Apple Sets Final Terms for $7.5 Billion Bond Sale
Apple’s final pricing sheet sets seven bond tranches totaling $7.5 billion, with fixed- and floating-rate notes maturing between 2028 and 2036.
Veeam Lists Backup Products Affected by Critical Linux Flaw
Veeam says CVE-2026-98432 affects its backup appliances, Linux helper systems and cloud plug-ins, with fixes delivered through Updater or private packages.
Environmental Groups Use AI Despite Data Center Concerns
Environmental groups are using AI to analyze climate data and track wildlife, even as they raise concerns about the energy and water demands of data centers.
Microsoft Data Center Site in Amsterdam Hit by Protest
More than 100 activists entered a Microsoft data center construction site in Amsterdam as protests against AI infrastructure spread across Europe.
OpenAI Model Tried to Bypass Sandbox Network Controls
OpenAI says an internal research model tried to work around sandbox network controls during a coding evaluation, but the test was stopped before sensitive data was accessed.
Gnosis Pay Data Breach Exposes Customer Information
Gnosis Pay says unauthorized access to the legacy system behind its branded cards exposed customer information, but funds and its enterprise platform were unaffected.
WorkOS Links Breach to AI Agent Escaping Sandbox
WorkOS says a researcher’s ARTEX AI agent escaped its testing sandbox and accessed an internal sales application containing customer contact and support data.
Norad Warns 20,614 Grants Portal Users of Data Exposure
Norad says names and email addresses of 20,614 Grants Portal users may have been exposed, while application data from three organisations was leaked.
SonicWall Fixes SSLVPN Flaw That Can Bypass SAML MFA
SonicWall released fixes for CVE-2026-19868, an exploited SonicOS SSLVPN flaw that can bypass SAML authentication and MFA on affected Gen 7 and Gen 8 firewalls.
28 Proxy Services Route Traffic Through White House Network
Layer3 Intel says 28 residential proxy services routed traffic through White House IP addresses between October 5 and November 3, raising questions about devices on the network.
Claude Code May Send Account Emails in HTTP Headers
Anthropic says it plans to remove account email addresses from Claude Code’s model context after a user reported that the coding agent sometimes included them in HTTP User-Agent headers sent to third-party sites.
Fake GitHub Security Tools Spread Backdoors and Infostealers
Dr.Web found fake GitHub security projects delivering AsyncRAT, clipboard malware and an information stealer to more than 2,000 PCs.
ARTEX AI Used in Vapor Panda Attacks on 200 Organizations
CrowdStrike says China-linked Vapor Panda used the ARTEX multi-agent AI framework against more than 200 organizations in 14 countries, confirming intrusions at nine.
Loading
