GoKawiil
Tech News
Security researchers have observed active exploitation of CVE-2026-0768, a critical flaw in Langflow, the low-code platform used for building AI applications. This marks the latest in a series of attacks targeting the platform, which has drawn increasing attention from threat actors this year.
At Gamescom 2026, Dwarf Fortress co-creator Tarn Adams told PC Gamer that executives are chasing a fantasy where AI lets a CEO generate games at the push of a button while cutting the workforce that makes them possible. He argued this mirrors broader corporate behavior, citing his own father losing a job at a sewage plant because management didn't understand the technical work he did.
Hackers are actively exploiting CVE-2026-0768, a critical unauthenticated remote code execution flaw in the open-source Langflow AI development platform, to steal cloud and API credentials. VulnCheck's honeypots recorded roughly 50 exploitation attempts over a weekend, mostly from Russian IP addresses, with the count climbing to 360 attacks within days. The flaw lets attackers run arbitrary Python code with root privileges by abusing improper input validation in Langflow's code validator.
Shadowserver has identified nearly 22,000 internet-exposed Microsoft Exchange servers that remain unpatched against CVE-2026-62911, a high-severity authentication bypass flaw affecting Exchange Server 2016, 2019, and Subscription Edition. Most vulnerable systems are located in the United States and Germany, where officials say roughly 85% of on-premises Exchange servers remain exposed despite Microsoft releasing a fix in August 2026.
TP-Link unveiled its first consumer Wi-Fi 8 router, the Archer 8 Ultra BN19000, at IFA 2026, with pre-orders opening September 30. The tri-band router promises 19Gbps aggregate speeds, 18 antennas, and coverage for a 3,600-square-foot home, alongside a mesh sibling called Deco 8 Ultra rated up to 22Gbps for larger properties. TP-Link plans additional Wi-Fi 8 models in early-to-mid 2027, but has not confirmed whether any of these devices will reach the US market.
Hackers are actively exploiting two recently disclosed PaperCut NG and MF vulnerabilities, CVE-2026-81578 and CVE-2026-82078, to bypass authentication and steal data from print management servers. PaperCut issued emergency fixes last week, but researchers at Defused say attackers are using the bypass to hijack the software's user-lookup function and dump database tables rather than pursue remote code execution as earlier reports suggested. Over 800 PaperCut servers remain exposed online according to Shadowserver, and PaperCut has not yet attributed the attacks or detailed post-compromise activity.
Gizmodo is providing rolling coverage of IFA 2026, the annual consumer electronics trade show held in Berlin, reporting on hardware and gadget announcements as they emerge from exhibitors. The live updates format compiles news from across the show floor into a single continuously updated feed.
A technical walkthrough details how diffusion language models work as an alternative to the dominant autoregressive approach used by most LLMs today. Rather than generating text token-by-token in sequence, diffusion models produce an entire sequence at once and refine it over multiple steps, drawing on techniques like masking, iterative refinement, and post-training used in recent open-source models. The material stems from workshop talks and lectures given at ICLR 2026 and MLSS 2026.
In an Inside Java Podcast episode recorded at JavaOne 2026, Oracle Java Architect Ron Pressler discussed with host Nicolai Parlog why Java's often-criticized memory consumption is actually intentional. He argued that Java trades extra memory for reduced CPU cycles, a tradeoff enabled by its moving garbage collectors, which many leaner platforms cannot replicate.
At gamescom 2026, Xbox CEO Asha Sharma told BBC News that Project Helix, the code name for Xbox's next-generation hardware, actually refers to a whole lineup of devices rather than a single console. She declined to give specifics or say whether the discless-versus-disc question applies to the entire family, only confirming that all Helix hardware will support both console and PC games and that performance will keep improving.
Buffalo Wild Wings is closing a number of underperforming restaurants across the country, even as the chain continues to operate more than 1,400 locations nationwide. The closures mean some customers will lose their nearest outlet, though the brand's overall footprint remains largely intact.
PaperCut released a follow-up emergency update for PaperCut NG and MF after researchers found ways around its initial patch for actively exploited vulnerabilities. The company disclosed CVE-2026-82078, a critical unsafe dynamic class-loading bug, and CVE-2026-81578, a high-severity authentication bypass, which can be chained to let unauthenticated attackers execute code on vulnerable servers.