Ivanti has patched CVE-2026-104935, exploited since early October on its VPN gateways. But the attack chain also relies on a privilege escalation flaw that remains unpatched.
Startup AIR found a way to bypass Vercel Sandbox's network filtering and exfiltrate data. Vercel is still working out how to fix the flaw, which AIR says is not being exploited at this stage.
Since October 13, Gemini 4 Argon has been available via API and in Google's paid plans, at a launch price that will double on November 30. Its performance claims rest mostly on Google's own measurements.
In a study published October 12, two Anthropic researchers estimate that small open models could, within months, spread on their own across poorly secured connected devices.
Chatbot service Character.AI has filed for Chapter 11 protection in the United States. Disney's offer sets a price floor, and the platform stays open during the proceedings.
On October 13, the European Data Protection Board published a statement on smart glasses: manufacturers cannot shift their GDPR obligations onto wearers.
XBOW received $250,000 from Google for a chain of three Chrome vulnerabilities on Windows, found and exploited by four researchers assisted by GPT-5.6 Sol. The flaws have been patched.
In its October 13 Patch Day, SAP fixes a critical flaw in the Cloud SDK for Python that could expose OAuth2 secrets, along with three other critical vulnerabilities.
Docker has fixed CVE-2026-105445: by converting an account into an organization, an attacker could act on the registry as another user. Docker found no evidence of exploitation.
Apple is launching HomeView, its smart home display, but not in the European Union: its Siri AI assistant is blocked on iPhone there, which Apple blames on the DMA.
The Cyberiack method
Every piece of information is cross-checked against primary sources (vendors, CERT-FR, ANSSI, CISA…) and cited.
AI-assisted monitoring scans the news several times a day.
No information without action: fixed versions, workarounds, indicators of compromise, the right reflexes.
A reading of events informed by hands-on operational cybersecurity experience, beyond the press release.
