GitLab has issued emergency security updates for self-managed installations after fixing two critical vulnerabilities, including a maximum-severity flaw now listed by US authorities as actively exploited. The company released GitLab Community Edition and Enterprise Edition versions 19.3.2, 19.2.6 and 19.1.8 on September 10, urging administrators running affected versions to upgrade immediately. GitLab. com is already operating the patched release, while GitLab Dedicated customers do not need to […]
OpenAI has temporarily stopped new sign-ups and upgrades to its $200-a-month ChatGPT Pro plan after demand for its GPT-6 Astra model put heavy pressure on computing capacity. The company confirmed that the restriction took effect on September 10 and applies specifically to the Pro $200 tier, also described in its support material as Pro 20X. Existing subscribers on that plan remain unaffected, while the lower-priced Pro $100 […]
Cisco has warned that attackers are actively exploiting two vulnerabilities in its Secure Firewall Management Center software, with intrusions leading to root-level access, credential theft, reconnaissance and malware deployment on compromised systems. Cisco Talos said on September 9 that it had identified three clusters of post-compromise activity involving CVE-2026-20079 and CVE-2026-20316. The first flaw, rated a maximum 10.0 on the CVSS scale, can let an unauthenticated remote […]
A ClickFix campaign is manipulating cryptocurrency users into injecting malicious JavaScript directly into their browsers, allowing attackers to replace legitimate wallet addresses and divert transfers, Cisco Talos has disclosed. The campaign marks a shift from familiar ClickFix attacks that persuade victims to run PowerShell, Terminal or other operating-system commands. Instead, targets are instructed to paste code into Chrome’s address bar or install it through the legitimate Tampermonkey […]
Security researchers have disclosed a zero-click worm capable of hijacking WeChat accounts through incoming calls on both iPhones and Android phones, although the exploit has been mitigated before public release. California-based security firm Calif said its WeWorm demonstration exploited a memory-corruption flaw in WeChat’s voice-over-IP stack, allowing a compromised account to call another user and seize control of that account within seconds without the target answering or […]
Security researchers have detailed a stealthy Linux implant, dubbed PoisonedRefresh, that backdoors compromised F5 BIG-IP Access Policy Manager systems by injecting PHP web shells directly into server memory while leaving legitimate files on disk unchanged. The malware has been associated with exploitation of CVE-2025-53521, a critical unauthenticated remote code execution vulnerability in BIG-IP APM when an access policy is configured on a virtual server. F5 has confirmed […]
CrowdStrike is investigating a publicly released proof-of-concept exploit that a security researcher says can elevate local privileges to SYSTEM level on Windows machines running its Falcon endpoint sensor. The exploit, dubbed FalconFlank, was published on GitHub on September 3 by a researcher using the names Nightmare Eclipse, Chaotic Eclipse and MSNightmare. The researcher described it as a zero-day privilege-escalation flaw that abuses Falcon Sensor’s Microsoft Office malicious-macro […]
The Gulf’s events and hospitality sectors are expanding at a pace few regions can match, and much of that growth is being carried on the backs of a workforce that barely existed in its current form a decade ago: flexible, on-demand talent. From five-star product launches in Dubai to sprawling exhibitions in Riyadh, the ability to scale a team up or down within days has become just […]
OpenAI plans to release a public version of its forthcoming Astra artificial intelligence model soon while restricting its most powerful cybersecurity functions to vetted testers and partners, after determining that the system crosses its highest cyber-risk threshold. The company said Astra is the first model it has designated as having “critical” cybersecurity capabilities under its Preparedness Framework. That classification applies when a model can independently identify and […]
Attackers stole an API key from AI safety research organisation METR and used it for three weeks to consume model credits worth about $600,000, the group has disclosed. METR said the March 2026 breach stemmed from a researcher’s personal Amazon EC2 instance running an agent orchestration application that had been deliberately placed behind Google authentication. A fail-open flaw in the “vibe-coded” application silently disabled that authentication, leaving […]
Apple has accused OpenAI of destroying evidence in their trade-secret dispute, citing a forensic review of a former Apple engineer’s company-issued MacBook as it presses a federal court to accelerate evidence gathering. The allegation was set out in a filing on Monday in the US District Court for the Northern District of California, where Apple is suing OpenAI, io Products and former employees Chang Liu and Tang […]
Canonical has issued Ubuntu Server 26.04.1 LTS, the first point release of Resolute Raccoon, folding months of security patches, high-severity bug fixes and package updates into refreshed installation images. The August 27 release is designed to cut the volume of updates required after a new deployment while preserving compatibility with Ubuntu 26.04 LTS, which launched on April 23. Canonical said the new media includes security updates issued […]
US authorities have warned that a China-linked hacking group built a distributed ecosystem of scanning, exploitation and proxy tools to target government networks and critical infrastructure, while court-authorised action has disabled two central platforms. The FBI, National Security Agency and US Cyber Command’s Cyber National Mission Force said QTFY, also known as QT and QTCYBER, developed purpose-built systems that allowed hackers to identify vulnerable devices at scale, […]
LJUBLJANA, SLOVENIA – Media OutReach Newswire – 22 August 2026 – On August 20, 2026, Ljubljana, the capital of Slovenia, shone even brighter as it celebrated its renowned music festival. The youthful Wuxi Symphony Orchestra, hailing from Wuxi, China’s first UNESCO “City of Music,” stepped into the heartland of classical music for the very first time under the leadership of Artistic Director and Chief Conductor Lin Daye. Inside a packed Gallus Hall at Cankarjev Dom, a profound and heartfelt musical dialogue unfolded between East and West.
