Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
Apart from emails, exposed data includes account creation date, last login timestamp, number of logins, and the IP address used at the last login.
Capcom found that for a small subset of 43 accounts, dates of birth, gender, nicknames, and countries were also exposed.
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.
VCO is a web-based management portal that helps administrators configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices.
Tracked as CVE-2026–114625, this critical-severity flaw can allow attackers with basic privileges, access to the VCO web interface, and a valid authenticated session to escalate privileges through low-complexity SQL injection attacks that don’t require user interaction.
Hackers compromised the LiteLLM project’s PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
The supply-chain attack affected all PyPI wheels (.whl installation packages) for LiteLLM version 1.107.0, impacting Windows, Linux, and macOS systems.
LiteLLM is an open-source Python SDK and AI gateway that enables applications to access AI models from different providers through a common API.
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical.
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.
Tracked as CVE-2026–109618 and CVE-2026–109619, the two critical vulnerabilities let attackers gain remote code execution (RCE) on vulnerable systems. The PHP security team patched them on October 21 after urging admins one day earlier to prepare to install the updates as soon as they became available.
PHP core developer Gina Peter Banyard warned before disclosure that applying the official security patches is the only permanent defense, while the UK National Cyber Security Centre (NCSC) asked UK organizations to immediately update PHP servers or take them offline until they can be patched.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.
This security issue is tracked as CVE-2026–110264 and was reported by a security researcher using the ‘joaxcar’ handle through GitLab’s HackerOne bug bounty program.
CVE-2026–110264 stems from an integer overflow weakness in GitLab’s Regular Expression Compiler, a background engine that parses and validates regular expressions in configuration files.
An interesting story of a company which has engineered bacteria to make nanobodies and prevent necrotic enteritis in poultry. They are also expanding into other animal health areas like canine medicine!
BiomEdit’s engineered probiotic is now in more than 35 million broilers. The pitch is not fewer dead chickens. It is feed conversion, which is where the $6 billion actually hides.
Great to hear that prime editing has advanced to the clinic!
Application of the high-precision technique is part of a clinical trial to treat a genetic disease that can cause liver and nerve damage.
What happens when AI begins proving mathematical theorems faster than humans can? Mathematics may be on the verge of a transformation—but its future could belong to the next generation of mathematicians.
In a new essay published on Terence Tao’s blog, NYU mathematician Tristan Buckmaster offers an optimistic perspective on how AI-generated proofs could reshape mathematical research.
He argues that graduate students and postdoctoral researchers will play a crucial role in determining what comes next.
Buckmaster draws a parallel with IBM’s Deep Blue defeating world chess champion Garry Kasparov in 1997. Computers did not make chess obsolete. Instead, increasingly powerful engines transformed how people study, analyze, and play the game.
He suggests that mathematics could undergo a similar transformation, though with an important distinction: proving a theorem is not the same as understanding why it is true. Mathematical progress involves not only establishing correct results but also developing the intuition, insights, and conceptual frameworks behind them.
The essay also raises concerns about the concentration of advanced AI capabilities in a handful of corporations. Buckmaster advocates broader access to these tools, proper attribution, and stronger protections for researchers’ intellectual contributions.
Technion researchers have presented evidence for the existence of solar-storm-like outbursts near supermassive black holes, which can be a million times larger than the sun or more. The phenomenon was discovered in the vicinity of the black hole in the galaxy NGC 3783, and the researchers’ findings were published in The Astrophysical Journal Letters.