GoKawiil
Tech News
Weeks after its debut, the latest Amazon Fire TV Stick 4K is on sale for half its normal price at both Amazon and Best Buy, hitting an all-time low of $29.99. The device can power itself directly from a TV's USB port, eliminating the need for a separate power adapter, and supports 4K video at up to 60fps with HDR10 Plus.
Anker's Nano Laptop Docking Station, a 13-in-1 USB-C hub, is now listed on Amazon for $119.99, a 20% reduction from its usual price. The device combines docking station and travel hub functions in a single unit.
Amazon has renamed its Kindle Unlimited subscription to Kindle Plus, keeping the $11.99 monthly price and 20-title borrowing limit. The service now adds thousands of AI-narrated 'virtual voice' audiobooks in the US at no extra cost, alongside human-narrated titles from Audible's ACX marketplace. Authors publishing through Kindle Direct Publishing can opt in to include audiobooks, with new KDP Select titles automatically eligible for AI narration.
Roku's new Pro Series LX OLED TVs are now on sale at Amazon in 55-inch ($1,300) and 65-inch ($1,600) sizes. They sit above the standard Pro Series OLEDs, which start at $999, and feature a 144Hz refresh rate, brighter picture, wider color range, an anti-reflective polarizer, and a rechargeable remote with hands-free voice control.
Amazon's Threat Intelligence team says it detected an attempt to exploit two critical PHP vulnerabilities on October 17th, using a honeypot monitoring system, days before an official patch was released this week. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could let attackers remotely execute malicious code on PHP-based systems including WordPress sites. The PHP Foundation's executive director Elizabeth Barron says there's no known successful remote code execution so far, but urges all affected systems be updated immediately.
Security researchers and AI models independently discovered two critical vulnerabilities in PHP, the scripting language used by roughly 70% of websites, in mid-August. The flaws can let attackers directly access a site's underlying file system or database, and Amazon Web Services says they are already being widely exploited. The NSA has advised organizations to take unpatched PHP-based sites offline until they can apply fixes, prompting many commercial and government sites to go dark this week.
Amazon Threat Intelligence found an exploitation attempt against the PHP2Shell vulnerability (CVE-2026-109618/CVE-2026-109619) in its MadPot honeypot telemetry dated Oct. 17, 2026, four days before the embargoed flaw was publicly disclosed. The attempt came from an IP tied to a commercial anonymization service. After the embargo lifted on Oct. 21, Amazon observed multiple proof-of-concept exploits and additional attacks from varied anonymized infrastructure within hours, and the vulnerability is now reportedly being exploited broadly in the wild.
Samsung is now offering its certified renewed Galaxy devices through Amazon for the first time, each including a new battery and a one-year warranty. The renewed Galaxy S24 FE with 128GB storage starts at $489, down from its $649 original price but still more expensive than comparable used units from third-party sellers like Back Market.
Amazon Threat Intelligence reports that attackers began targeting the two critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) on October 17, four days before PHP released fixes on October 21. The PHP team had to move up its disclosure timeline after details including the CVE IDs and mitigation guidance leaked online two days early, and researchers say functional exploits appeared within hours of the patch release.
Major tech firms including Meta, Google and OpenAI have rolled out AI agents meant to shop, book travel and buy tickets on users' behalf, but several companies are blocking or resisting them. Amazon has sued Perplexity and blocked Meta's Muse agent, JPMorgan Chase's CEO said outside agents won't get account access, and some users report being unable to book trips via Delta or Amtrak using agents.
The UK government is assessing whether its online services are exposed to newly disclosed vulnerabilities in PHP, the programming language running a large share of websites worldwide, including platforms like Wikipedia and WordPress. The National Cyber Security Centre, along with counterparts in the EU and Australia, has urged organisations to apply fixes immediately or take affected systems offline, while Amazon reported attempted attacks on its systems before the public warning was even issued.
Security researchers identified two critical vulnerabilities in PHP, the widely used web programming language, that could let attackers remotely execute malicious code on servers. Google, OpenAI and Amazon have been involved in efforts to detect exploitation attempts and help secure affected systems, while the US NSA and FBI issued warnings urging organizations to patch or take vulnerable systems offline.