As Slovenia’s largest international summer music festival, its stage saw the name of Wuxi, China, etched upon it for the very first time this summer. As the conductor’s baton cut through the silence, this ancient Central European city warmly welcomed the debut of this Eastern orchestra with thunderous, prolonged applause.
The concert opened to the magnificent sounds of the Overture to Verdi’s I vespri siciliani, with Lin Daye delivering the passion of Italian opera through his deeply expressive conducting. The orchestra then presented the festival debut of Fly To The Sky, an original symphonic suite by Li Shaosheng, whose embedded Eastern worldview resonated profoundly with the audience. Suona virtuoso Zhang Qianyuan’s performance in Questioning the Heavens was high-pitched and evocative, while tenor Xue Haoyin sang with heroic majesty in Heaven’s Movement is Strength, driving the atmosphere to a climax.
In the second half, the orchestra performed Brahms’ Symphony No. 1 in C minor. On a stage that has witnessed countless iconic performances of German-Austrian classics, the orchestra paid tribute to heritage through a precise yet impassioned interpretation. As the grand theme of the finale—symbolizing “through darkness into light”—echoed through the hall, the entire audience rose to their feet in a standing ovation, expressing high acclaim for the orchestra’s flawless execution. Darko Brlek, Artistic Director of the Ljubljana Festival, noted that this was the very first standing ovation given to a Chinese orchestra in the festival’s history of over 70 editions.
As the opening stop of their 2026 European tour, the Ljubljana performance marked a striking debut and strong statement of cultural confidence. Showcasing Jiangnan’s Wuxi to the world, these musical ambassadors from Lake Taihu foster cross‑cultural understanding through music, letting the world hear and understand China.
Cisco has released security updates for a high-severity BroadWorks vulnerability that could allow unauthenticated remote attackers to read sensitive configuration files from affected systems. The flaw, tracked as CVE-2026-20320, affects the Open Client Interface XML parser used by Cisco BroadWorks, a communications platform widely deployed by service providers for cloud calling and unified communications. It carries a CVSS severity score of 7.5 out of 10 and has […]
Security researchers have demonstrated a method for making some expired Visa contactless cards appear valid to payment terminals, exposing a weakness in how card expiry information is checked across the payment chain. The technique, dubbed the “Zombie Card” attack, allows an attacker positioned between an expired card and a point-of-sale terminal to alter the expiry date transmitted through near-field communication. The manipulation can enable a payment without […]
Medusa ransomware operators have compromised more than 500 organisations across critical infrastructure sectors, prompting US cyber authorities to warn that the group is exploiting vulnerabilities faster and using increasingly aggressive methods to penetrate networks and extort victims. An updated joint cybersecurity advisory from the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency and Department of Health and Human Services said the tally had exceeded 500 by […]
GitHub Actions has slipped well below the 99.9% availability level widely associated with enterprise-grade cloud services, sharpening concerns over the resilience of a platform that has become central to software development and deployment worldwide. The continuous integration and delivery service recorded 99.33% uptime over the 90 days to August 19, equivalent to roughly 14.5 hours of unavailable time. By comparison, GitHub’s core Git Operations service, covering fundamental […]
A critical authentication flaw in NASA’s open-source ground-control software could allow network attackers to obtain a valid session and transmit arbitrary spacecraft or instrument commands without supplying credentials. The vulnerability affects versions of the AMMOS Instrument Toolkit GUI released before version 2.5.1 and has been assigned CVE-2026-60112. The weakness carries a CVSS 4.0 severity score of 9.3 out of 10 and a CVSS 3.1 score of 9.8, […]
An autonomous security agent developed by Wiz uncovered and exploited a serious vulnerability in a Snowflake GitHub Actions workflow that had passed GitHub Advanced Security checks, highlighting emerging risks as artificial intelligence becomes increasingly embedded in software development and cyber defence. The flaw affected the public snowflakedb/snowflake-connector-net repository and allowed an unauthenticated GitHub user to execute arbitrary commands simply by opening an issue containing a specially crafted […]
SafePal has warned nearly 40,000 customers that their personal information was exposed after attackers exploited a flaw in an order-tracking system, creating a heightened risk of targeted phishing and impersonation attacks against cryptocurrency holders. The cryptocurrency wallet provider said information belonging to approximately 39,798 customers was accessed without authorisation. The affected records covered purchases made between March 2, 2025 and April 11, 2026 and contained names, email […]
Cl0p has claimed a sweeping data-theft campaign affecting nearly 50 companies worldwide, placing Shell, Philips, GE and financial technology group Fiserv among the organisations named on the cybercrime operation’s leak site. Several companies have opened investigations, although the scale of the alleged theft remains unverified. The campaign appears to mark another large-scale attempt by the Russia-linked extortion group to exploit a weakness in widely deployed enterprise software […]
China’s artificial intelligence race has intensified with Z. ai unveiling a coding model with powerful cybersecurity capabilities and DeepSeek pushing an upgraded flagship into wider commercial use, reinforcing the country’s growing challenge to leading US developers. Z. ai’s GLM-5.3 has emerged as the more striking of the two launches because of its ability to identify software vulnerabilities. The company said the model scored 84.5 per cent on […]
Harmony is moving towards rolling back its blockchain after an attacker exploited weaknesses in the network to create billions of unauthorised ONE tokens, forcing developers to halt parts of the system and coordinate an emergency response with validators and cryptocurrency exchanges. The Layer-1 blockchain has identified block 92,730,034, recorded on August 11 at 23:25:37 UTC, as the proposed point to which the network would be restored. Harmony […]
