Taklimat Pagi Saya

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vuln

Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9. A work profile is a separate s

Introducing the Agents API

Build and launch cloud agents with the Agents API, a managed service powered by the Codex harness for orchestration, long-running sessions, and tool use.

The Best Paragraph in My App Review Notes Was the First One I Deleted

I published my App Store review notes in full, then deleted a third of them four days later. The paragraph that worked best was the first to expire.

Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews

Deceptive apps in Early Access are being used by dishonest developers for their own benefit. The post Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews appeared first on SecurityWeek.

Google Play Early Access Abused to Push Thousands of Deceptive Android Apps

Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content. Early Access apps are apps that haven't been released on the official Android app marketplace.

MVP Is Dead. Long Live the MLP (Minimum Lovable Product)

I built two MVPs that nobody used. For Shipaton 2026, I’m trying a different approach: building a Minimum Lovable Product with Video Cue.

Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of

Microsoft Excel KB5002914 update breaks copy and paste for some users

Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality. [...]

Xbox Ambil Alih Hak Penerbitan PHYSINT Selepas Pembatalan Oleh PlayStation Studios – Turut Melibatkan Filem Dan Siri TV Bersama Kojima Productions

Xbox kini sah menjadi rakan penerbit baharu bagi projek terbaharu Kojima Productions, PHYSINT, susulan pembatalan mengejut oleh pihak PlayStation Studios. Menurut pengasas Kojima Productions, Hideo Kojima, studio tersebut menerima notis... The post X

Mark Wahlberg is coming to TechCrunch Disrupt 2026, and he wants to talk about your work, not his

Mark Wahlberg joins Bruce K. Lee at Disrupt to discuss investing, entrepreneurship, healthcare, wellness and building businesses.

Kingdom Come: Deliverance II Royal Edition Tiba Di Nintendo Switch 2 Tahun Depan

Warhorse Studios dan Deep Silver ketika acara Nintendo Direct telah mengumumkan bahawa Kingdom Come: Deliverance II Royal Edition bakal dilancarkan untuk konsol Nintendo Switch 2 pada tahun 2027. Versi ini... The post Kingdom Come: Deliverance II Roy

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, t

AVEVA Pipeline Integrity Monitor

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to disclose information, brute-force hashes, or run arbitrary code in a browser session. The following versions of AVEVA Pipeline Integrity Monitor are affecte

CVE-2026-84941 - Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read

CVE ID :CVE-2026-84941 Published : Sept. 10, 2026, 11:35 p.m. | 10 minutes ago Description :An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuratio

Delta Force Umum Kandungan Untuk Musim Reorientation

Kemas kini utama Delta Force, Season Reorientation, kini dilancarkan secara rasmi bersempena bab pertama sambutan ulang tahun kedua permainan first-person tactical shooter tersebut. Kemas kini ini membawakan pelbagai pembaharuan kandungan... The post

NextGen Healthcare Mirth Connect

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition. The following versions of NextGen Healthcare Mirth Connect are affected: Mirth Connect CVSS Vendor E

Cybersecurity M&A Roundup: 33 Deals Announced in August 2026

Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa. The post Cybersecurity M&A Roundup: 33 Deals Announced in August 2026 appeared first on SecurityWeek.

CVE-2026-16174 - Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

CVE ID :CVE-2026-16174 Published : Sept. 10, 2026, 11:16 p.m. | 29 minutes ago Description :Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to inde

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exp

Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox. The post Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster appeared first on SecurityWeek.

CVE-2026-87958 - IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions

CVE ID :CVE-2026-87958 Published : Sept. 10, 2026, 10:17 p.m. | 1 hour, 24 minutes ago Description :IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be di

CVE-2026-82099 - DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

CVE ID :CVE-2026-82099 Published : Sept. 10, 2026, 10:17 p.m. | 1 hour, 24 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of sp

Orthanc DICOM Server

View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc p

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that

CVE-2026-84889 - A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem

CVE ID :CVE-2026-84889 Published : Sept. 10, 2026, 10:17 p.m. | 1 hour, 24 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname t

Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.

CVE-2026-16172 - Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

CVE ID :CVE-2026-16172 Published : Sept. 10, 2026, 11:16 p.m. | 29 minutes ago Description :Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially

CVE-2026-77807 - AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter

CVE ID :CVE-2026-77807 Published : Sept. 10, 2026, 11:27 p.m. | 19 minutes ago Description :The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in al

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-86060 MikroTik

CVE-2026-82100 - DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

CVE ID :CVE-2026-82100 Published : Sept. 10, 2026, 10:17 p.m. | 1 hour, 24 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerabi

New Android malware encrypts files, steals data, and harasses victims

A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]

Mythos Vulnerability Firehose Hits a Human Bottleneck

An analysis of Project Glasswing findings shows only a fraction of the bugs it has discovered have reached disclosure, and an even smaller number have been fixed.

