Apple Music has unveiled its 'Best of 2026' editorial content, including updated versions of playlists like Rap Life, R&B Now and A-List Pop in the app's New tab. The company also named British singer Olivia Dean its Artist of the Year, citing her album The Art of Loving, a sold-out global tour, a GRAMMY for Best New Artist and four BRIT Awards. Dean is the first UK artist to receive the honor, following past winners Tyler, The Creator, Billie Eilish and Taylor Swift.
9to5mac.com
· 2026-11-09
Security researchers say hackers began actively exploiting CVE-2026-123158, dubbed SSHole, which lets attackers bypass OpenSSH authentication on musl-based Linux systems like Alpine by sending oversized passwords that trigger a hashing error. OpenSSH patched the bug in version 10.6p2 on November 5, but a proof-of-concept appeared hours later, and GreyNoise recorded the first confirmed successful in-the-wild exploitation on November 7, with 16 exploitation chains from six IP addresses performing system reconnaissance.
bleepingcomputer.com
· 2026-11-09
The Verge has launched a centralized hub tracking Black Friday deals on electronics including wireless earbuds, smartwatches, robot vacuums and gaming gear, ahead of Black Friday itself on November 27th. The outlet says retailers have already started discounting items weeks in advance, and the page will be updated regularly as new deals appear through the holiday season.
theverge.com
· 2026-11-09
The Scholars at Risk network's Free to Think 2026 report documents 382 attacks on scholars, students and institutions by state authorities across 59 countries and territories between July 2025 and June 2026, down from 395 incidents but spread across more regions than the prior year's 49. Attacks include violent assaults, wrongful prosecution, dismissals, expulsions and travel or research restrictions, with the report also noting a notable improvement in academic freedom in Bangladesh and continued interference in the United States.
nature.com
· 2026-11-09
Security researchers disclosed CVE-2026-123158, a vulnerability in Alpine Linux's default OpenSSH setup that allows attackers to log into password-disabled or key-only accounts simply by sending an oversized password string. The bug stems from musl libc, the lightweight C library used by Alpine and other distros including Void Linux, OpenWrt, and Yocto-based embedded systems, meaning the exposure extends beyond Alpine itself. Alpine Linux and OpenSSH maintainers have issued patches, and users are urged to update and restart affected services immediately.
zdnet.com
· 2026-11-07
SonicWall has released security updates addressing seven SonicOS vulnerabilities, including CVE-2026-19868, an SSL-VPN authentication bypass that lets attackers with valid alternate credentials evade SAML authentication, including SAML-enforced MFA. SonicWall confirmed it is investigating a report of active exploitation, and CISA has added the flaw to its Known Exploited Vulnerabilities catalog, directing federal agencies to patch by November 20, 2026. The fix also covers two 8.8-severity management interface bugs, pre-authentication buffer overflows in SSL-VPN and TACACS+ services, and a weak password hashing issue on virtual appliances.
bleepingcomputer.com
· 2026-11-06
A number of first-time candidates elected in this week's US midterm elections came from careers outside politics, including a firefighter and a reconstructive surgeon. The results also included several historic firsts for diversity among elected officials, according to reports on the outcomes.
fastcompany.com
· 2026-11-06
Elon Musk contributed at least $474 million toward the 2026 midterm elections, according to The New York Times. Despite that spending, Democrats are now projected to win 259 House seats and at least 54 Senate seats, giving them a new congressional majority.
fastcompany.com
· 2026-11-06
A Hacker News poster flagged that Ubuntu has not yet shipped a fix for CVE-2026-98432, a vulnerability rated 9.8 in severity, nearly a week after disclosure. Ubuntu's security tracker still lists the issue as 'work in progress,' though it now includes a suggested mitigation. The poster says they have been relying on manual mitigations in the meantime.
news.ycombinator.com
· 2026-11-06
On the latest Vergecast episode, hosts Nilay Patel and David Pierce discuss how Democratic gains in the 2026 midterms could reignite congressional attention on tech CEOs, AI regulation, and data center buildouts. They also examine whether AI companies, including OpenAI and Google, have found sustainable business models despite AI search growth and reported pullbacks in enterprise spending.
theverge.com
· 2026-11-06
In its Q3 2026 shareholder letter, Airbnb disclosed it is building a new AI agent designed to act as a travel planner within its app, rejecting a traditional chatbot format in favor of a dynamic interface that generates maps, photos, itineraries and comparisons based on user queries. The company says the tool will let users take action directly within that interface and plans to roll it out starting in the first half of 2027.
engadget.com
· 2026-11-06
In its Q3 2026 shareholder letter, Airbnb said it is building an AI agent to help users plan and book trips, targeting a launch in the first half of 2027. The company described a custom interface combining maps, photos, calendars and itineraries rather than a standard chatbot, arguing its hosting and booking experience gives it an advantage over simpler AI agents.
theverge.com
· 2026-11-05
GoKawiil