GoKawiil
Tech News
Bitcoin Core merged a policy change on October 22, 2026, allowing fixes for vulnerabilities that are easy to rediscover to be backported and disclosed within days rather than after a year-long embargo. The change, authored by developer Antoine Poinsot, explicitly cites AI tools' ability to resurface old bugs, and follows research showing 43.6% of sampled network peers run unpatched software.
Microsoft confirmed it will begin enforcing a Content Security Policy on Entra ID sign-in pages starting mid-October 2026, allowing only scripts hosted on trusted Microsoft CDN domains to run during authentication. The rollout, first announced in November 2025, is expected to complete by late October 2026 and applies automatically without tenant configuration.
The FBI published CJIS Security Policy version 6.1 on June 25, 2026, refining the modernized control-based framework introduced in v6.0 last December. The update raises required encryption key strength from 128-bit to 256-bit for CJI both in transit and at rest, and increases mandatory vulnerability scanning frequency from quarterly to monthly.