CVE-2026-81906 - [UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks

CVE ID :CVE-2026-81906 Published : Sept. 10, 2026, 11:20 p.m. | 25 minutes ago Description :Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A

CVE-2026-82107 - DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

CVE ID :CVE-2026-82107 Published : Sept. 10, 2026, 10:17 p.m. | 1 hour, 24 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictio

AI-powered attack exploited PaperCut flaws to hack 395 organizations

A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers. [...]

Mandiant Founder Kevin Mandia Joins Amazon Board

Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board. The post Mandiant Founder Kevin Mandia Joins Amazon Board appeared first on SecurityWeek.

ST Engineering iDirect iQ-Series Terminals (Update A)

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition. The following versions of ST Engineering iDirect iQ-Series Terminals

Surfshark VPN says hackers breached internal testing, proxy servers

Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. [...]

EU Cyber Resilience Act to Enforce New Reporting Requirements

Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.

Microsoft Plugs Nearly 400 Security Holes

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior

Anthropic Researcher Resigns With Warning About the Dangers of AI Development

Both Anthropic and OpenAI have seen high-profile resignations in recent years that were tied to safety concerns. The post Anthropic Researcher Resigns With Warning About the Dangers of AI Development appeared first on SecurityWeek.

3 ways to prep for your next big race with Search

Search can help runners get race-day ready with registration alerts, tailored training plans, and more.

Expanding AI access and cyber defense for federal, state, local, and tribal governments

OpenAI and GSA will offer eligible federal, state, local, and tribal governments $0 license fees, 50% off usage, and expanded cyber defense support.

I Gave My Indie App Two AI Spokespersons. 3,590 Views Later, Nobody Came Back

Amana’s AI characters earned thousands of views, but cleaned analytics revealed 40 users, one purchase, and no recorded day-two returns.

Persona 4 Revival Dan Persona 6 Diumumkan Untuk Nintendo Switch 2

SEGA dan Atlus ketika acara Nintendo Direct telah mengesahkan yang Persona 4 Revival dan Persona 6 akan turut dilancarkan untuk Nintendo Switch 2 menyertai PlayStation 5, Xbox Series dan PC... The post Persona 4 Revival Dan Persona 6 Diumumkan Untuk

Now everyone can put data to work

Meet the Data agent in ChatGPT Work. Connect company data, uncover insights, and build interactive dashboards with AI using natural language.

How to Choose a Crypto Trading Bot: Costs, Control, and Transparency

Choosing a crypto trading bot involves considering factors such as control, costs, and transparency, and evaluating different service models, including tools li

September Windows Server updates break Remote Desktop Services

Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, in some cases, requiring a hard reset to restore f

LandingAI Releases Agentic Document Extraction Gen2 with DPT-3 Pro and DPT-3 Verity

LandingAI has shipped Agentic Document Extraction Gen2, a rebuild of its document stack on the DPT-3 model family. Chunks are retired in favor of a document, page and block tree. DPT-3 Pro grounds to the line, DPT-3 Verity grounds to the word with a

Meet Redis LangCache: A Managed Semantic Cache That Cuts LLM API Costs by Up to 90% and Returns Cache Hits Up to 15x Faster

Production LLM applications rarely receive a question nobody has asked before. Support assistants and RAG pipelines field the same intents thousands of times a day, each phrased differently, and most stacks treat every phrasing as a fresh, fully bill

Ulasan Marvel’s Wolverine

Selepas meluangkan lima tahun membangunkan tiga permainan Spider-Man, Insomniac Games akhirnya hadir dengan IP baharu di bawah Marvel, iaitu Marvel’s Wolverine. Dengan kehangatan pasukan X-Men akhirnya menyertai MCU secara rasmi... The post Ulasan Ma

OpenAI puts Pro subscriptions on hold due to Astra demand

The company said Pro subscriptions put the most strain on its systems, so it's pausing sign-ups while adding more capacity.

Week 4 of Building Pocketflow for Shipaton 2026: Storage, Push Alerts & Navigation

Pocketflow adds persistent media storage, completion alerts, remote asset recovery, and viewport controls for long-running AI workflows.

