Taklimat Pagi Saya

Siemens SIMOVE Fleetmanager and SIPLANT

View CSAF Summary SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to t

Honor of Kings Kembali Ke Sukan Asia, Musim 16 Memfokuskan Flow State

Honor of Kings akan kembali dipertandingkan sebagai acara esukan rasmi di Sukan Asia 2026. Acara ini dijadualkan berlangsung dari 27 hingga 28 September, menandakan kali kedua berturut-turut permainan ini disenaraikan... The post Honor of Kings Kemba

Back to The Future: Evaluating AI Agents on Predicting Future Events

Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign

Threat actors are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.

The AI Hype Index: AI loves cheating

Brace yourself: It turns out AI is being optimized for cheating. OpenAI’s agents hacked into Hugging Face to get the answers to a cybersecurity test. Next, they solved a prestigious math problem (or just stole from two top mathematicians’ answer shee

Brain Launches The Company Memory That Makes Every AI in The Business Worth Using

Businesses have no shortage of AI tools to choose from. The harder problem is getting those tools to understand the business they are supposed to

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek.

YouTube Akan Membolehkan Pengguna Kawal Algoritma Paparan Video Dengan AI

Pada hari ini, apabila anda melayari halaman utama YouTube, pelbagai video dipaparkan kepada anda melalui algoritma yang ditetapkan oleh YouTube, tanpa anda boleh mengawalnya. Perkara ini dijangka akan berubah tidak lama lagi. Pada acara yang diadaka

Snapdragon Sound Elite Gen 2 Dilancarkan Untuk Cermin Mata dan Fon Telinga Pintar Berkamera

Semalam dua cip mercu untuk telefon pintar Snapdragon 8 Elite Extreme Gen 6 dan Snapdragon 8 Elite Gen 6 dilancarkan. Hari ini tumpuan Snapdragon Summit dipindahkan pula kepada segmen yang semakin popular iaitu peranti boleh-pakai pintar. Ini termasu

OpenAI extends cyber access to Ukraine for civilian defense

OpenAI is extending access to its Daybreak program to the Government of Ukraine to support the cyber defense of civilian infrastructure.

Sam Altman’s remarks at the United Nations Security Council

OpenAI CEO Sam Altman discusses AI safety, human control, and international cooperation in remarks to the United Nations Security Council.

Harvey turns legal context into stronger drafts with GPT-6 Astra

GPT-6 Astra produces more structured, context-aware legal documents, freeing lawyers to focus on strategy.

Empire in Decay Akan Diterbitkan Oleh Stardock Entertainment

Penerbit Stardock Entertainment dan studio Siesta Games telah mengumumkan Empire in Decay, sebuah judul baharu bergenre roguelike deckbuilder yang dijadualkan pelancaran untuk PC melalui Steam pada awal 2027. Mengambil latar... The post Empire in Dec

An Accurate and Interpretable Hyper Graph Neural Network for GBM Survival Prediction

arXiv:2609.25088v1 Announce Type: new Abstract: Survival prediction for glioblastoma multiforme (GBM) demands models that are both accurate and interpretable, yet existing approaches treat these objectives as com- peting, where performant models sacr

Nokia Open-Sources AnyJev: A Training-Free Layer That Turns Any Open LLM Into a Calibrated Decision Model

Nokia’s applied research team has open-sourced AnyJev, a Python library that turns an open LLM into a decision model. It needs no training. It targets a common production job: picking one answer from a fixed set instead of writing a sentence. Is it d

Dune: Awakening Dilancarkan Secara Rasmi Untuk PS5 Dan Xbox Series – Bawa Mod Solo

Dune: Awakening kini dilancarkan secara rasmi untuk PlayStation 5 dan Xbox Series. Pelancaran ini membawa bersama kemas kini utama yang turut tersedia untuk versi PC, menampilkan mod pemain solo serta... The post Dune: Awakening Dilancarkan Secara Ra

Do Existing Preconditioners Improve Biomedical Tabular Foundation Learning? An Empirical Study on TabPFN Optimization

arXiv:2609.25013v1 Announce Type: new Abstract: Tabular foundation models have recently shown strong potential for structured biomedical data analysis. Among them, TabPFN has emerged as an effective approach for low-data tabular classification tasks.

Placeholder domain used in dev docs now serves ClickFix attacks

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]

Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios

The idea that AI could break away and work toward its own agenda is looking increasingly plausible to researchers and experts. The post Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios appeared first on SecurityWeek.

Accelerate a World of LLMs on Hugging Face with NVIDIA NIM

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. Git

Micron Dilaporkan Menghentikan Pengeluaran Memori 2GB GDDR7 Yang Digunakan Kad Grafik Kelas Pengguna

Micron, salah satu syarikat pengeluar komponen memori utama global baru-baru ini dilaporkan akan ataupun telah menghentikan pengeluaran komponen memori 2GB GDDR7 yang secara lazimnya digunakan untuk membina kad grafik kelas pengguna. Perkara ini dila

Razer Mako X Diperkenalkan – Pembesar Suara Kecil Dengan Kualiti Audio Mendebarkan

Jenama perkakasan dan akseosri gaming terkemuka Razer baru-baru ini telah memperkenalkan penawaran gaming terbaru mereka, iaitu pembesar suara Razer Mako X, iaitu sebuah sistem pembesar suara padat yang hadir dengan dua satelit yang menawarkan pengal

Meta is trying VR glasses (again), this time with more IMAX

Meta's return to the VR glasses realm comes with a promising combination of light weight form factor and enhanced entertainment options.

