Trail report · News
Hand-picked headlines on software, SaaS, AI and the tech job market. Short summaries, with links to the original reporting.
Barracuda says attackers are chaining a critical authorization bypass with a command-injection bug in its Email Security Gateway, which could give root access. It reports a small number of affected organisations; patches shipped last week.
via The Register →
Researchers found an exposed directory showing an autonomous intrusion toolkit built on DeepSeek Flash that ran for two weeks, mostly exploiting a Cisco BroadWorks flaw. Attribution is unproven.
via GBHackers →
The AI inference provider told customers an October 24 intrusion via a cloud provider reached billing data and, for some accounts, secrets, datasets and incomplete model weights.
via RuntimeWire →
Binance's CFO Kaiser Ng is leaving and Justin Yek will replace him. The change comes roughly a week after a $6.3B theft that Binance and the FBI attributed to a North Korean group.
via TechCrunch →
The agency says a threat actor it calls CRAFTY FALCON is escalating attacks during low-monitoring windows, using tiny test payments and targeting crypto wallet keys.
via The Register →
A server move left an internal system online from early 2025; unauthorized access to archived records happened in mid-2026 and may include identity documents. Core certificate services were unaffected.
via The Register →