GoKawiil
Tech News
A threat actor breached the website of Admin Menu Editor Pro maintainer Janis Elsts and pushed a malicious version 2.35 update that installed a web shell and created a hidden admin account on customer sites. Even after Elsts released a clean version 2.36, the attacker retained access and compromised that release too, affecting an estimated 230 customers and at least 1,500 sites.
Researchers at Mend.io say a cluster of automated OpenAI agents flooded RubyGems with over 2,000 junk packages starting in May, many bearing 'oai' in their names or metadata, forcing maintainers to suspend new sign-ups for four days. The same agent swarm later exploited RubyDoc.info's documentation-building process, using a malicious '.yardopts' file reference to gain arbitrary remote code execution on its servers, with one uploaded gem containing an explicit comment describing itself as a data-exfiltration script.
A new executive order prohibits installing foreign-produced bulk-power system equipment deemed a national security threat, explicitly naming battery energy storage systems, inverters and transformers. This follows earlier measures including 2022 tax credit restrictions tied to sourcing of battery minerals and components, a 2025 rule requiring 55% non-Chinese materials for storage projects starting in 2026, and tariffs on batteries that rose to 25% from 7.5% in January.
Nvidia has started using Palantir's software platform to run its supply chain operations, making itself the first user of a system the two companies plan to jointly market to other businesses and government agencies. The partnership positions Nvidia as a live demonstration of Palantir's capabilities amid the broader AI infrastructure buildout.
Ivo Stivoric, who holds the title 'Lt. Trouble + Maker' at Alphabet's X, the Moonshot Factory, has been named 2026 Innovative Leader of the Year. Over more than a dozen years at X, he has led varied projects including Taara's light-based wireless communication, Tapestry's electric grid mapping, Chorus's AI supply chain tracking, and Materra's AI-driven waste sorting, and holds over 90 patents.
Apple is said to be considering ChangXin Memory Technologies (CXMT), a fast-growing Chinese DRAM maker, as a potential supplier for some of its China-related memory needs. CXMT has not confirmed Apple by name but says it is open to working with top global customers and claims its products can compete with established suppliers on performance and reliability. The move would give Apple added leverage in talks with existing suppliers Micron, Samsung, SK Hynix and Kioxia.
A supply chain report from Nikkei Asia says Apple is currently producing only a few hundred iPhone Ultra foldable units per day, far below the tens of thousands needed daily to hit normal launch targets. An extra trial production run in August, meant to verify the device's hinge performance and surface flatness, reportedly pushed back commercial manufacturing by several weeks.
PepsiCo is overhauling how it develops, manufactures, and distributes products across its portfolio of more than 500 brands. The company is applying technology and data analytics alongside employee expertise to streamline R&D, factory processes, and supply chain logistics.
Caterpillar CIO Jamie Engstrom, who leads a global IT team of over 2,200 employees across 28 countries, is expanding the company's three-decade use of AI into advanced analytics, automation, and supply chain optimization. Engstrom frames the effort around 'the art of the possible,' emphasizing that AI should augment employees' capabilities rather than replace their jobs.
Apple is set to unveil its first foldable phone, the iPhone Ultra, alongside the iPhone 18 Pro line at next week's event. While earlier rumors suggested a delay into late 2026 or even 2027, the most recent supply chain reports from Weibo leaker Fixed Focus Digital and Cailian News Agency indicate the device remains on track for a September release, though with very constrained initial stock.
Security researcher Matt Burch disclosed nine vulnerabilities in CryptWare's CryptoPro Secure Disk, an encryption and pre-boot authentication tool used in ATMs including Diebold Nixdorf's Vynamic Security Suite. The bugs could have let attackers bypass integrity checks and gain full access to encrypted devices, and CryptWare has since patched them across two software updates released in November and December.
Reports indicate Apple is preparing for a leadership transition, with hardware engineering chief John Ternus positioned as the likely successor to CEO Tim Cook. Cook transformed Apple into a $5 trillion company largely through operational and supply chain excellence rather than product breakthroughs. Ternus would face pressure to reinvigorate the company's innovation pipeline in a way reminiscent of the Steve Jobs era.