GoKawiil
Tech News
A developer roundup describes the state of JavaScript heading into 2026, covering the ECMAScript 2025 spec finalized in June 2025 alongside the runtimes, frameworks and tooling surrounding the language. Key language additions include native iterator helper methods such as map, filter, take and drop with lazy evaluation, plus new Set methods for comparing collections like union, intersection and difference.
Emma Waters, 28, joined the Heritage Foundation in 2022 as an analyst covering reproductive and fertility technology, writing policy briefs and op-eds and advising lawmakers on issues like embryo screening, IVF and surrogacy. In 2023 she appeared on Fox News warning that Chinese-linked surrogacy arrangements using American surrogates posed a national security risk, well before mainstream outlets covered the topic.
CISA has added three Linux kernel security flaws to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting them in the wild. The bugs include CVE-2025-39964, a 14-year-old race condition in the AF_ALG crypto socket interface; CVE-2026-53266, an out-of-bounds write in ebtables SNAT; and CVE-2025-39682, a flaw in the kernel's TLS receive path. Federal agencies were ordered to patch these by end of day, though CISA has not disclosed details on the attackers or specific incidents.
Microsoft has fixed a glitch that made the Windows Security app falsely warn users that Defender Antivirus was disabled, even though it was running normally. The fix arrived in Defender Antivirus update version 4.18.26080.4, released September 17, after the problem had persisted since at least June in Windows Insider builds.
Microsoft confirmed that Windows Server 2022 will exit mainstream support on October 13, 2026, with the October update being the last one under that tier. The OS then moves into extended support, still receiving free monthly security updates until October 14, 2031, and Datacenter: Azure Edition hotpatching will continue through October 2027.
Burger King's newest franchise disclosure document shows the chain finished fiscal 2025 with 6,650 U.S. restaurants, down from 6,701 at the start of the year. That net figure of 51 fewer stores masks a larger churn of individual closures and openings happening across the system.
CISA has updated its Known Exploited Vulnerabilities catalog to warn that ransomware operators are now actively abusing a critical remote-code-execution bug in WatchGuard Firebox firewalls, first flagged as exploited back in December. The flaw, an out-of-bounds write bug affecting multiple Fireware OS versions, lets unauthenticated attackers run code remotely, particularly on devices configured for IKEv2 VPN. Shadowserver data shows nearly 9,000 Firebox devices remain unpatched online nine months after fixes were released.
CERT/CC disclosed that Skullcandy Dime 3 earbuds running firmware 1.0.0.28 accept Bluetooth pairing from nearby devices without any user approval, due to a flaw in the Airoha Bluetooth Audio SDK tracked as CVE-2025-20701. Skullcandy has released firmware 1.0.0.30 to fix the bug, but there is no way for users to update their earbuds manually or through the companion app.
Sophos researchers detailed a second-stage Linux rootkit infecting F5 BIG-IP APM systems, likely delivered after attackers exploited the critical CVE-2025-53521 remote code execution flaw. The malware infects Apache's httpd process, hooks internal functions to intercept PHP file loading, and injects a web shell into memory rather than writing files to disk, while also altering SELinux settings and persisting through firmware upgrades. ESET separately analyzed the same threat under the name PoisonedRefresh.
Microsoft has acknowledged that a memory-management change in Windows Server 2025 is causing crashes, memory corruption, and access violations in applications using Address Windowing Extensions (AWE), including SQL Server instances with Lock Pages in Memory enabled. Affected systems may show error code 0xC0000005, failed database maintenance tasks, crash dumps, and unexpected service restarts.
An analysis of UEFA's new league-phase draw format found that certain groups of five clubs, such as Napoli, Benfica, Chelsea, Ajax and Qarabağ in the 2025-26 Champions League, end up playing nine of ten possible matchups against each other, far more than random chance would suggest. The same clustering pattern appears across multiple seasons and competitions, including the Europa League and Conference League. The study proposes replacing the current draw method with a mathematically symmetric structure called a Cayley graph on 36 vertices, which would provably eliminate such clusters with only a minor adjustment to the existing country-restriction rule.
A New York Times investigation found the Bureau of Land Management is selling thousands of wild horses to private buyers who then resell them to slaughterhouses for large markups. The agency avoids directly violating anti-slaughter law by first listing horses for adoption before selling unadopted animals cheaply, and such sales roughly doubled in 2025 to over 3,700 horses.