GoKawiil
Tech News
BleepingComputer is hosting a live webinar on September 23, 2026, featuring Material Security's Rajan Kapoor and Fireside Consulting's Rick Fitzgerald, who will dissect real, publicly documented Google Workspace breaches. The session focuses on the critical early hours after a breach is discovered, including cases where attackers used social engineering paired with malicious OAuth apps to gain entry.
Microsoft confirmed that Windows Server 2022 will exit mainstream support on October 13, 2026, with the October update being the last one under that tier. The OS then moves into extended support, still receiving free monthly security updates until October 14, 2031, and Datacenter: Azure Edition hotpatching will continue through October 2027.
Apple published a Security Research blog post explaining how its new Reference Image camera feature, launching on the iPhone 18 Pro, verifies that photos are authentic from the moment they're captured. The system creates a secure digital negative with signed metadata and timestamps inside Apple's Private Cloud Compute environment, and uses a sensor-level trust chain with revocation lists to flag compromised hardware or fraudulent images.
Researchers from the DREAM Security Research Team disclosed a pre-authentication buffer overflow in the LINEMODE SLC negotiation handler of GNU inetutils' Telnet server, a flaw dating back to 1994. Because many vendors' Telnetd implementations, including those in major Linux distributions, derive from the same codebase, the bug's reach extends well beyond a single project.
An engineering explainer examines why the US Strategic Petroleum Reserve does not rely on the commercial standard of external floating roof tanks to hold its 714 million barrels of crude. It shows that scaling up conventional tank farms would require roughly 1,130 tanks spread across about 45,000 acres, an area comparable to Washington, D.C., while leaving the oil highly exposed to fire and attack.
Prediction market platform Kalshi reportedly took down a tool tracking AI compute prices after the U.S. Commerce Department raised national security objections. Details on the exact nature of the concern have not been fully disclosed, but the removal followed direct government pushback.
The US Air Force publicly confirmed it has placed weapons in orbit capable of offensive action, a rare admission for a domain traditionally shrouded in secrecy. Officials suggested the disclosure was intentional, signaling capability to rival nations rather than an accidental leak.
Apple's Home app now offers AI-generated descriptive summaries and natural language search for security camera footage. These features require a paid HomeKit Secure Video subscription, with top-tier plans reaching up to $60 per month.
Amazon is selling Arlo's 3rd Generation outdoor security kit, which includes four 2K cameras plus four matching solar panels, for $286, a 43% markdown from its usual price. The bundle also comes bundled with six months of Arlo's subscription service included.
A year-end review of 2026's major hacks highlights an unresolved controversy over the Department of Government Efficiency's access to Social Security Administration data. Ongoing federal lawsuits and a whistleblower's claims allege DOGE staff uploaded a live copy of the Social Security database to an unsecured third-party server, potentially exposing sensitive personal information tied to most living Americans. The broader roundup also notes a year marked by ransomware, nation-state attacks on infrastructure, and data weaponization by governments.
A dark web marketplace called Nexus was found selling access to a database containing roughly 153 million U.S. and Canadian driver's licenses and 3 million travel documents, according to Krebs on Security. The breach appears linked to identity verification firm IDScan, which is now investigating, while the FBI has also opened a probe; the Nexus listing vanished from the dark web after the report but its operators have not claimed to have deleted the stolen data.
Priority Pass, the airport lounge membership program, announced plans to broaden its benefits over the next year, including more fast-track security lanes at airports, additional partner lounges, and personalized recommendations powered by artificial intelligence. The changes aim to extend the program's value beyond simply granting lounge access before flights.