Digital Life

Google says it dismantled the XCPE botnet involving more than 1.3 million set-top boxes, but the disruption does not remove the backdoor embedded in affected devices’ firmware.

Cursor removed tampered Claude Code extension builds 2.1.312 and 2.1.313 from its marketplace, but affected macOS and Windows machines may retain malicious startup scripts after an uninstall.

Proton CTO Bart Butler has published an internal manifesto calling for engineers to guide AI agents and for Proton to redesign the development processes around them.

Northflank says customers reported unauthorized use of AI API keys supplied to its platform and urges all users to rotate secrets and credentials immediately.

Forever Security’s October 29 research described file-access, code-execution and address-spoofing flaws in browsers embedded in five desktop AI coding tools.

Parameter disclosed a ChatGPT shared-link vulnerability that exposed private chat content in controlled tests, reporting that OpenAI had fixed it on October 26, 2026.

Cisco Talos describes a Windows information stealer that can send stolen account data to a language model to assess victims and rank their assets by potential monetary value.

Microsoft is expanding Windows 11 Search in an Experimental Insider preview with phone actions, inline setting sliders and richer file previews.

Mozilla has added scheduled page watching and selected-tab form filling to the opt-in Firefox Smart Window desktop beta, available in English in the U.S. and Canada.

WhatsApp announced four group-chat updates covering permanent pins, recent-history sharing after joining, group status and a mentions-and-replies filter.