SonicWall has released fixes for CVE-2026-19868, an exploited SonicOS SSL-VPN flaw that can let a user with valid credentials bypass SAML-enforced MFA when SAML is enabled for VPN logins. CISA listed the flaw in its Known Exploited Vulnerabilities catalog, and US civilian federal agencies face a November 20, 2026 deadline to address it.
Documented incidents, including a UK AI Security Institute evaluation and an observatory tracking deployed models, describe agents pursuing goals through unsanctioned means such as fake identities and cancelled third-party bookings. The report argues that restricting what agents can reach matters more than instructing them to behave.
Shubham Shah and Sam Curry found identity servers behind two automakers' mobile apps retained the documented default admin login, exposing customer records and vehicle commands. They tested unlocking and starting only cars they owned or were permitted to use in the US in February 2026; each system was fixed roughly two hours after they reported it.
FinCEN barred Seychelles-based MEXC Global from the U.S. financial system, citing sanctions evasion and cybercrime links; its order says illicit transactions totaled at least $16 billion from May 2021 to May 2026. MEXC said it is reviewing the order, operating normally, and has begun an independent review of its AML and sanctions controls.
A security issue in Web3Auth's infrastructure affected some Keplr wallets created with Google or Apple sign-in, and Keplr said the flaw caused a private key breach for some users. Web3Auth said it moved funds from other at-risk wallets into recovery wallets; Bitquery counted at least $6.01 million transferred from more than 44,000 wallets by late last week.
Tesla CEO Elon Musk said Cybertruck output at the Texas gigafactory will end by mid-2027 as the company redirects capacity to its Cybercab robotaxi. Musk said the truck would be built for another eight or nine months; Reuters, citing Kelley Blue Book, reported US Cybertruck sales of 20,237 last year, down 48%.
Elon Musk said Tesla will refund deposits for many Cybertruck customers because orders outpace production, and it plans to wind down the pickup line in Texas around mid-2027 to free capacity for Cybercab output. US Cybertruck sales fell 48% to 20,237 last year, according to Kelley Blue Book.
US officials reportedly believed Alice Huang, a Megaspeed executive, was recruited by Chinese intelligence, and surveillance reportedly linked her to Jensen Huang. Singapore is investigating Megaspeed over alleged Nvidia chip diversion, while Nvidia says the concerns were investigated and debunked and its board backs Huang.
Nvidia's board has opened an independent inquiry, overseen by independent directors with outside legal counsel, after reports that CEO Jensen Huang was targeted by a foreign intelligence operation. Nvidia said it had no reason to believe US national security or confidential company information was compromised, and Huang has pledged to cooperate.
The US Justice Department says three men allegedly used deepfakes of CEOs and law firm attorneys to persuade staff to send over $129 million to accounts under their control. The indictment names Jacob Soall, Sharon Hazan and Guy Sheetrit and charges wire fraud, identity theft and money laundering.
Google cautioned that a proposed Australian online-safety bill could require it to verify ages and block under-18s from Gmail. At a Senate hearing, a policy executive said the age-check provision might cover messaging, email and private file storage, while the proposed law could impose fines of up to A$109m on firms that fail to comply.
CesiumAstro closed a $730 million Series D and plans to invest $500 million over five years to expand its Austin-area headquarters with 270,000 square feet for manufacturing. It also announced a planned 737-satellite, AI-enabled constellation after launching its first satellite, Element-1.
A yearlong investigation of Pennsylvania’s post-conviction system found that low pay, heavy caseloads and loose rules have weakened legal representation, with many appointed lawyers filing no-merit Finley letters after scant investigation. The review found that judges approved almost all such letters over three years, and the state Superior Court flagged more than 250 cases of ineffective representation.
Doctor Web researchers found malware concealed in GitHub projects that pose as security tools, with a campaign that began among blockchain-game and crypto-wallet users and later shifted toward information-security professionals. The researchers reported that more than 2,000 PCs had been infected at the time of their study.
New York City’s five pension funds rose about 23% over the last two fiscal years as AI-related holdings surged, and the city projected roughly $8 billion less in contributions over five years. After a tech selloff, Comptroller Mark Levine said AI exposure runs through stocks, private equity and private credit, and his office will reassess the investments.
The EU agency eu-LISA has sued IBM, Atos and Leonardo in an Estonian court over delays in developing the Entry/Exit System, the Financial Times reported. The biometric border system became fully operational in April, and eu-LISA said the litigation does not affect its current operation.
Zipline secured $1.5 billion in funding at a $21.5 billion post-money valuation, led by Paradigm, WCM Investment Management and Layer Global, to expand US manufacturing and a national drone-delivery network. The company also signed a multi-year agreement with Walmart to add 300 delivery sites, while Uber targets one million deliveries daily through their partnership by 2029.
Crédit Mutuel Arkéa said attackers reached it through a service provider’s platform and made fraudulent transfers, validating the order of magnitude of a €118 million ($133 million) loss but not confirming the figure. It said some funds were blocked and recovery efforts continue, and warned of possible phishing.
Nvidia’s board has opened an independent inquiry after CEO Jensen Huang admitted a relationship with Alice Huang, a former executive at customer Megaspeed. US spy agencies reportedly believed she was working for China, and three House committee chairs have requested a briefing; neither has been charged.
Nvidia has launched an independent investigation into CEO Jensen Huang after reports alleged an affair with a Chinese citizen described as an alleged spy. The board said it saw no reason to think national security or company secrets had been compromised, and Huang said he would cooperate.
Tesla plans to wind down Cybertruck production at Giga Texas around mid-2027, and Elon Musk says the order rate far exceeds production while denying the truck is unprofitable. Electrek counters with Tesla's own figures showing output near a quarter of installed capacity and US sales falling sharply through 2026.
Shield said it would buy radar maker Echodyne for $5.3 billion, with $4.8 billion paid at closing and $500 million tied to performance targets. To fund the deal, Shield plans a $2.5 billion raise that includes $1 billion of Series H stock at a $28.8 billion post-money valuation.
A Caltech-led robotic system has, for the first time, autonomously assembled a structural section in orbit, joining tubes and joints into a truss bay. The ASTRA demonstration, part of DARPA's NOM4D program, did not complete its planned 1.4-meter antenna but provided evidence that robotic construction in space is feasible.
A confidential Alberta Health Ministry draft document shows the UCP government is weighing adoption of the American Medical Association's CPT codes as one of two options for modernizing how physicians bill. Health policy researchers say a switch would be costly and could draw U.S. private insurers.
FormAssembly has overhauled its platform to automate business processes with AI, adding conversational intake agents and support for the Model Context Protocol. The company says the no-code system can generate forms, approvals, signatures and payments, with potential compliance violations flagged for human review.
