Threat Intelligence

Live threat and AI news from CISA, Krebs on Security, Bleeping Computer, SANS ISC, TechCrunch, The Verge, and Simon Willison — cross-referenced to open markets.

15-min cache
TechCrunch AIMEDIUMNov 9, 2026

Is Jensen Huang’s job on the line? Yale’s Jeffrey Sonnenfeld estimates it’s “about a 50-50”

Nvidia’s board is investigating Jensen Huang over his relationship with a suspected Chinese spy, and Yale’s Jeffrey Sonnenfeld thinks it’s roughly a coin flip whether Huang stays on as CEO.

Simon WillisonMEDIUMAINov 9, 2026

The Web Is More Than Enough, by Paul Ford

My comment on The Web Is More Than Enough, by Paul Ford — Hacker News. OK, this comment convinced me to give that a shot. Here's a thing I made in Three.js this morning - a Nudibranch themed Faberge Egg: https://static.simonwillison.net/static/2026/Hidden-Reef-Egg... (77KB) I just asked Claude

Simon WillisonMEDIUMAINov 9, 2026

Hide your slop PR descriptions behind

Most of the changes I make to my projects these days come in the form of PRs opened for me by Claude Code or Codex. The PR is my unit of work - I use them to bundle commits together, iterating on them until a feature is complete, document decisions and then merge the finished result. Today's coding

The Verge AIMEDIUMAINov 8, 2026

Here’s the full text of Jensen Huang’s memo to Nvidia

On Sunday, Nvidia announced it was launching an investigation into CEO Jensen Huang's relationship with Alice Huang, an AI executive and agent of the Chinese government. In addition to the Board of Directors announcing the investigation, Huang sent a memo to Nvidia employees acknowledging the affair

Simon WillisonMEDIUMNov 8, 2026

parse_number() as a SQLite extension: C vs Rust

Research: parse_number() as a SQLite extension: C vs Rust I was out walking the dog when I got curious about how easy/difficult it would be to write a SQLite C extension that adds a parse_number() function for turning strings like -$1,234.56 or '12.5%' into numeric values that could be summed and so

TechCrunch AIMEDIUMNov 8, 2026

Nvidia will investigate CEO Jensen Huang’s relationship with possible Chinese spy

In a memo to the company, Huang admitted that he had an affair.

The Verge AIMEDIUMNov 8, 2026

Nvidia is investigating Jensen Huang’s relationship with an alleged Chinese spy

Nvidia has announced that it is opening an investigation into CEO Jensen Huang and his relationship with Megaspeed executive Alice Huang, who was reportedly recruited by China's Ministry of State Security to spy on the company. A statement posted by the board of directors reads: The NVIDIA Board is

The Verge AIMEDIUMAINov 8, 2026

Apple is racing to make Siri more agentic

Bloomberg's Mark Gurman says CEO John Ternus is pressuring AI czar Craig Federighi to accelerate the Siri roadmap and deliver a powerful AI agent that can compete with OpenAI's Dots or Meta's Muse. While Federighi has delivered a functional version of Siri AI on an incredibly short timeline, the com

The Verge AIMEDIUMAINov 8, 2026

Elvis and Eminem rights holders are suing Suno

Suno is facing yet another pair of lawsuits. A group of rights holders of Elvis Presley's music and the publisher of some of Eminem's biggest records are suing the AI music company, claiming it illegally generates music and lyrics that mimic those artists. The lawyers in the Presley suit claim that

SANS ISCHIGHVulnerabilityNov 8, 2026

Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)

Our honeypots use "Cowrie" to collect SSH data. With the emergence of the "sshole" vulnerability last week, we are now seeing an increase in attempts to exploit the vulnerability. Our data is a bit limited in this respect. Our honeypots collect only the first 255 characters of SSH passwords. Longer

Bleeping ComputerHIGHNov 8, 2026

Iris Ohyama data cloud breach exposes info of 7.7 million customers

Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used. [...]

Simon WillisonMEDIUMPhishingNov 7, 2026

datasette #3046: Don't serve link: rel=next HTTP headers to Firefox for HTML pages

datasette #3046: Don't serve link: rel=next HTTP headers to Firefox for HTML pages I was looking at the Firefox network panel today when I noticed that requests to a Datasette table page were triggering an HTTP prefetch to the next page of rows in that table. This was happening because Datasette pag

TechCrunch AIMEDIUMNov 7, 2026

After the midterms, things are looking rocky for Elon Musk and data centers

On Equity, we unpacked what the midterms mean for the tech industry.

TechCrunch AIMEDIUMNov 7, 2026

Megaspeed exec was recruited to spy on Nvidia CEO, according to US intelligence memo

A memo circulated earlier this year reportedly claimed that China’s Ministry of State Security recruited a female technology executive to spy on Nvidia's CEO.

Simon WillisonMEDIUMNov 7, 2026

Terry Pratchett's Study

My comment on Terry Pratchett's Study — Hacker News. Terry Pratchett once wrote about the concept of "horizontal wealth". Vertical wealth is where you spend money on rich people stuff - yachts and suchlike. Horizontal wealth is where you spend more money on the things you liked before you got

The Verge AIMEDIUMAINov 7, 2026

NYT Cooking’s AI assistant saved my weeknight chicken, but almost ruined my cake

Around 7PM each weeknight, I find myself standing in front of the fridge, trying to decide on something for dinner that won't make my husband complain, "Chicken again?" Yes, I should meal plan more, but I don't, so this is where I'm at. A nightly battle in which the chicken usually wins. Recently, m

The Verge AIMEDIUMAINov 7, 2026

The US let Nvidia sell chips to an empty office in China

Concerns are being raised that neither the Commerce Department nor Nvidia are doing their due diligence when it comes to vetting Chinese firms cleared to handle the company's H200 AI chips. According to The New York Times, New Matrix is on the list of approved firms, yet its offices are empty, "a ho

Bleeping ComputerHIGHNov 7, 2026

Hackers pull off $133 million French bank heist via service provider

French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v [...]

Bleeping ComputerHIGHVulnerabilityNov 7, 2026

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate revenue without deliver

TechCrunch AIMEDIUMAINov 7, 2026

Crusoe sells troubled Wyoming data center project to Google

The deal highlights the challenges of developing massive AI data centers.

Bleeping ComputerHIGHVulnerabilityNov 7, 2026

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]

TechCrunch AIMEDIUMAINov 6, 2026

OpenAI reportedly raises an additional $11 billion at a $1.25 trillion valuation

OpenAI has reportedly raised an additional $11 billion as part of a funding round that hasn't closed yet but is expected to in the coming weeks.

Bleeping ComputerHIGHAINov 6, 2026

Runaway AI hacking agent behind WorkOS breach after escaping sandbox

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]

Bleeping ComputerHIGHVulnerabilityAINov 6, 2026

OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs

OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. [...]

Simon WillisonMEDIUMAINov 6, 2026

Quoting Nilay Patel

The products aren't good enough to sell people on the costs. You cannot tell people that you have to listen to the whine of a data center in their backyard for AI overviews and some of the most hilarious deep fake slop in history. It's not worth it. It just isn't worth it to anyone. And agents aren'

CISA AlertsCRITICALVulnerabilityNov 6, 2026

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber a

Beta Feedback