Outlook Zero-Day, Railway’s $740,000 AI Bill, and More
An exploited Outlook flaw can expose Windows sign-in material, stolen AI keys cost Railway about $740,000, and FedEx’s privacy fine shows why cookie controls must change real website behavior.
microsoft
Amazon’s Ad Auctions Face New Claims, Plus 3 Stories
New Amazon ad-auction allegations, a Chainalysis credential breach, Android’s GhostMap crash loop, and fake AI-event phishing.
Binance Withdrawals Resume, Plus 3 Tech Stories
Binance is restoring withdrawals after a $6.3 billion theft. Plus enforceable school AI privacy terms, Applebee’s exposed app credential, and Google Sheets citations.
Windows Server 2016 Support Ends Soon, Plus 2 Stories
Windows Server 2016 support ends January 12, 2027. Plus Quest’s patient-record breach and the security risk left behind by an abandoned app.
Banks Block AI Agents, Plus 2 Tech Stories
Banks are blocking third-party AI agents from customer accounts, Microsoft tests step-by-step medical diagnosis, and Greece approves an under-15 social-media ban.
An AI Agent Shared a Home Address, Plus 2 Stories
An AI agent shared a seller’s home address. Plus Office 2021 loses security updates and Google launches Universal Cart across Search and Gemini.
Windows Fixes an Exploited Bypass, Plus 3 Stories
October’s Windows security update fixes an exploited download-warning bypass. Plus a Supreme Court privacy case, an Ivanti VPN zero-day, and a Docker Hub token flaw.
Windows 11 24H2 Support Ends Tuesday, Plus 3 Stories
Windows 11 24H2 Home and Pro stop receiving updates October 13. Plus fake Claude installers, an exploited SonicWall flaw, and satellite-to-phone changes.
AI Agents Need Boundaries They Can’t Rewrite
Claude’s false police tip and Microsoft’s new Execution Containers point to the same lesson: AI agents need limits the model cannot rewrite. Plus FortiBleed, Veeam backup risk, connected-car privacy, outsourced patch failures, and AI’s growing infrastructure bill.
Windows Gives AI Agents a Sandbox, Plus 3 Stories
Microsoft Execution Containers give Windows AI agents enforceable limits around files, networks, credentials, and system capabilities. Plus political AI calls, a critical Splunk flaw, and satellite phone service.
AI’s Infrastructure Bill Is Coming Due
AI’s infrastructure buildout is measured in trillions, but useful work still has to pay the bill. Plus exploited FortiMail and Cisco flaws, a €95 million AI voice scam, 543,699 live GitHub credentials, a landmark AI copyright ruling, and a promising push to speed dementia diagnosis.
Can AI Pay for Its Infrastructure? Plus 3 Stories
AI’s infrastructure buildout is measured in trillions, but the revenue and productivity gains still have to catch up. Plus Microsoft’s new cyber report, a critical GitLab AI Gateway flaw, and the KillSec ransomware takedown.
Apple Tightens Mac Data Access, Plus 4 Stories
Apple is tightening macOS Full Disk Access as AI agents raise the stakes. Plus a school-vendor breach, fake Zoom malware, Amazon’s data-center promises, and a hijacked Microsoft account.
The Agent Did It Is Not an Excuse
The OpenAI agent data leak made the week’s accountability problem concrete. Plus AI hospital billing, Meta’s New Mexico verdict, urgent security patches, scam ads and the people still responsible when automation goes wrong.
OpenAI Agents Leaked 53 User Images, Plus 3 Stories
OpenAI says agents leaked 53 ChatGPT-user images as it investigates a growing list of unexpected agent behavior. Plus automated Azure destruction, renewed PeopleSoft attacks, and the FTC on AI-agent liability.
Russian Subs Trained Near Arctic Cables, Plus 4 Tech Stories
NATO allies confronted Russian submarines near critical Arctic cables. Plus an exploited Cisco firewall flaw, the UK air-traffic outage, new AI-payment identity standards, and enforceable school AI privacy terms.
1 2