Blog
The stories worth knowing about.
Cybersecurity, AI and tech, web development, and business systems.
Sri Lanka reach ODI tri-series final: Madushanka 5-34 sinks Pakistan
Sri Lanka beat Pakistan by eight wickets in Lahore to reach the tri-series final on 31 October, ending England's hopes.
Trending
Most read this week
CybersecurityTrending, number 15 min readRank Math PRO 3.0.123 Was Trojanized: Check Your Site, Then Restore
Economy & MarketsTrending, number 25 min readSri Lanka exports reach US$13.6 bn in nine months: who gained, who lost
- CybersecurityTrending, number 35 min read
PHP RCE Flaws CVE-2026-109618 and 109619 Hit CISA KEV: Patch Now
CybersecurityTrending, number 44 min readAhsayCBS Backup Flaws Exploited: First Patch Failed, Use 10.3.4.45
Business & ISTrending, number 54 min readAmazon Now Lets Merchants Put Prime Delivery on Their Own Websites
AI & TechTrending, number 64 min readInside OpenAI's 'Wiki Incident' and Its New Disclosure Promise
Cybersecurity
57 posts
- 5 min read
PHP RCE Flaws CVE-2026-109618 and 109619 Hit CISA KEV: Patch Now
- 4 min read
Brotli flaw CVE-2026-111497: fixed versions for Node.js, .NET, Python
- 4 min read
Nextcloud Collabora Flaw CVE-2026-110447 Exploited: Update to 26.4.303
- 5 min read
Rank Math PRO 3.0.123 Was Trojanized: Check Your Site, Then Restore
- 4 min read
AhsayCBS Backup Flaws Exploited: First Patch Failed, Use 10.3.4.45
- 4 min read
Bricksforge Flaw CVE-2026-85097 Is Exploited: Update to 3.1.8.10
- 4 min read
SharePoint Bug Patched in August Is Now Exploited in Attacks
- 4 min read
WSO2 and Adobe Commerce Flaws Are Under Attack, US Deadline Passed
AI & Tech
51 posts
- 3 min read
Third Circuit Rejects Fair Use in First Appeal Over AI Training
- 4 min read
Claude Sonnet 5.5 Trades a Price Cut for Speed and Fewer Tool Calls
- 4 min read
OpenAI Halts AI Training Again After a String of Agent Mishaps
- 4 min read
Alibaba's Qwen Team Cuts Voice AI Prices Up to 95% With New Models
- 4 min read
OpenAI Agent Hacked an Australian Medicare Site, Told Months Later
- 3 min read
Claude Opus 5.5 Lands With a 20% Price Cut and a 1M-Token Window
- 4 min read
OpenAI Cuts Prices in Half With New GPT-6 Sol and Luna Models
- 3 min read
Google's Intrinsic Open-Sources Its Industrial Robot Software Stack
Web Development
36 posts
- 4 min read
Node.js Moves to One Release a Year, With LTS for Every Major
- 4 min read
WordPress Patches a Bug That Turns a Comment Into a Takeover
- 4 min read
Next.js Ships an Emergency RCE Fix, Then Nine More Bugs Loom
- 4 min read
Chrome 153 Rewrites Its XML Parser in Rust and Adds 3D Web Audio
- 4 min read
Chrome and Firefox Both Just Switched to Two-Week Release Cycles
- 4 min read
Cloudflare Now Blocks AI Crawlers by Default on Ad-Supported Pages
- 4 min read
Safari 27 Ships With Customizable Dropdowns and Async WebAssembly
- 4 min read
Ladybird's From-Scratch Browser Engine Just Closed a Big Speed Gap
Business & IS
43 posts
- 4 min read
Finastra Launches Supply Chain Finance Platform for Banks at Sibos
- 4 min read
Amazon Now Lets Merchants Put Prime Delivery on Their Own Websites
- 4 min read
Salesforce Suffers Global Outage on Day Two of Dreamforce 2026
- 4 min read
Amazon Lets Outside AI Agents Run Sellers' Stores, Starting With Claude
- 4 min read
Ema Raises $77M as AI Agents Push Into Enterprise Software's Turf
- 3 min read
Vecna Robotics Raises $31M to Chain Warehouse Robots Into One Flow
- 4 min read
Aptean Buys Dutch Fleet Software Firm FleetGO from Main Capital
- 4 min read
Descartes Buys Extensiv for $120 Million, Its Second Deal in Eight Days
Sports
1 post
All posts
Page 1 of 8
- Sports3 min read
Sri Lanka reach ODI tri-series final: Madushanka 5-34 sinks Pakistan
Sri Lanka beat Pakistan by eight wickets in Lahore to reach the tri-series final on 31 October, ending England's hopes.
- Economy & Markets5 min read
Sri Lanka exports reach US$13.6 bn in nine months: who gained, who lost
Exports rose 5.04% to US$13.61 billion by September, but electronics and spices grew while apparel and tea fell.
- Cybersecurity5 min read
PHP RCE Flaws CVE-2026-109618 and 109619 Hit CISA KEV: Patch Now
Update PHP to 8.2.35, 8.3.36, 8.4.27 or 8.5.12; CISA added both critical flaws to its exploited list on 26 October 2026.
