Sony Network Communications says an October 19 intrusion exposed more than 2.58 million So-net and plala member records, 54,401 email passwords and 16 bank account records.
1Password now creates passkeys using ML-DSA, a NIST post-quantum signature algorithm, for sites that support it. FIDO says passkeys now account for 36% of successful sign-ins.
Microsoft's October 13 updates fix more than 1,400 flaws, including CVE-2026-96951, an actively exploited Windows Shell bug that bypasses Mark of the Web protection.
Version 0.5.144 of the tensorlake npm SDK shipped a Shai-Hulud worm variant that steals developer and cloud credentials and can wipe home directories if its stolen GitHub token is revoked.
The FTC ordered Delta, United, JetBlue, Lyft, Uber, DoorDash, Instacart, Target and Walmart to explain whether personal data or loyalty status shapes the prices they charge and the pay workers receive.
Google's privacy policy, effective October 16, now says Gmail, Drive and Photos content can personalize ads if users connect those apps to services such as Search through Personal Intelligence.
The Eleventh Circuit vacated an injunction against Georgia's SB 351, letting the state enforce age checks, parental consent for under-16 accounts and limits on ad targeting while the case continues.
Firefox 159, released October 27, fixes 167 security vulnerabilities, 108 of them rated high, and turns on scroll-driven animations and scoped custom element registries by default.
Canonical released Ubuntu 26.10 on October 15, a nine-month interim release with GNOME 51, a Linux 7.3 kernel, Rust-based core utilities and Sequoia PGP for repository signature checks.
Windows 11 version 24H2 Home and Pro, Office 2021 and the final year of paid extended updates for Windows Server 2012 all reached the end of their support on October 13, 2026.
New York's new law bans AI companion features such as claiming human emotions or encouraging secrecy for minors, requires age checks with data deletion, and sets penalties of up to $25,000 per violation.
Forever Security says an AGENTS.md file dropped into a Downloads folder led a coding agent to try installing a malicious npm package, and that both Codex and Claude Code could be steered in tests.
Meta's new open-weight model has 816 billion parameters, a 1 million token context window and a custom license, and the company says it can run on two Mac Studio desktops.
Three copies, two devices, one offsite, and at least one disconnected. Here is how a small business can follow NCSC and CISA backup advice and use versioning and locked storage.
App Tracking Transparency, iCloud Private Relay, Android's advertising ID controls and both platforms' permission settings limit how apps follow you. Here is where to find each one.
Device Encryption, BitLocker, FileVault and Ubuntu's installer can lock a drive's contents behind a password or key. Here is how to switch each one on and keep the recovery key safe.
Google's final report on the October 20 europe-west2 outage says a misconfigured controller kept backup generators from starting after a utility feed failed, cutting power to a London zone.
TrendForce says optical fiber spot prices are 2.8 to five times 2025 levels as AI data center demand creates a 180 million fiber-kilometer shortfall that could last until at least 2028.
The UK's CMA has provisionally found that Microsoft meets the test for strategic market status in business software, opening the door to possible rules on AI tools, security bundling and cloud licensing.
CTD reports on security, privacy, software, AI and business technology. Every story links to the advisories, filings, documentation and announcements it is built on.
