GoKawiil
Tech News
A critical remote code execution vulnerability rated 9.8 on the CVSS scale, tracked as CVE-2026-98432, remains unpatched in Ubuntu's 22.04, 24.04, and 26.04 LTS kernels almost three weeks after disclosure. Canonical has not released updated kernel packages or given a timeline for when fixes will ship.
Apple will release its fiscal Q4 2026 results after today's market close, followed by a conference call with new CEO John Ternus and CFO Kevan Parekh. Apple had previously guided for 9-11% year-over-year revenue growth despite supply constraints on iPhone, Mac and iPad, which would put quarterly revenue between $111.69 billion and $113.74 billion. The call is scheduled for 2:00 p.m. PT and will be streamed on Apple's Investor Relations website.
Reports ahead of the November 3 midterm elections indicate that AI data centers have become a major campaign topic in several states, with candidates debating regulation and proposed moratoriums on new facilities. Voter turnout for the midterms is reportedly reaching record levels.
A critical remote-code-execution bug in the Linux kernel's TCP stack, CVE-2026-98432 (CVSS 9.8), has existed since 2016 and affects nearly all Linux servers. Debian shipped a patch on October 16, but as of November 2 every supported Ubuntu release, including LTS versions, is still listed as vulnerable, more than two weeks later and days after a working root exploit was reportedly demonstrated.
NATO ran a Digital Backbone Experimentation exercise called DiBaX 2026 in Latvia from October 19-30, testing whether existing 5G towers could passively detect and track drones using AI-designed systems. Separately in the U.S., AT&T and Ericsson demonstrated drone detection via advanced network sensing over a 5G network near a large sporting venue.
Shadowserver reports more than 1,000 internet-facing GitLab servers remain vulnerable to CVE-2026-97229, a critical integer overflow bug in GitLab's CI/CD Regular Expression Compiler that lets unauthenticated attackers run arbitrary code via crafted regex in pipeline configs. GitLab shipped fixes on October 12 in versions 19.4.2, 19.3.5 and 19.2.8, but CISA has now confirmed active exploitation and added the flaw to its Known Exploited Vulnerabilities catalog, giving federal agencies until Sunday to patch.
Ivanti has released fixes for two additional Connect Secure gateway vulnerabilities, CVE-2026-111357 and CVE-2026-118527, which attackers chained together with a previously patched authentication bypass flaw, CVE-2026-104935. Researchers at Volexity and Defused say the attack campaign has been running since at least October 1, with one threat actor achieving root-level code execution on fully patched devices without deploying malware.
Stack Overflow's senior VP of community responded to claims the platform is dying, acknowledging that its 2026 Developer Survey found 64% of respondents visit the site less often for simple questions. She said the company's content still underpins AI training and retrieval systems, and pointed to new offerings including Stack Overflow for Agents, a revived Developer Story feature, and an expanded Stack Internal enterprise product launched in September.
Attackers tried to exploit CVE-2026-97229, a maximum-severity remote code execution flaw in GitLab's CI/CD regex compiler, against Alpine Linux's development infrastructure on October 20-21, repeatedly crashing GitLab processes. Alpine found no direct evidence code was executed or packages tampered with, but due to missing logs it could not rule out compromise, so it rebuilt its GitLab instance and reset all passwords.
Astronomers using the Vera C. Rubin Observatory in Chile have identified a distant icy object, provisionally named 2026 ED138, orbiting about 46 astronomical units from the Sun. Based on its brightness and estimated reflectivity, researchers believe it measures between 600 and 1,500 km across, potentially making it the largest trans-Neptunian object found in two decades. The object was detected by Harvard astrophysicist Matthew Holman using a search code, then confirmed across 30 images spanning 20 nights, with older data tracing its path back to 2016.
A use-after-free bug in Linux's IPv4 TCP handshake, present since kernel 4.4, has been patched upstream with fixed releases spanning 5.10 through 7.3, but Ubuntu and RHEL have not yet shipped fixes as of October 31. Anthropic says its Claude model produced a working proof-of-concept that gains root access with no credentials on servers running multipath TCP listeners, and Go's security team notes Go programs enable such listeners by default.
Cryptocurrency-linked super PACs, led by Fairshake, have committed more than $200 million to influence 2026 congressional races, according to Public Citizen, surpassing spending by online betting and data-center groups this cycle. Fairshake is backing 33 House candidates across both parties and directing at least $1 million each to six incumbents, including House Financial Services Committee leaders French Hill and Bill Huizenga. Coinbase has been a major funder, contributing $25 million to Fairshake's midterm push after donating $79 million to 2024 races.