Why Elvis Presley’s and Eminem’s music owners are suing Suno

Elvis Presley's rights holders and Eminem's publisher filed separate lawsuits against AI music generator Suno in Northern California federal court on 6 November. The Presley suit alleges voice copying under Tennessee's ELVIS Act, while the Eminem case focuses on copyright; Suno denies the claims and says it blocks artist names and songs.

More Than Numbers: Portraits of U.S. Citizens Detained by Immigration Agents

ProPublica reports it identified more than 500 U.S. citizens detained by immigration agents since President Donald Trump returned to office, despite DHS denying that it arrests or deports Americans. The account profiles detainees including a 17-year-old, a veteran and a teaching assistant, describing force and custody lasting hours or days.

WSJ: Nvidia weighs ousting CEO Jensen Huang after report of second affair

The Wall Street Journal reported that Nvidia's board is preparing to remove CEO Jensen Huang, days after an internal investigation into his relationship with Alice Huang, reportedly a former Megaspeed executive. A New York Times report alleged a second extramarital relationship, and Nvidia shares reportedly lost more than $450bn since Huang admitted the first relationship.

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

Aikido Security reports that stolen credentials for 4,837 GitHub accounts were used to install a CI secret stealer in at least 1,806 repositories. SafeDep separately counted malicious commits in 8,093 public repositories, and the report says exposed secrets and cloud roles should be treated as compromised.

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

Datadog researchers reproduced CVE-2026-118383, a critical MongoDB flaw where two unauthenticated requests can plant waiters that crash a lagging replica-set member after it wins an election and catches up. MongoDB released fixed versions and says Atlas clusters update automatically; researchers reported no code execution in their lab, though MongoDB warns it may occur under some conditions.

Stolen Claude API keys can turn Claude Code into a remote-controlled implant

Darktrace researchers showed in a lab test that stolen Claude credentials could let an attacker drive Claude Code through Anthropic's memory stores and exfiltrate a 1 GB file via the Files API on a simulated Active Directory network. The technique does not exploit a Claude platform vulnerability, and Darktrace has not seen it used in the wild.

Poland takes its national e-government platform offline after a cyberattack

Poland temporarily took the ePUAP platform used for public services offline after detecting and halting a cyberattack, according to Digital Affairs Minister Krzysztof Gawkowski. A ministry spokesperson said the system was not compromised, while restoration work continued and details about the attack remained unclear.

Italy’s Poste targets a €600M co-investment fund for data centres

Poste Italiane has launched a co-investment fund aiming to raise €600M for digital infrastructure, beginning with data centres of 20 megawatts combined capacity. It follows the group's €11.35B takeover of Telecom Italia, whose 18 data centres hold about 125 megawatts, as the combined business pushes into cloud and AI.

Microsoft Entra adds a seven-day safeguard against irreversible identity deletion

Microsoft Entra has added a preview feature called Hard Deletion Protection that gives administrators seven days to restore supported directory objects before permanent erasure. It does not prevent the original deletion, requires the Backup Administrator role to configure, and covers cloud-only users, groups, applications and service principals.

Electronica 2026: Low-power industrial embedded controllers

At electronica in Munich, Nordic Semiconductor, Nanopower, STMicroelectronics, MIPS and Renesas Electronics detailed low-power embedded controllers for industrial and robotic systems, emphasizing on-chip edge AI, multiprotocol wireless and integrated motor control. STMicroelectronics' STM32H7P is sampling at OEMs, with production planned in January 2027.

Griffin raises $20M to add cards and stablecoins to its banking platform

Griffin, a London-based bank whose infrastructure lets other companies embed accounts and payments, has raised a $20M Series B led by Octagon Partners at a valuation above $100M. The funding will support card issuing and stablecoin services, with recurring revenue reported up 3.2 times year-on-year on unaudited accounts.

A decade on, ICASA edges towards new network licences

South Africa’s ICASA has issued a preliminary view that direct applications for new I-ECNS licences could boost competition, as it opens the second phase of its licensing inquiry. Communications minister Solly Malatsi directed the inquiry in August 2025, and phase-one submissions argued that acquiring licences through transfers created entry barriers and inflated costs.

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's mod_http2, CVE-2026-119618, can let unauthenticated remote attackers run code on HTTP/2-enabled servers; versions 2.4.55 through 2.4.70 are affected, and 2.4.71 fixes it. Red Hat rates it 9.8 on CVSS and cites public research showing a reliable exploit, while Wiz said no exploit was available and no in-the-wild exploitation was reported.

IP Integration Challenges Evolve

IP integration in semiconductor design remains difficult because semantic mismatches and incomplete specifications cause many bugs, especially as designs grow more configurable and software-heavy. Experts also cite power, thermal, analog and chiplet integration as pressures that complicate verification and require more information to travel with each block.