Technology

IDScan.net has confirmed a year-long intrusion. The figure every outlet is reporting did not come from the company or the FBI — it came from the dark-web listing advertising the records for sale.

The iPhone Duo costs $800 more than an iPhone 18 Pro and arrives five weeks later. Apple also pushed three other iPhones to spring 2027. Only one of those facts is about the hinge.

Microsoft's September release is the largest on record by any of the competing counts. Both of the flaws confirmed under active exploitation are rated Important, not Critical — which means a patch policy that triages on severity ships neither of the two vulnerabilities anyone is actually being attacked with.

Manifold Security's GitSpawn disclosure hit seven coding agents at once. That is not seven bugs — it is one shared assumption about where an agent's permission boundary sits, and the approval dialog is on the wrong side of it.

CVE-2026-0768 is an unauthenticated root RCE in Langflow. It was disclosed in January, the fix has shipped through seven releases, and attackers are hitting it in September — because low-code AI middleware became critical infrastructure without acquiring a patch owner.

Opposition to data centres is not a referendum on AI. It is a cost-allocation dispute — and PJM's capacity auction is the mechanism that turned an abstract argument into a number on 67 million households' bills.

OpenAI's first published benchmarks for its custom inference chip are real, from a public benchmark, and normalised on nameplate TDP rather than measured power. OpenAI disclosed that itself, in a sentence nobody is quoting.

IDC has cut its 2026 PC forecast three times in nine months — from −2.4% to −8.9% to −11.3%. Thirty-two million fewer machines, and the market is worth more money. The revision trail is the story.

Binance blocked withdrawals, scoped permissions to revocable subaccounts and set hard daily caps. It engineered out theft. It could not engineer out bad judgement — and nobody has said whose loss that is.

Hugging Face has reportedly retained a bank to test acquirer interest at $13 billion or more. No buyer has been named. The number is not paying for revenue — it is paying for a neutrality that an acquisition is the one thing that cannot preserve.

The novelty is the robot. The business story is a staffing ratio written into a regulatory clearance — and a De Novo authorisation that lets the first mover draft the standard its competitors will be measured against.

CVE-2026-19478 scores 9.4 and needs no credentials, no user interaction and no unusual configuration. Most critical CVEs leak data. This one lets an attacker rewrite history — forge merge records, ban maintainers, delete repositories — which is a different and worse category of problem.