GoKawiil
Tech News
The curl project explains that after becoming a CVE Numbering Authority (CNA) years ago, it now independently issues its own CVE identifiers for security flaws in its codebase, having assigned 57 so far. The maintainers describe a rigorous assessment process that grades each report as LOW, MEDIUM, HIGH, or CRITICAL, and note that some minor issues are deliberately left without a CVE if the risk of exploitation is deemed negligible.
According to Bloomberg's Mark Gurman, Apple considered building a shortened Apple Pencil for its upcoming iPhone Ultra but abandoned the idea. Gurman cites three reasons: awkward ergonomics from side-mounting, tension with Steve Jobs' original stance against styluses, and the risk of the pencil scratching the display.
Google's latest Android 17 QPR2 Beta 4 introduces an 'Agents' section under Security & Privacy settings that lists AI agents with access to apps or device actions. The feature isn't limited to Gemini's Spark-created agents and appears designed to track third-party agentic apps as well, though it currently shows no agents until one is installed.
'Coyote vs. Acme' outperformed several other genre films released this past weekend, drawing the largest audience response among new releases. The film's box office showing stood out despite a crowded field of competing titles.
Walmart has installed 838 EV charging ports across 100 stores since launching its first company-branded charger last year, with construction underway at 100 additional locations. The retailer's network grew faster than any other charging provider except Tesla last month, and Walmart aims to expand to thousands of sites by 2030.
Match Group turned to one of its own directors, Spencer Rascoff, to take over as chief executive and steer a company turnaround. The move highlights a growing trend of boards selecting insiders already familiar with the business rather than launching external searches.
A new workplace survey finds that more than one-third of employees admit to deliberately holding back specialized knowledge from AI agents they are asked to help train, fearing the technology will eventually replace them. The trend follows moves like Meta's decision this spring to monitor employees' mouse movements, clicks, and keystrokes on work computers in order to feed real behavioral data into its AI training pipeline.
Multiple Reddit users report that Google Messages is inserting old texts from unrelated conversations into new ones, sometimes attaching them to photos or group chats and in some cases actually delivering them to unintended recipients. The bug spans both Pixel and Samsung devices, occurring regardless of whether RCS is enabled, and follows other recent Messages glitches like broken RCS delivery and duplicated threads. Google has acknowledged at least one report and passed it to its engineering team, but no fix has been announced.
The FDA has tracked over 12,800 illnesses linked to foodborne outbreaks in 2026, dwarfing the 895 cases recorded in all of 2025. Recent outbreaks include salmonella tied to jalapeños, eggs, and dog food, plus a combined E. coli and salmonella outbreak from alfalfa sprouts, following what experts call an unprecedented cyclospora outbreak from tainted lettuce that ranks as the largest since the 1990s.
A developer has released BlindLock, a local password vault that stores encrypted credentials embedded within an image file rather than in a central database. The vault relies on hardware binding and 256-bit authenticated encryption, and incorporates NIST-standardized post-quantum algorithms ML-KEM-1024 and ML-DSA-87 for key exchange and signatures.
Anthropic released a framework restructuring the software development lifecycle around AI coding agents, arguing that since agents made writing code fast, the bottleneck has shifted to planning, review, and verification. The playbook defines six stages—planning, design, build, deploy, and self-checking—each producing a document like intent.md, spec.md, or plan.md that feeds the next stage, with hooks preventing agents from gaming tests and CI evals treating agent configuration itself as software.
Incident responders at Sygnia say the China-linked group Fire Ant has expanded from compromising VMware hypervisors to hijacking Cisco routers, TACACS authentication servers, and Linux management hosts. Investigators found a hidden GRE tunnel on a Cisco IOS XR router that didn't match its configuration history, leading to discovery of custom malware that hides its activity from administrators and runs only during set hours. The attackers used their router access to capture network traffic and exfiltrate it to external FTP servers, then pivoted through a hidden tunnel into a Linux server to probe further into connected high-value networks, including ones tied to critical infrastructure.