Ubuntu still unpatched for kernel RCE CVE-2026-98432 after nearly three weeks
On the radar
05 TOP STORIESHacker News (front page) · 1 min read
Ubuntu still unpatched for kernel RCE CVE-2026-98432 after nearly three weeks
Ubuntu has not shipped a fix for CVE-2026-98432, a critical remote code execution flaw in the Linux kernel, almost three weeks after disclosure. SANS separately covered Multipath TCP use and detection with reference to this CVE, which is a practical place to start checking exposure. Until Canonical ships a kernel update, Ubuntu hosts rely on whatever mitigations you can apply yourself.
BleepingComputer · 3 min read
Chinese hackers use ARTEX AI framework against 200+ organizations
The open-source ARTEX AI penetration-testing framework was used in automated attacks on more than 200 organizations in 14 countries, according to BleepingComputer. WorkOS separately disclosed an October 30, 2026 breach in which attackers reportedly used ARTEX against an internal system. Autonomous offensive tooling is now in real attacks, which shortens the time from discovery to exploitation.
The Hacker News · 4 min read
Siemens SIMATIC IoT2050 CVSS 10.0 flaw exploited to plant backdoors
Attackers are actively exploiting CVE-2026-58115, a missing-authentication flaw rated CVSS 10.0 in SIMATIC IoT2050 Advanced devices, to plant remote command backdoors. Separately, The Register reports a maximum-severity bug in a widely used OT programming tool being exploited to deliver Linux malware to industrial devices; its summary gives no product name. Industrial gateways with no authentication check are a direct route into OT networks.
BleepingComputer · 5 min read
Google dismantles XCPE botnet of 1.3 million Android TV boxes
Google and partners disrupted the XCPE botnet, which enrolled over 1.3 million Android TV set-top boxes used for proxy rental and ad fraud. Google says manufacturer Videostrong Technology built in a backdoor and sold criminal access, and it banned the company. Supply-chain backdoors in consumer hardware are a recurring source of residential proxy networks.
The Register · 4 min read
Anthropic's amended IPO filing shows Q3 revenue near $17B and $900B commitments
The revised prospectus shows Q3 revenue near $17B and warns that 12x revenue growth is unlikely to continue. The FT reports $900 billion in AI spending commitments, and The Register says the compute tab could top $1T. Anthropic also warned it is very close to recursive self-improvement capability. The numbers give the first hard look at the economics behind frontier-lab spending.
Go a little deeper
EXPLORE BY TOPIC- 54 articles
Cyber security
Exploitation of old and maximum-severity flaws dominated the day, hitting crypto payment software, NAS devices, GitLab and AI tooling. Physical-world systems such as supermarket refrigeration were also hit. Token theft and AI-assisted intrusion are growing as cost and breach vectors.
Read 8 updates - 31 articles
Tech industry
Capital and component costs drove the day: a $115B optical networking deal, a chip sell-off, more AI financing and memory-driven price rises. Layoffs continued at SUSE and Squarespace, and publishers sued Brave over AI scraping.
Read 8 updates - 20 articles
AI
Frontier-lab economics and safety claims led, with Anthropic warning about recursive self-improvement while the cost of serving models showed up at xAI. Research on models editing other models' weights and on poisoned pretraining data adds to the security picture.
Read 8 updates - 10 articles
IT & infrastructure
A quiet day for infrastructure releases, with Cloudflare reporting incidents while also publishing a DNS efficiency write-up. Linux kernel CVE volume and AI-driven contribution surges are the operational themes.
Read 8 updates