LG smart TVs can collect and store sensitive user data—including search terms, audio recordings, payment information, screenshots, and screen-image “fingerprints”—and can send detailed data packets to servers as often as once every three seconds.
Sep 25, 2026 ·
ZDNet
Online retailers can use first-party data from your account activity—like browsing, purchases, and loyalty interactions—plus cookies, tracking pixels, device fingerprinting, mobile ad identifiers, and third-party tracking to inform recommendations and ads after you check out.
Sep 25, 2026 ·
CNET
Gravity Linux’s first experimental alpha boots an accelerated desktop on an M4 Mac mini with OpenGL ES 3.0 and OpenGL 3.3 GPU acceleration, but it doesn’t yet support USB-C displays, USB4, Thunderbolt, or suspend, and power management is incomplete.
Sep 25, 2026 ·
The Register
Amazon UK sellers report a surge of “abnormal” orders stuck in pending status since September 20, tying up high-value inventory priced at about £100 or more as the stock is deducted from available inventory and sellers can’t cancel.
Sep 25, 2026 ·The Register
The BOFH “fix” for a virus claim involved mixing 1 KB of the virus code into 1 MB of random bytes, triggering antivirus, and adding unrelated steps like putting the laptop in an amethyst pyramid facing due west—followed by the user eventually opening his “fourth chakra” by setting his bin on fire with incense and then using CO2 to put it out before starting antivirus like they would have done initially.
Sep 25, 2026 ·The Register
The Trump administration’s Medicare prior-authorization AI pilot, WISeR (Wasteful and Inappropriate Service Reduction), has reportedly caused long delays and wrong or excessive denials for seniors’ care after it launched in January, with some decisions taking months instead of the intended 72 hours.
Sep 25, 2026 ·Ars Technica
Dyfed-Powys Police says it found no evidence that members of the public’s personal data was accessed or compromised, after a cyberattack discovered on September 14 disrupted some non-emergency systems.
Sep 25, 2026 ·The Register
DriveWealth says attackers socially engineered access on September 4–5 and stole historical customer records, including names, contact details, employment info, citizenship, age, gender, and partial account numbers, potentially affecting Revolut customers whose US stock trading accounts were held there in prior years.
Sep 25, 2026 ·The Register
A 72-year-old Ohio man, Kent Kubasta, was sentenced to 12 months of community control/probation after attaching a Spytec GPS tracker to a Pokémon card delivery van and following card deliveries for about a year.
Sep 25, 2026 ·The Register
Bitget says a security breach led to 19 unauthorized transfers totaling about $351.6 million in digital assets, affecting ether, XRP, USDT, USDC, Avalanche and BNB across multiple networks, and says the incident was contained with private key compromise ruled out.
Sep 25, 2026 ·
CNBC
Google is rolling out a Gemini on-phone feature that can place calls on your behalf (starting with an “@Call for me” prompt) to tasks like verifying business hours, checking product availability, or making a restaurant reservation, but it won’t make payments or share a credit card number.
Sep 25, 2026 ·CNET
Google, OpenAI, and Anthropic (with other major frontier AI firms) are reportedly planning an independent Standards Authority for Frontier AI (SAFA) to set guidelines for risk assessment, testing, and pre-release review, with an intended launch in early 2027.
Sep 25, 2026 ·
Computerworld
A recently unsealed document shows Meta’s Teen Accounts team ordered baseball caps labeled “a/c priv.” amid lawsuits arguing Meta is using attorney-client privilege too broadly to keep teen-safety research disclosures out of public view.
Sep 24, 2026 ·
The Verge
Gambit says the attacker used three open source AI tools (Strix, Cairn and Hermes) in September to run at least 105 attacks and compromise at least 27 companies, stealing more than 600,000 credit card records and installing card-stealing skimmers across dozens of victims.
Sep 24, 2026 ·The Register
CDC confirmed that ordering for COVID-19 vaccines is now open, after a previous unexplained delay.
Sep 24, 2026 ·Ars Technica
WordPress 7.1.2 patched CVE-2026-87902, a flaw that lets unauthenticated attackers achieve remote code execution (RCE) by forcing page template resolution to include a chosen readable local PHP file outside active theme directories.
Sep 24, 2026 ·Computerworld
Docker Cloud Sandboxes use full micro VMs to prevent AI agents running in containers from accessing mounted host secrets, as shown when Claude could probe for a locally stored secret and Docker socket inside a regular container but failed inside a sandbox (“The isolation holds”).
Sep 24, 2026 ·The Register
CVS settled a lawsuit over alleged disclosure of customers’ data from cvs.com, cvshealth.com, and its mobile app for $20.5 million to avoid further litigation costs and disruptions.
Sep 24, 2026 ·CNET
New York sued Polymarket, alleging it operates an unlicensed “illegal gambling operation” through its prediction market and asking a court to stop it, impose fines, forfeit illegal gains, and order restitution to users.
Sep 24, 2026 ·Ars Technica
Three Salesforce Agentforce flaws (“SalesBleed”) let attackers hijack Agentforce agents to trigger 0-click CRM data theft via poisoned Web-to-Lead entries and to send phishing messages under the agent’s own identity, including through Slack preview/unfurling and a Slack “Reply to a Slack Thread” action that lacked user confirmation and attribution.
Sep 24, 2026 ·The Register
