Digital Life
-
AI coding tools’ built-in browsers exposed private files in tests

Forever Security’s October 29 research described file-access, code-execution and address-spoofing flaws in browsers embedded in five desktop AI coding tools.
-
ChatGPT shared-link flaw let researchers read private chats—now fixed

Parameter disclosed a ChatGPT shared-link vulnerability that exposed private chat content in controlled tests, reporting that OpenAI had fixed it on October 26, 2026.
-
VOLTA can turn stolen game sessions into AI victim profiles

Cisco Talos describes a Windows information stealer that can send stolen account data to a language model to assess victims and rank their assets by potential monetary value.
-
Windows 11 Search adds calls and texts in Insider preview

Microsoft is expanding Windows 11 Search in an Experimental Insider preview with phone actions, inline setting sliders and richer file previews.
-
Firefox Smart Window beta adds page alerts to cut down on refreshing

Mozilla has added scheduled page watching and selected-tab form filling to the opt-in Firefox Smart Window desktop beta, available in English in the U.S. and Canada.
-
WhatsApp group chats get pins with no expiry date

WhatsApp announced four group-chat updates covering permanent pins, recent-history sharing after joining, group status and a mentions-and-replies filter.
-
Google Slides: one Gemini prompt can now edit an entire deck

Gemini in Google Slides can now edit multiple existing slides or an entire presentation from one prompt, with English-only support at launch.
-
Microsoft plans AI training opt-outs that preserve Bing search eligibility

Microsoft will separate publishers’ AI training and grounding preferences, while Google aims to support a shared training signal in 2027.
-
eMudhra certificate forgeries emerge as WebView patching lags

Cloudflare reports forged certificates made with eMudhra's weak keys and patching gaps in sampled embedded-browser traffic, with no evidence of interception of its own connections.
-
Cloudflare Private Origins is generally available—no public origin IP needed

Cloudflare's application services for private origins are now generally available, letting eligible operators apply firewall protection, caching and Workers while keeping their origin servers on private IPs.
