Aikido Security found that GitLab's built-in 'Email work item to this project' addresses, which embed a long-lived credential token, are being publicly exposed in READMEs, contributing guides, and support pages. Anyone who obtains one of these addresses can email GitLab to create issues, and by swapping the '-issue' suffix for '-merge-request,' can open merge requests as if they were the token owner, since GitLab does not verify the sender's email matches the token owner and the technique also bypasses IP restrictions.
Apple has issued watchOS 27.0.1 to address a bug causing some Apple Watch Series 12 and Ultra 4 devices to restart unexpectedly. Affected users reported diagnostic logs showing a panic-full file tied to a timeout in the watch's Neural Engine. The update can be installed via the Watch app on a paired iPhone or directly on the watch.
Kurt Andersen's novel 'The Breakup' depicts a fictional 2045 America split by a civil war triggered by a 'robot massacre' following a terrorist attack. The story follows the divorce of a pro-AI United States and an anti-AI 'Free American Republic,' mirrored by the personal separation of a San Francisco AI researcher and his skeptical wife in Tennessee. The piece situates this fiction within a longer history of robot narratives, tracing anxieties about artificial beings back to the 1920 Czech play 'R.U.R.'
Starbucks Coffee Company announced it will close about 250 stores across North America this week. The company said the closures target locations where financial performance or the in-store customer experience fell short of expectations.
A blogger recounts a years-long struggle with undiagnosed digestive issues that culminated in emergency gallbladder removal surgery in February 2024. The post details a long diagnostic journey involving nutritionists, elimination diets, and misattributed symptoms before a gastroenterologist identified gallbladder sludge via ultrasound. The writer shares this account publicly to add first-hand patient experience to online health discussions.
Meta opened pre-orders for its Ray-Ban Audio glasses, a $349 device shipping October 13 that handles music, calls and its Muse AI assistant without any cameras, offering up to 12 hours of battery life. The company also unveiled a slimmer VR headset at Connect 2026 and continues selling its camera-equipped Ray-Ban Meta Gen 3 glasses, starting at $449 with a 12MP camera and six-microphone array.
Tom's Hardware tested AMD's BC-250, a 2021-era APU originally built from defective or downgraded PS5 silicon and later sold as a cryptomining card. A community-developed BIOS and driver set now lets hobbyists turn the card into a Linux-based gaming system with 16GB of shared GDDR6, at roughly half the cost of a comparable built system once a power supply and other parts are sourced.
Proofpoint researchers presented findings at Protect 2026 describing a threat actor, tracked as UNK_CondorFiltration, that has been targeting Microsoft 365 environments in Chile since July 21. Using the open-source TeamFiltration toolkit and credential spraying, the attacker did not compromise any human employee accounts but instead broke in through neglected non-human machine and service accounts, gaining access to sensitive data.
Apple TV announced The Wanted Man, a new crime drama starring Hugh Laurie as imprisoned crime boss Felix Carmichael plotting a prison break after being betrayed by someone in his own organization. The series, created by Hijack's George Kay, also stars Thandiwe Newton, Fionn Whitehead, and Gina McKee, and debuts January 6 with weekly episodes through February 17.
Apple released iOS 27 last week, an update centered on an upgraded Siri assistant but also including lesser-known tools like Ask to Browse and Notify Me, plus general performance improvements such as faster app loading. The update is compatible with iPhones as far back as the 2019 iPhone 11, though newer Apple Intelligence features require an iPhone 16 or iPhone 15 Pro model. The new Siri AI app is currently beta-only, requiring users to join a waitlist, and its EU rollout is delayed due to a dispute over the region's digital regulations.
A team building an operating system focused on cryptographic integrity has published tine, a new build system built on Meta's Buck2. The system is designed to be self-contained, support pinning of every software component, integrate package import and update tooling, and enable full rebuilds and reproducible, hermetic builds across multiple upstream Linux distributions.
McDonald's announced an $8.5 billion investment at its investor day, extending its 'Next' growth plan unveiled in June, aiming to save individual restaurants up to $100,000 a year in cash flow. Executives acknowledged that a rapid pace of recent menu launches had slowed service and hurt customer satisfaction, and the company is now targeting the $30 billion chicken category and menu options for GLP-1 drug users, whose households still frequent McDonald's 84% of the time. Despite the announcement, McDonald's stock fell 4.4% the same day.
GoKawiil