Docker disclosed a critical flaw in Docker Hub where converting a personal account into an organization could reassign that account's personal access token to a named owner without rotating the token or requiring the target's consent. An attacker could exploit this to authenticate as the target user, gaining the ability to pull, push, or delete images in their repositories, depending on the token's scope and permissions. The bug has existed since August 26, 2024, though it did not grant web access or allow changes to passwords, email, or two-factor settings.
bleepingcomputer.com
· 2026-10-13
SAP's October 2026 security update fixes 20 vulnerabilities, including a maximum-severity OAuth2 SSRF flaw (CVE-2026-89111) in the Cloud SDK for Python used to build AI agents and apps on SAP BTP. The bug lets unauthenticated remote attackers manipulate the tenant_subdomain parameter to redirect OAuth2 token requests and steal client credentials. SAP also fixed two other critical issues: a broken access control flaw in NetWeaver Visual Composer and a privilege-escalation bug in Manufacturing Integration and Intelligence.
bleepingcomputer.com
· 2026-10-13
SonicWall disclosed CVE-2026-102255, a 10/10 CVSS SSRF vulnerability in the WorkPlace interface of its SMA 1000 secure access gateway, caused by an unintended alternate access path that lets unauthenticated attackers issue requests on the appliance's behalf. Days after the Oct. 6 advisory, security firms Previdian and Defused reported seeing exploitation attempts against this flaw on their honeypot sensors, though SonicWall says it has no evidence of in-the-wild exploitation.
darkreading.com
· 2026-10-12
Elon Musk has given more than $276 million to Republican political groups since July, newly disclosed figures show, including $158 million to the Senate Leadership Fund and over $76 million to his America PAC. The contributions push his known federal political spending for the 2025-26 cycle to about $366 million, surpassing his 2024 presidential election spending, with disclosures arriving ahead of a Thursday FEC filing deadline.
cnbc.com
· 2026-10-12
Market trackers reported that global PC shipments in the third quarter of 2026 were unusually low by historical standards. The specific figures and vendor breakdowns from the report were not detailed in the available material.
hardware.slashdot.org
· 2026-10-12
TechCrunch Disrupt 2026 begins tomorrow at 8 a.m. PT and runs through three days at San Francisco's Moscone West, with over 10,000 founders, investors and tech operators expected to attend. Organizers say this is the last day to buy tickets at a discount of up to $100, with additional offers including 50% off a second pass and a $75 Expo+ Pass for people who have been laid off.
techcrunch.com
· 2026-10-12
GitLab issued an advisory urging immediate patching of a maximum-severity vulnerability in its CI/CD Regular Expression Compiler, tracked as CVE-2026-97229. The flaw, an integer overflow found by researcher 'joaxcar' through HackerOne, could let an unauthenticated attacker execute arbitrary code via a crafted regular expression in a CI/CD configuration file. GitLab fixed the issue in versions 19.2.8, 19.3.4, and 19.4.2, noting GitLab.com and Dedicated customers are already protected.
bleepingcomputer.com
· 2026-10-12
At POSETTE 2026, Sai Srirampur presented a benchmark comparing a 3.3-billion-row PostgreSQL workload running on baseline gp3 EBS storage versus local NVMe storage. The talk argued that common scaling symptoms—slow ingestion, inconsistent read latency, autovacuum falling behind, and slower checkpoints—often trace back to storage performance rather than Postgres itself, and proposed architecture patterns for running Postgres on local NVMe in production.
clickhouse.com
· 2026-10-12
TechCrunch's Disrupt 2026 conference begins in two days, running October 13-15 at Moscone West. Organizers expect more than 10,000 attendees, over 250 speakers across 200+ sessions, and 300+ startups exhibiting, including the 200 companies selected for Startup Battlefield.
techcrunch.com
· 2026-10-11
The Federal Motor Carrier Safety Administration has issued a five-year exemption letting self-driving truck operators Aurora Innovation and Kodiak AI use cab-mounted warning beacons instead of physically placed reflective triangles when a truck breaks down. The change addresses a rule that assumed a human driver would exit the vehicle to set out warning devices within 10 minutes of a breakdown, something autonomous trucks without drivers cannot do. Aurora had previously sued over the requirement and appealed to the D.C. Court of Appeals after an earlier denial.
techcrunch.com
· 2026-10-11
Startup Efferon has developed a blood-purification device called Efferon NEO that absorbs both endotoxins and cytokines to treat pediatric sepsis, which kills about 3 million children under five each year. The device received CE mark approval in April, making it the first multimodal blood purification device built specifically for children, and is now used in ICUs across 30 countries including parts of Europe, Saudi Arabia, and Thailand. Efferon is preparing an FDA submission and expects to reach $2 million in annualized revenue by the end of 2026.
techcrunch.com
· 2026-10-11
TechCrunch Disrupt 2026 begins on October 13 at 8 a.m. PT at Moscone West in San Francisco, featuring more than 300 startups in the Expo Hall and 20 Startup Battlefield 200 finalists competing for a $100,000 prize and the Disrupt Cup. The event will also host over 200 sessions with more than 250 tech leaders discussing AI, fundraising, go-to-market strategy, and scaling. Attendees can still save up to $100 on passes, with discounts for groups and a 50% off second ticket offer.
techcrunch.com
· 2026-10-10
GoKawiil