Security firm Patchstack says threat actors began exploiting a critical WordPress path traversal flaw, CVE-2026-87902, to write files that execute shell commands, after initial reconnaissance traffic surged tenfold. The bug, discovered by researcher Robert Ressl and rated 9.2/10 in severity, allows unauthenticated attackers to trick get_page_template() into loading arbitrary local PHP files under certain theme and server configurations. WordPress patched the issue in version 7.1.2 and backported fixes to branches as old as 4.7.
YouTube announced at its Made On YouTube event that creators can now organize short, vertical video clips into serialized microdrama-style series. The feature mirrors the format popularized by standalone microdrama apps, which use brief, cliffhanger-driven episodes shot for phone screens.
YouTube announced at its Made on YouTube event that users will soon create multiple custom video feeds by typing plain-language prompts, with dedicated homepage tabs for each topic, rolling out on desktop, TV and mobile in the US next month. The company is also expanding its experimental Ask YouTube tool, which can now pull information from videos and outside sources to build comparison tables and answer follow-up questions on a video's watch page.
Google unveiled Custom Feeds at its Made on YouTube event, a feature letting users type natural-language requests to generate a personalized homepage feed. The tool uses large language models to interpret prompts like genre or mood combinations and build a matching set of video suggestions. YouTube tested the feature earlier this year and plans a full rollout to all US users across mobile, desktop and TV.
YouTube announced at its Made on YouTube event that Ask YouTube, its conversational AI search feature, will now help users make shopping decisions. Users searching for products can get organized comparisons of attributes and categories, and can ask follow-up questions directly on a video's watch page. YouTube said the feature, powered by a custom Gemini model, was used by over 140 million people in June, up more than 500% since December.
YouTube introduced a feature called custom feeds that lets users type a prompt describing the videos they want recommended, such as a mix of video podcasts for a commute or relaxing commentary content. The feature uses Google's Gemini AI model to generate the feed, which is pinned to its own tab at the top of the YouTube homepage.
TechCrunch has announced a StrictlyVC programming track at Disrupt 2026, running October 13-15 at Moscone West in San Francisco. The October 14 session includes networking and a panel discussion, with speakers such as Ryan Flanagan of ICR addressing how companies prepare for IPOs amid a changing venture funding landscape. Attendees can register with an Investor Pass, with a discount available for sign-ups by September 25.
YouTube announced a set of creator tools built around AI, including Ask Studio for personalized feedback on draft videos, dynamic thumbnails that automatically pick the best image for viewers, and expanded A/B testing that will let creators trial three Shorts cuts starting in 2027. The company also plans live auto-dubbing in real time next year, a 'live showdown' co-hosting feature, and AI auto-tagging of products to boost affiliate earnings, alongside expanding its Amazon affiliate program beyond the U.S.
YouTube unveiled 'Shorts Series' at its Made On YouTube event, a tool letting creators group Shorts into seasons and episodes with custom thumbnails on their channel pages. The feature is rolling out to YouTube Partner Program members across web, mobile and connected TVs.
At its Made on YouTube event, YouTube announced updates to its Studio app, including expanding the Ask Studio AI Q&A feature to iOS and Android, and adding AI-driven feedback on unpublished video drafts covering pacing and structure. The app also gains a research feed showing trending content, AI-generated thumbnails and titles matched to a creator's style, and a dynamic thumbnail tool that tests three versions on different audience segments.
California Gov. Gavin Newsom signed seven bills requiring data center operators to disclose electricity and water consumption details starting next year. The legislation also directs the California Public Utilities Commission to create separate electricity rates for data centers so their grid connection costs aren't passed on to other ratepayers, and pushes facilities toward greater renewable energy use.
Montreal city council voted 35-25 to adopt a bylaw banning insults, harassment, threats and aggressive behaviour toward police officers and other municipal employees. First offences carry fines of $300 to $1,000, rising to as much as $2,000 for repeat violations, and city staff would be allowed to refuse service to offenders. Officials have not set a date for implementation, and the bylaw does not define what counts as an insult.
GoKawiil