N-central Needs Another Emergency Patch, Plus 3 Stories
N-able has released another emergency N-central hotfix for a pre-authentication RCE. Plus OpenAI’s research-intern milestone, Liquid’s $320 million incident, and AI contrail trials.
Daily Raymond Tec News briefings that collect the technology stories worth knowing into one practical, conversational roundup.
N-able has released another emergency N-central hotfix for a pre-authentication RCE. Plus OpenAI’s research-intern milestone, Liquid’s $320 million incident, and AI contrail trials.
AI data centers are pushing up memory costs across consumer tech. Plus an active Magento zero-day, a much larger Trezor shipping-data breach, and a European rocket milestone.
Google patched actively exploited Chrome CVE-2026-85046. Plus OpenAI agents on a public wiki, military ad tracking, Nvidia’s Hugging Face deal, and FTC action against payment processor Nuvei.
A UNICEF report estimates 20 million 12- to 17-year-olds across 21 countries experienced technology-facilitated sexual exploitation or abuse in one year. Plus active Elementor Pro attacks, GPT-6 Astra’s launch, Tesla Cybercab scrutiny, and a Plex security update.
The FBI is investigating a dark-web trove claiming more than 153 million driver’s-license scans. Also: a C-Track court breach, grid stress from extreme heat, NYC’s school AI moratorium, and Google’s ad-tech antitrust remedies.
Two popular WordPress plugins need security updates. Also: a BGP hijack pushed a malicious Virtualizor update, Dropbox accounts were breached through Lenovo ID, Google gives sites an AI Search opt-out, and Florida and Texas push back on Flock cameras.
The FTC and 22 states accuse Amazon of secretly inflating ad-auction prices. Also: Microsoft starts its Entra passkey rollout, ChatGPT enters the EU’s strictest DSA tier, the House passes new limits on secret cloud-data searches, and Shopify changes how inventory reports count stock.
Nepal’s catastrophic flood renews calls for real-time warning data. Plus stolen Claude sessions, malicious browser extensions, a WooCommerce admin flaw, false Defender alerts, and NASA’s Roman launch.
PaperCut NG/MF is under active attack and needs Emergency Patch Release 2. Plus: DHS data demands, McKesson’s breach, a Lucid recall, and Anthropic’s music lawsuit.
GiveWP 4.16.7.2 fixes a critical RCE. Plus: a corrected federal hacking claim, Google Drive AI classification, Cursor’s OpenAI cutoff, and updated COVID vaccines.
Aurora ransomware operators used Cursor inside real victim networks. Today’s brief also covers a critical Avada update, an 8.7-million-person airport breach, Anthropic’s Pentagon court win, and Google’s EEA search-policy change.
The Shopify checkout upgrade deadline for non-Plus stores has passed. Today’s brief also covers Meta’s teen-safety settlement, OpenAI’s Hugging Face incident report, Ring’s new encryption, and a Google Assistant settlement deadline.
China’s record EV recall exposes a door-safety problem, Kaltura has unpatched server flaws, CISA compares two SOCs, autonomous weapons face renewed scrutiny, and WhatsApp strengthens account security.
An unpatched Calix router flaw can expose home-network devices, miniOrange SSO bugs are being probed in WordPress attacks, the FCC is reconsidering E-Rate, and Alabama subpoenaed OpenAI.
A small UK power plant reportedly went offline for four days after a cyberattack, ChatGPT can now work with Apple Messages, data centers are becoming an election issue, and researchers found a nasty way to turn Microsoft Defender’s own driver against security software.
Android car head units are being recruited into a proxy botnet, federal agencies warn about AI-assisted attacks on industrial controllers, OpenAI wants stronger California AI safeguards, Google gives publishers a new reader-retention tool, and Microsoft corrected yesterday’s Entra ID exploitation status.