October 15, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
Experts: weak containment and monitoring behind AI hacking reports
Experts say AI agents aren't going rogue. Frontier labs are skipping basic security practices.
Banks try to offload the AI data center debt they underwrote
Banks are now trying to sell off debt tied to AI data centers that they underwrote themselves.
Security
Palo Alto Networks warns of exploited PAN-OS remote code execution flaw
The zero-day, tracked as CVE-2026-0322, allows remote code execution, and attackers have exploited it against firewalls. Palo Alto Networks has released security updates.
Cisco patches new actively exploited Secure Email Gateway zero-day
The flaw lets unauthenticated remote attackers run commands with root privileges. It is the second actively exploited zero-day in the product.
CISA orders immediate patching of Ivanti Connect Secure flaw
Attackers have exploited the vulnerability as a zero-day since at least October 1. CISA urges administrators to patch right away.
Ledger tells Asian sellers to halt sales after supply chain attack
Ledger asked resellers in Indonesia, Singapore, Hong Kong, and other markets to pull its crypto wallets from shelves while it investigates device tampering.
Global takedown hits network behind 1 billion phishing messages
Law enforcement and partners disrupted a criminal ecosystem that targeted more than 75,000 organizations across 150 countries.
FBI raids North Korean laptop farms in Texas
The Justice Department arrested two suspects, charged 14 people, and seized nearly 187 laptops used in North Korean remote IT worker schemes.
Dev
Anthropic launches OpenTelemetry export in beta
You can now trace Messages API requests and Claude Managed Agents sessions in your observability backend. The Claude SDK emits spans in Python, TypeScript, C#, Go, Java, PHP, and Ruby.
Anthropic built its own alternative to Git
Anthropic describes why and how it built a custom source control system, driven by a sharp rise in the rate of changes to its codebase.
Lovable lets you deploy apps in your own AWS account
Lovable apps can now be deployed directly into the user's own AWS account.
Web
Google silently links your phone number across signed-in accounts
According to Android Authority, Google uses automatic phone number verification to tie your number to every account you're signed in to.