Huntress researchers say attackers are chaining two AhsayCBS vulnerabilities—an authentication bypass (CVE-2026-105133) and an OS command injection flaw (CVE-2026-105134)—to compromise at least five organizations since October 7. After breaking in, attackers deployed JSP webshells and installed an XMRig cryptocurrency miner disguised as edge.exe, persisting via a fake Windows service.
A new version of the PS5SX2 emulator, v2.00, lets PlayStation 2 games run on PS5 hardware with frame generation and 8x resolution scaling, enabling smoother visuals and frame rates up to 120 FPS. Running it requires jailbreaking the PS5, a process the report describes as relatively straightforward but one that falls outside Sony's supported software environment.
The Trump administration temporarily barred Microsoft, Adobe, and outsourcing firms Cognizant, Infosys, Tata, Wipro, HCL and Capgemini from using the Perm program to sponsor foreign workers for permanent US residency. Vice-president JD Vance accused Microsoft of abusing the H-1B visa system more than any other company, saying it replaced American workers with foreign labour, while the Labor Department's inspector-general said subpoenas had been issued and investigations were under way.
Oxide Computer announced a $445 million Series D funding round, saying the company recently became profitable enough to pay income tax on its ordinary hardware sales operations. The company says demand for its systems now exceeds supply, creating a large order backlog that requires significant upfront cash for components and manufacturing before products reach customers.
Richard Garriott says he will regain ownership of the Ultima series from EA in 2027, using a US copyright provision that lets original rights holders reclaim IP 35 years after selling it, with no payment required. He confirmed he notified EA of his intent in April this year, and the publisher acknowledged the request and said it would comply with the law.
Walmart is offering steep discounts on several gaming laptops, including the Asus TUF Gaming A16 with an RTX 5050 (now $1,099), the TUF Gaming F16 with an RTX 5060 (now $1,199), and the MSI Cyborg A15 AI with an RTX 5070 priced at $1,299 after an $800 cut. All three include 16GB of memory and fast PCIe 4.0 SSDs, with the Cyborg model offering a larger 1TB drive.
Cloudflare announced that the full Deno team is joining the company, bringing its work on the Deno runtime and Deno Deploy into Cloudflare's infrastructure. The team says its focus will shift to a new project called celld, built on Cloudflare's Workers programming model, aimed at simplifying how developers build and scale distributed server applications.
FBI Director Kash Patel announced the arrest of another suspected ShinyHunters co-conspirator linked to the breach of the FBIjobs.gov platform. The New York Times identified the suspect as a Canadian citizen arrested in Pennsylvania, described as a primary participant in the intrusion, though the FBI has not released his name or charges. This marks the second arrest in days connected to the group behind the hack.
At a Windows and Surface event, Microsoft outlined plans to bring AI agents and 'hybrid intelligence' to Windows 11, letting the OS run free local AI models alongside cloud-based ones. CEO Satya Nadella described a shift in the 'frontier ecosystem,' while Windows chief Pavan Davuluri demoed local AI coding tools, new local model support, and agents including OpenClaw, Hermes and Perplexity integrated with Copilot.
At a Royal Canin research facility in France, roughly 160 cats and dogs sample pet food formulas while nutritionists track their preferences, behavior and stool quality to refine recipes. The work comes as U.S. cat food spending topped $17 billion over the past year, up 14% from two years prior, according to The New York Times.
In an Entrepreneur contributor column, a founder with two decades in healthcare argues that conventional startup advice to target easy, fast-selling markets is flawed. The author contends that markets easy to enter are also easy for competitors to enter, leading to rapid commoditization, while complex markets protect companies willing to understand their structure.
Cybersecurity analysts caution that as businesses grant AI agents authority to interact with payment and vendor systems, attackers can target those agents directly through prompt injection rather than tricking human employees. Verizon's 2026 Data Breach Investigations Report found third parties were involved in 48% of breaches, up 60% year over year, while the FBI's IC3 recorded about $3 billion in BEC losses in 2025.