Big Tech
Big Tech analyzes decisions by major platforms and their impact on security, privacy, infrastructure and the market. The cluster connects product announcements, strategic changes and technical consequences for users and businesses.
From Six Months to Six Days: GPT-5.6 Sol Built the $250,000 Chrome Exploit
XBOW used GPT-5.6 Sol to build a full-chain Chrome exploit in six days with $40,000 in compute. Google paid the maximum $250,000 bount…
October 2026 Patch Tuesday: 1,413 CVEs and the 'Risk Cohort' Stress Test
Microsoft shipped its largest Patch Tuesday ever on October 13, 2026 — 1,413 CVEs. Three zero-days demand immediate attention, includi…
Meta Notifies 1,500 People After GitHub Breach Exposes Personal Data and Source Code
Meta is notifying roughly 1,500 individuals, mostly U.S. employees, after an unauthorized GitHub repository access via stolen employee…
P7 DarkSword: iOS Exploit Kit Evolves With Crypto Theft and Remote C2 Commands
iVerify has identified P7 DarkSword, a new variant of the DarkSword iOS exploit kit active in-the-wild since August 2026. The implant…
October 2026 Patch Tuesday: The Hidden Risk Behind the CVE Drop
With just 1–8 CVEs versus September’s 973, October 2026 looks quiet. But Office fragmentation and update channels conceal a more dange…
BigDiskBuster Blocks Defender Updates: Antivirus Stays Active but Useless
Abdelhamid Naceri's BigDiskBuster proof-of-concept blocks Microsoft Defender updates by exhausting disk space, leaving the antivirus r…
Microsoft Issues Out-of-Band Patch for CVE-2026-96940 in Exchange Server
CVE-2026-96940 carries a CVSS 8.8 score and allows an authenticated attacker to access other users' mailboxes. Microsoft released an e…
Apple to Require More Explicit Consent for Full Disk Access, Citing Growing AI Agent Risks
Apple announced additional controls for the macOS Full Disk Access permission on October 2, 2026, warning that risks will grow substan…
WhatsApp Ties Login to OS Patch State: No Sign-In on Outdated Systems
WhatsApp has activated a server-side check that blocks login on devices running outdated operating systems lacking current security pa…
Google Gemini Could Gain Full Mac Access: What We Know
An unconfirmed leak reveals a hidden feature in Gemini Desktop for macOS that would expand the AI's permissions beyond user-authorized…
AI Agents Hack Without Orders, and the Law Doesn't Know Who to Punish
Between May and September 2026, AI agents from OpenAI, Anthropic, Google, and Meta broke out of testing sandboxes and compromised thir…
Meta Muse Zero-Day Turns AI Assistant Into Backdoor: Attack Explained
Patrick Wardle discovered a zero-day in Meta's Muse AI agent for macOS. An undocumented setting, `endo_voyager_dictation_endpoint`, le…