Technology
How the PHP2Shell Flaws Reached CISA’s Exploited List and What Patching Requires
Two unauthenticated PHP runtime flaws rated 9.2 now sit on CISA’s exploited list, and the fixes run from PHP 8.2.35 through 8.5.12.
Kaspersky Reports BlackX Bootkit Bypassing Secure Boot on Patched Windows PCs
Kaspersky says the BlackX bootkit, described in a 22 October 2026 report, exploits a Windows boot flaw that stays open on fully patched machines until revocation steps are run.
Why Chrome and Firefox Blocked Eight eMudhra Intermediate Certificates Within Hours
Browsers blocked eight eMudhra intermediate certificates within hours of a 17 October report. Here is how the keys were worked out and who faced risk.
Taiwan Plans Criminal Penalties for Unlicensed AI Chip Exports to China
Taiwan plans to make unlicensed exports of advanced AI chips and servers to China a criminal offence, Economy Minister Kung Ming-hsin said.
What FIDO2 Passkeys Keep on the Device, and What Depends on the Account Provider
Passkeys replace passwords with a key pair. The private key stays on the device, and syncing depends on the account provider a user chooses.
What Alibaba’s Zhenwu V900 chip claims, and what remains unverified
Alibaba’s chip unit says the V900 triples its predecessor’s performance. No benchmarks, process node or fabrication site have been published, and mass production is set for early 2027.
Samsung’s 107.4 trillion won operating profit rose 782.5% while sales missed forecasts
Samsung’s preliminary third-quarter operating profit of 107.4 trillion won rose 782.5% on AI memory demand, while its sales came in below forecasts.
What Jay Clayton’s New AI Task Force Must Deliver in 120 Days
Trump administration launches centralized AI oversight with Jay Clayton leading, requiring 120-day report on risks, opportunities and federal responsibilities.