Grab Dilaporkan Ingin Membeli Pegangan Majoriti Pada Atome

Grab kini dilaporkan sedang dalam perbincangan untuk membeli pegangan majoriti pada platform bayar nanti pakai lekas (BNPL), Atome Financial. Pembelian pegangan majoriti ini dijangka menilaikan Atome ini sekitar lebih $2 bilion. Atome pada hari ini s

How a researcher uses Codex and ChatGPT to search for new antimicrobial molecules

César de la Fuente’s lab uses Codex and ChatGPT to search living and extinct genomes for antimicrobial candidates to fight drug-resistant infections.

huggingface_hub v1.0: Five Years of Building the Foundation of Open Machine Learning

Gangguan Sementara Perkhidmatan Kad Debit CIMB Pada 19, 22 Dan 23 September 2026

CIMB Bank dan CIMB Islamic Bank Berhad memaklumkan bahawa akan berlaku gangguan sementara bagi semua transaksi kad debit pada tarikh 19, 22 dan 23 September 2026 berikutan kerja penyelenggaraan sistem. Sepanjang tempoh tersebut, semua pembelian mengg

DeepSeek AI Released DeepSeek-V4.1-Flash with 1M Context, FP4 KV Cache, and Cross-Layer Attention Reuse

Long-horizon agents have turned LLM serving into an input-heavy workload. Repeated prefills and million-token contexts leave KV caches that strain HBM, SSD capacity, and bandwidth. DeepSeek AI built its newest release around that exact bottleneck. De

Powering AI is an architecture problem

On July 22, 2026, a transmission line fault in Ashburn, Virginia—the heart of the world’s largest data center cluster—knocked more than 3 gigawatts of load off the grid in seconds. And it wasn’t the first time. Two years earlier, a single failed surg

Introducing ChatGPT for Financial Services

Introducing ChatGPT for Financial Services, combining built-in financial data and GPT-6 Astra for research, modeling, and client-ready materials.

DeepSeek Perkenal Model V4.1 Flash – Fokus Pada Prestasi Dan Kos

DeepSeek kini telah memperkenalkan model terbaru mereka yang lebih berkuasa berbanding pelbagai model mercu mereka sebelum ini, iaitu DeepSeek V4.1 Flash. Model ini memfokuskan kepada prestasi yang baik, dan pada masa yang sama mengurangkan kos pengg

Jensen Huang explains why Nvidia will grow an astounding 70% next year

Nvidia has its finger in every pie, and sees another year of plenty in its future, Jensen Huang says. But, he insists, its deals are not circular.

Suno Perkenal Model v6 – Model AI Memfokuskan Muzik Yang Dilatih Menggunakan Lagu Dilesenkan

Suno merupakan salah satu perkhidmatan berasaskan kecerdasan buatan yang membolehkan pengguna menjana lagu atau muzik dengan hanya melakukan input arahan berasaskan teks. Terbaru, Suno telah memperkenalkan model terbaru mereka, iaitu Suno v6. Suno v6

US Government Accuses Chinese AI Firms of Distilling Frontier Models

US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX's Grok to reduce development costs.

FBI Probes Service Selling 153M+ Drivers Licenses

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purc

OpenAI Launches the Agents API in Public Beta, Putting the Codex Harness Behind One API Call

OpenAI has released the Agents API in public beta. It gives developers the same harness and infrastructure that run Codex. OpenAI hosts and maintains the harness. Developers run the agent’s compute in an OpenAI-managed sandbox, their own infrastructu

NVIDIA Details BioNeMo Inference Runtime (BioIR): 2.90x Higher Boltz-2 Folding Throughput and 58.5K Residues per GPU-Hour on 8xH100

NVIDIA has detailed BioNeMo Inference Runtime (BioIR), a Python library that accelerates biomolecular structure-prediction models on NVIDIA GPUs while staying in plain PyTorch. In a matched benchmark on 1,000 human dimer targets across 8xH100 GPUs, B

Anthropic details distillation campaigns from Alibaba, Moonshot AI, and DeepSeek

A new report released Thursday by Anthropic alleges persistent distillation attacks by China-based AI companies, which have escalated in recent months as competition in the space has intensified.

10 Perkara Menarik & Mengecewakan iPhone 18 Pro dan iPhone Duo

iPhone 18 Pro, iPhone 18 Pro Max dan iPhone Duo dilancarkan awal pagi tadi. Akhirnya model “vanilla” baharu tidak lagi ditawarkan bersama dengan model Pro serta Apple akhirnya memasuki arena telefon boleh-lipat. Dengan harga ketiga-tiga model jauh le

Streaming datasets: 100x More Efficient

Building the Open Agent Ecosystem Together: Introducing OpenEnv

Rebuilding AUTOMATIC1111 with Gradio Workflow

LeRobot v0.4.0: Supercharging OSS Robot Learning

Thrive Capital led VCs into pro sports ownership; Collaborative Fund just upped that play

Collaborative Fund just bought into D.C. United and its stadium, with firm founder Craig Shapiro pitching it as a way to showcase for the firm's startups.