Google Releases Gemini 3.8 Flash TTS and Flash-Lite TTS With Prompt-Based Voice Design

Google has released Gemini 3.8 Flash TTS and Flash-Lite TTS, 2 new text-to-speech models available now through the Gemini API and Google AI Studio. Flash TTS designs new voices from natural language prompts across 100+ languages. It ranks #1 on Hume

Kyutai Releases Voice of Reason: A Speech-Native Model that Solves Spoken Math with Reinforcement Learning

Kyutai has released Voice of Reason, 2 open-weight speech-to-speech models built on GLM-4-Voice-9B. Supervised fine-tuning and reinforcement learning lift spoken GSM8K accuracy from 27.3% to 77.1%. There is no transcription step and no text LLM in th

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.

Consilium: When Multiple LLMs Collaborate

Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. [...]

Two years of OpenAI Academy

Marking two years of OpenAI Academy and bringing AI skills to even more communities.

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and cryp

4DGS-JEPA: Temporally Compositional Joint-Embedding Prediction for Dynamic Gaussian Splatting

arXiv:2609.25036v1 Announce Type: new Abstract: Dynamic Gaussian Splatting provides an explicit representation of evolving 3D scenes, but existing approaches are primarily optimized for reconstruction, future-state generation, or rendering rather tha

NVIDIA Releases Nemotron 3 Diarization: A 100M-Parameter Open-Weight Model That Tracks 8 Speakers in Real Time

NVIDIA has released Nemotron 3 Diarization, an open-weight speaker diarization model on Hugging Face. It answers one question about any conversation: who spoke when. The 100M-parameter model tracks up to 8 speakers, including when voices overlap. One

Do Synthetic Personas Predict Real Audience Response? A Sim-to-Real Study Where a No-Persona Baseline Beats Persona-Based Copy Simulation

arXiv:2609.25010v1 Announce Type: new Abstract: Marketers increasingly use large language models (LLMs) as "synthetic personas" to predict how an audience will react to a piece of copy before it ships, encouraged by evidence that profile-conditioned

Ovis-Embedding: Pushing the Frontiers of Universal Omni-Modal Embeddings

arXiv:2609.25165v1 Announce Type: new Abstract: In this report, we introduce \textbf{Ovis-Embedding}, a state-of-the-art omni-modal embedding family built on native integration of text, image, video, and audio. Instead of assembling separate modality

How invideo improves color grading 3x with GPT‑6 Astra

With GPT‑6 Astra, invideo plans edits with greater precision, improves color correction and grading threefold, and produces 50 custom effects in one day.

AI Drone Agents for Autonomous Navigation

This article is a builder's tour of how AI and autonomy come together to make a drone navigate on its own, and the classical stack that actually flies today.

OpenAI Releases GPT-6 Sol and Luna: 50% Cheaper API Pricing and Benchmarks

OpenAI has released GPT-6 Sol and GPT-6 Luna, 2 lower-cost models trained with methods similar to GPT-6 Astra. Sol costs $2/$10 and Luna $0.10/$0.50 per 1M tokens. Both are available now in the API, ChatGPT Work and Codex. They come with improved pro

OpenAI Turut Memperkenalkan GPT-6 Sol Dan Luna

Selain Anthropic yang memperkenalkan kemaskini untuk penawaran model kecerdasan buatan mereka, kini OpenAI turut tidak ketinggalan dan telah mengumumkan penawaran GPT-6 Sol dan Luna kepada para pengguna. Pengenalan ini mengikuti penawaran GPT-6 Astra

[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

Google Beam expands with new regions, partners, and customers

We’re expanding Google Beam to five new countries, and partnering with Industrious for an extended network.

EDR Evasion Stack Helps Process Injection Slip Past Defenses

A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.

Meta introduces camera-free AI glasses

Meta says the camera-free glasses will be lighter and have up to 12 hours battery life.

Xbox Game Studios Meneruskan Penstrukturan Semula – 286 Pekerja Dihentikan, Halo Kini Dibawah Activision

Microsoft meneruskan langkah penstrukturan semula Xbox secara besar-besaran yang menyaksikan pemberhentian 268 pekerja dan pemindahan hak pembangunan francais utama Halo kepada Activision, manakala studio Ninja Theory kini berdepan dengan risiko... T

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

[local] Microsoft Edge 150.0.4078.48 - RCE

Microsoft Edge 150.0.4078.48 - RCE

[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion

Ray 2.56.0 - Directory Traversal & Local File Inclusion

Meet the Developer Advocate [HackerNoon Interview]

Meet the Developer Advocate: a HackerNoon interview series on DevRel philosophy, community growth, product-led marketing and the launches that worked.

IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU DecoderIonQ Says Sin

IonQ’s new single processor quantum error decoder minimizes the classical computing overhead in quantum error correction. The post IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU DecoderIonQ Says Sin appeared first on SecurityWeek.

lwIP TCP/IP Stack MQTT Client Application

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device. The following versions of lwIP TCP/IP Stack MQTT Client Application are affected: MQTT Client Application >=2.0.1| CVSS

CVE-2026-96604 - SoftNews Media Group DataLife Engine Search search.php strip_data sql injection

CVE ID :CVE-2026-96604 Published : Sept. 23, 2026, 10:17 p.m. | 1 hour ago Description :A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the com

Hackers start exploiting critical WordPress flaw for code execution

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]

New RemControl Android banking malware targets users in Europe and Canada

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]

CVE-2026-96680 - ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

CVE ID :CVE-2026-96680 Published : Sept. 23, 2026, 11 p.m. | 17 minutes ago Description :A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.add

CVE-2026-81537 - DataStage on Cloud Pak for Data has several vulnerabilities

CVE ID :CVE-2026-81537 Published : Sept. 23, 2026, 10:16 p.m. | 56 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection. Severity: 8.8 |

CVE-2026-19125 - EthPress <= 2.3.5 - Unauthenticated Authentication Bypass

CVE ID :CVE-2026-19125 Published : Sept. 23, 2026, 10:16 p.m. | 56 minutes ago Description :The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verify_l

Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators

Introduction The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA)—hereafter referred to as the “authoring agencies”—have published this fact sheet to highlight considerations for critical infrastructur

Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare

Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature. The post Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare appeared first on SecurityWeek.

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious

CVE-2026-96676 - Fast FAC1900R uhttpd get_alias_name stack-based overflow

CVE ID :CVE-2026-96676 Published : Sept. 23, 2026, 10:30 p.m. | 47 minutes ago Description :A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation

How the CISO-CMO Alliance Builds Trust Before Crisis Strikes

Cybersecurity and brand reputation are inextricably linked. Security and marketing leaders who establish regular touchpoints, develop joint crisis communications plans, and translate security risks into their brand impact position their organizations

CVE-2026-96678 - weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal

CVE ID :CVE-2026-96678 Published : Sept. 23, 2026, 10:45 p.m. | 32 minutes ago Description :A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate o

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According

Adobe Patches Critical Flaws in Connect, AEM Forms

The nine critical security defects could be exploited for arbitrary code execution and privilege escalation. The post Adobe Patches Critical Flaws in Connect, AEM Forms appeared first on SecurityWeek.

The Scarce Resource in an Indie Studio Isn't Money. It's Attention.

Why attention may be the scarcest resource in an indie game studio, and how founders can focus their limited time on the work that creates the most value.

CVE-2026-80423 - DataStage on Cloud Pak for Data has several vulnerabilities

CVE ID :CVE-2026-80423 Published : Sept. 23, 2026, 10:16 p.m. | 56 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide

CVE-2026-86583 - Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields

CVE ID :CVE-2026-86583 Published : Sept. 23, 2026, 10:16 p.m. | 56 minutes ago Description :The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plug

CVE-2026-70125 - Microsoft Outlook Remote Code Execution Vulnerability

CVE ID :CVE-2026-70125 Published : Sept. 23, 2026, 10:40 p.m. | 37 minutes ago Description :None Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an

Siemens Siveillance Control

View CSAF Summary A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbit

CVE-2026-93352 - Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload

CVE ID :CVE-2026-93352 Published : Sept. 23, 2026, 10:16 p.m. | 56 minutes ago Description :Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blockl

UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

The United Arab Emirates and Kingdom of Saudi Arabia together absorbed 50% of all cyberattacks recorded across the Gulf region in the first half of 2026.

Siemens Desigo CC family

View CSAF Summary A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverag

[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting

LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting

Vogue sent robots down the runway at Vogue World, and people were not impressed

Nothing says Italian craftsmanship like a Chinese robot doing a lasso to "L'Amour Toujours."

If Amazon doesn’t know how to eliminate carbon emissions, then who does?

Amazon is one of the largest companies in the world. How much responsibility does it have to meet its net-zero pledge?

How to Use NVIDIA Warp and MjWarp to Accelerate Robotics Simulation and Learning Workflows

Arc Virtual Cell Challenge: A Primer

Travala Launches Permanent AVA Strategic Reserve, Doubles Monthly Open-Market Buybacks

More travel bookings → more member givebacks → more open-market AVA buybacks → more AVA permanently locked. A new matching structure doubles monthly open-market

Anthropic says its biology lab has already found something big

But maybe the biggest reveal is that Anthropic has not let Claude run loose in its biology lab. Humans are still, so far, in the loop.

Sukan Asia 2026 – Malaysia Bawa Pulang Emas Untuk Gran Turismo 7

Kontinjen esukan Malaysia di Sukan Asia Aichi-Nagoya 2026 bermula dengan langkah kanan apabila mendapat pingat emas pertama melalui permainan Gran Turismo 7 hari ini. Diwakili oleh ATM T Izrin atau... The post Sukan Asia 2026 – Malaysia Bawa Pulang E