Skip to content
Tech News
clear
Topics: Today This Week This Month This Year

Meta fixes zero-day flaw in Muse macOS app after researcher hijacks AI agent

Security researcher Patrick Wardle found an unpatched setting in Meta's Muse macOS app that let local attackers reroute the app's cloud-based dictation to their own server, effectively seizing control of the AI agent. Wardle demonstrated the flaw by using Muse's own privileges to snap photos and write files to disk, often without alerting the user. Meta issued a hotfix within hours of the report, though it maintains the exploit required existing local access and posed low real-world risk.

CISA mandates federal patch for actively exploited Zyxel GS1900 switch flaw

CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 series switches, to its Known Exploited Vulnerabilities catalog after confirming active attacks. The flaw allows unauthenticated LAN attackers to run OS commands via crafted HTTP requests, and federal agencies must secure affected devices by Thursday under Binding Operational Directive 26-04. Zyxel issued firmware fixes on June 16 but has not yet updated its advisory to acknowledge exploitation.

AI-Assisted Bug Hunting Triggers Record Surge in Software Vulnerability Disclosures

Major tech firms including Microsoft, Oracle and Google reported unprecedented numbers of security patches this year, with Microsoft issuing 974 CVE fixes this month alone and Oracle shipping 1,448 patches in July compared to 309 a year earlier. Analysts tracking cve.icu counted 66,401 confirmed vulnerabilities as of this week, nearly double last September's tally, a jump attributed largely to AI tools now used for automated bug discovery.

Gemini smart home commands break for some Android Auto users

Android Auto users report that Gemini has stopped controlling smart home devices like AC units and lights while driving, with the assistant now replying that it cannot control such devices through Google Maps. The issue follows similar complaints on Wear OS, which Google said it had already fixed, though it's unclear if the two problems are related. Some users say the same commands still function inside the standalone Gemini app.

Google launches AndroidX Security State libraries for granular patch checks

Google has released stable versions of its AndroidX Security State and Security State Provider libraries, giving apps a way to check the security status of individual Android components rather than relying solely on the device's overall security patch date. Apps can now determine which specific fixes are installed, which updates are pending, and whether known vulnerabilities have been addressed, even if the broad patch level hasn't changed.

Microsoft issues emergency Windows 11 patch for USB audio failure

Microsoft released an out-of-band update this week for Windows 11 versions 26H2, 25H2, and 24H2 to fix an audio bug that broke sound on older USB devices using the legacy Audio Class 1.0 driver. The flaw, introduced by the September 8 security update, left affected headsets and speakers silent, with unresponsive volume controls or a Device Manager error. The new patch also resolves several other recent issues alongside a couple of security flaws.

Apple releases iOS 27 with AI-powered Siri beta and 120 security fixes

Apple has officially launched iOS 27 alongside an iOS 26.7 update for users who haven't upgraded, both shipping the same day with over 120 security patches. iOS 27 introduces new photo editing tools, adjustable Liquid Glass visuals, simpler location sharing, weak-password replacement, revamped Screen Time controls, and an AI-driven version of Siri that can converse and complete tasks like ChatGPT or Gemini.

Microsoft issues emergency fix for buggy Windows 11 25H2 update

Microsoft released an out-of-band patch to address problems introduced by its September 2026 Windows 11 update, which had shipped with new taskbar and Start menu customization features alongside nearly 1,000 security fixes. The rollout caused crashes on AMD Radeon GPUs, audio input/output failures, Remote Desktop instability, and Explorer black-screen issues after login. The emergency update addresses several of these regressions, though the AMD GPU crashes were not explicitly called out as fixed.

Today's top topics: openai apple anthropic artificial intelligence qualcomm claude opus 5.5 iphone 18 pro ai safety motorola signature 27 sam altman
View all today's topics →