for violating cookie regulations and displaying ads between Gmail users' emails without their consent. 👉 bleepingcomputer.com (1 day ago)
   • Nepal's government is blocking most social media platforms including Facebook, X and YouTube because the companies failed to comply with regulations that required them to register with the government. 👉 apnews.com (1 day ago)
   • CEOs of Apple, Google, Meta, OpenAI, and others will attend a dinner hosted by President Trump at the White House Rose Garden. 👉 thehill.com

4. Vulnerabilities and Exploits:

   • Google fixes actively exploited Android flaws in September update. 👉 bleepingcomputer.com (2 days ago)
   • CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited. 👉 thehackernews.com
   • Threat actors have been exploiting a zero-day vulnerability in legacy Sitecore deployments to deploy WeepSteel reconnaissance malware. 👉 bleepingcomputer.com (1 day ago)
   • New TP-Link zero-day surfaces as CISA warns other flaws are exploited. 👉 bleepingcomputer.com (1 day ago)
   • EU antitrust regulators halt probe into Universal Music's Downtown deal. 👉 reuters.com
   • Microsoft says recent Windows updates cause app install issues. 👉 bleepingcomputer.com (1 day ago)
   • Firewall Bug Under Active Attack Triggers CISA Warning (3 days ago) 👉 threatpost.com
   • iPhone Users Urged to Update to Patch 2 Zero-Days (1 week ago) 👉 threatpost.com

5. Cybercrime and Threat Actors:

   • An Anthropic executive says the company will stop selling AI services to majority Chinese-owned groups. 👉 t.co
   • The US v. Google ruling signals a cautious antitrust approach by courts and a reluctance to intervene too deeply, ahead of other Big Tech antitrust rulings. 👉 nytimes.com^$
   • Russia's APT28 Deploys "NotDoor" Outlook Backdoor Against Companies in NATO Countries. 👉 thehackernews.com
   • GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module. 👉 thehackernews.com
   • Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers. 👉 thehackernews.com
   • An Anthropic executive says the company will stop selling AI services to majority Chinese-owned groups. 👉 t.co
   • The Hill (1 week ago) 👉 thehill.com
   • A 20-year-old Florida man at the center of a prolific cybercrime group known as “Scattered Spider” was sentenced to 10 years in federal prison. 👉 krebsonsecurity.com (1 week ago)
   • The Trump administration continues to pursue Big Tech antitrust cases while defending US tech companies overseas. 👉 t.co (1 day ago)
   • Police disrupts Streameast, largest pirated sports streaming network. 👉 bleepingcomputer.com (2 days ago)
   • Cybercriminals Are Selling Access to Chinese Surveillance Cameras (1 week ago) 👉 threatpost.com
   • The Information (1 day ago) 👉 theinformation.com
   • Reuters (1 day ago) 👉 reuters.com
   • US offers $10 million bounty for info on Russian FSB hackers. (2 days ago) 👉 bleepingcomputer.com

6. Business and Finance:

   • The Trump administration plans to ease rules for self driving cars. 👉 bloomberg.com^$
   • An Atlassian agrees to acquire The Browser Company for $610M in cash, set to close by December. 👉 cnbc.com
   • Docusign reports Q2 revenue up 9% YoY to $800.6M vs. $780.1M est., raises FY 2026 sales outlook, and forecasts Q3 revenue above est.; DOCU jumps 8%+. 👉 wsj.com^$
   • Honeywell's Quantinuum raised $600M from Quanta, Nvidia's NVentures, and others at a $10B pre-money valuation, up from $5B after raising $300M in January 2024. 👉 bloomberg.com^$
   • Broadcom reports Q3 revenue up 22% YoY to $16B, vs. $15.8B est., AI revenue up 63% to $5.2B, vs. $5.11B est., and forecasts Q4 revenue above estimates. 👉 bloomberg.com^$
   • ID.me, a digital ID service used by US agencies like the IRS, raised a $340M Series E led by Ribbit at a $2B+ valuation, bringing its total funding to $580M+. 👉 reuters.com
   • Lead Bank, a 97-year-old Missouri bank rebuilt to serve fintech and crypto firms, raised $70M from a16z, Khosla Ventures, and others at a $1.47B valuation. 👉 bloomberg.com^$
   • SK Hynix's union approves SK's 6% wage bump plus 10% of SK's annual profit allocated to a bonus pool, costing ~$2.7B for 33,625 staff in 2025, averting a strike. 👉 bloomberg.com^$
   • Despite a setback in the US DOJ's Google case, the Trump administration continues to pursue Big Tech antitrust cases while defending US tech companies overseas. 👉 t.co
   • A $10 million settlement was reached between Disney and the FTC. 👉 bleepingcomputer.com (2 days ago)
   • Atlassian to pay $610M in cash for acquiring The Browser Company, expanding into AI-powered browsers. 👉 cybernews.com
   • Amazon's Project Kuiper signs up JetBlue as its first airline customer to use its satellite internet for in-flight Wi-Fi in 25% of JetBlue's fleet from 2027. 👉 wsj.com^$

7. Products and Services:

   • New AI model turns photos into explorable 3D worlds, with caveats. 👉 arstechnica.com
   • Meta rolls out a tool that lets users attach up to 10,000 characters of text to Threads posts. 👉 theverge.com
   • Switzerland launches Apertus, an open-source AI model trained on publicly available data across 1,000+ languages, in 8B- and 70B-parameter sizes on Hugging Face. 👉 engadget.com
   • Samsung unveils the $650+ Galaxy S25 FE and the $800+ Tab S11 in 11" and 14.6" versions, offering thinner, lighter designs and modest spec bumps, shipping now. 👉 theverge.com
   • Google now lets US-based Google Photos users turn static images into silent four-second videos using its Veo 3 model. 👉 theverge.com
   • At IFA 2025, Philips Hue unveils a major product refresh, including a $99 Hue Bridge Pro, updated $25+ smart bulbs, and the $170 Hue Secure, its first doorbell. 👉 theverge.com

1757031000000