- Cybersecurity4 min read
Brotli flaw CVE-2026-111497: fixed versions for Node.js, .NET, Python
CVE-2026-111497 is a critical Brotli bug patched in Node.js, .NET and Python; update to Node 22.23.4, 24.22.1 or 26.12.1 and .NET 8.0.33, 9.0.22 or 10.0.14.
- Cybersecurity4 min read
Nextcloud Collabora Flaw CVE-2026-110447 Exploited: Update to 26.4.303
Nextcloud's built-in Collabora server has been exploited since September; update richdocumentscode to 26.4.303 and delete any shx*.php web shells.
- Cybersecurity5 min read
Rank Math PRO 3.0.123 Was Trojanized: Check Your Site, Then Restore
Rank Math PRO 3.0.123, downloaded 15-16 Oct 2026, carried malware (CVE-2026-111862); updating to 3.0.124 does not clean an infected site.
- Cybersecurity4 min read
AhsayCBS Backup Flaws Exploited: First Patch Failed, Use 10.3.4.45
Two exploited AhsayCBS flaws (CVE-2026-105133, CVE-2026-105134) survive builds 10.3.4.0 and 9.15.2.59; fixed in 10.3.4.45 and 9.15.2.70.
- Cybersecurity4 min read
Bricksforge Flaw CVE-2026-85097 Is Exploited: Update to 3.1.8.10
Bricksforge 3.1.8.9 and older let anyone upload PHP; attacks began 7 October. Update to 3.1.8.10 and check uploads for planted files.
- Web Development4 min read
Node.js Moves to One Release a Year, With LTS for Every Major
From Node.js 27, one major ships each April, every version gets 30 months of LTS, and a new Alpha channel starts in October 2026.
- AI & Tech3 min read
Third Circuit Rejects Fair Use in First Appeal Over AI Training
The Third Circuit upheld Thomson Reuters' win over ROSS Intelligence on 29 September, but its opinion is sealed and the facts make it a narrow precedent.
- Cybersecurity4 min read
SharePoint Bug Patched in August Is Now Exploited in Attacks
CVE-2026-65660 lets a low-privilege user run code on SharePoint Server; attacks began 24 September and CISA set a 28 September patch deadline.
- Business & IS4 min read
Finastra Launches Supply Chain Finance Platform for Banks at Sibos
Finastra's new Supply Chain Finance product wires banks' Trade Innovation and Loan IQ systems directly into corporate ERP platforms.
- AI & Tech4 min read
Claude Sonnet 5.5 Trades a Price Cut for Speed and Fewer Tool Calls
Anthropic's new Sonnet 5.5 keeps Sonnet 5's price but claims 30% faster output and near-Opus scores on real-world task benchmarks.
- Cybersecurity4 min read
WSO2 and Adobe Commerce Flaws Are Under Attack, US Deadline Passed
CISA's order to patch two actively exploited bugs in WSO2 gateways and Adobe Commerce expired September 27, and both remain under attack.
- AI & Tech4 min read
OpenAI Halts AI Training Again After a String of Agent Mishaps
OpenAI paused training of its most advanced models for the second time in three months after a run of agent safety failures.
Cybersecurity4 min readCitrix Patches Two NetScaler Zero-Days Already Under Attack
Citrix fixed two critical NetScaler flaws on September 27 that attackers were already exploiting before any patch existed.
- Business & IS4 min read
Amazon Now Lets Merchants Put Prime Delivery on Their Own Websites
Amazon's Multichannel Fulfillment merchants can now offer Prime delivery on their own websites at no cost beyond standard fulfillment fees.
- AI & Tech4 min read
Alibaba's Qwen Team Cuts Voice AI Prices Up to 95% With New Models
Alibaba's Qwen team released five new audio AI models on September 23 and cut voice API prices by up to 95 percent.
Cybersecurity4 min readKiteworks Asks Its Whole Customer Base to Power Down for Nine Hours
Kiteworks told customers to shut down their file-transfer systems for nine hours after a still-unnamed threat was flagged by federal investigators.
- Business & IS4 min read
Salesforce Suffers Global Outage on Day Two of Dreamforce 2026
An overloaded internal login service knocked Salesforce offline worldwide for about three hours during its own Dreamforce conference.
- Web Development4 min read
WordPress Patches a Bug That Turns a Comment Into a Takeover
A WordPress core flaw let anyone's blog comment quietly become full server control once an admin viewed it, so update to the September 17 fix now.
- AI & Tech4 min read
OpenAI Agent Hacked an Australian Medicare Site, Told Months Later
An OpenAI research agent broke into a government Medicare portal in June, but Canberra was not told about it until September.
Cybersecurity4 min readGyazo Breach Exposes 23.6 Million Accounts and 490 Million Images
A hacked upload server let an attacker pull 23.6 million Gyazo account records and metadata for 490 million images.
- Business & IS4 min read
Amazon Lets Outside AI Agents Run Sellers' Stores, Starting With Claude
A new Amazon beta plugin lets third-party sellers manage pricing, inventory and listings from Claude or Amazon Quick instead of logging into Seller Central.