Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management Protocol

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360 installer, distributed under a deceptive file name established remote management access on affected

They're only small, but it turns out toddlers are putting a lot of steps in. A new study has found that children as young as three take up to 30,000 steps a day.

October sale: As India's festive sales approach, e-commerce giants Flipkart and Amazon are promoting banking partners for discounts. Flipkart emphasizes Axis and ICICI Bank offers, while Amazon features SBI for 10% instant savings.

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. It carries a

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have weaponized shared

Apple has launched its Apple Pay service in India with Axis Bank, allowing users to make payments using compatible Apple devices. More banks may join by year-end. Check how to set-up Apple Pay on iPhone in India.

Targeted gene therapies are highly effective at stopping cancers, but the very abundance of the treatments, plus cost and sluggish change, are hindering access.

An enormous pulse of wave energy will soon reach Southern California and continue north, raising sea levels by half a foot and increasing threats from swells and tides.

New report warns of record ocean warming and rising seas According to a report by more than 100 international scientists, the world’s oceans are undergoing major changes that could have consequences for which the world is unprepared, with far-reaching effects on marine ecosystems and...

A wave which is said to be on a planetary-scale is approaching the US West Coast, and experts believe it could have long-lasting impacts on storms and floods for the next year.

The US artificial intelligence giant Anthropic has warned of the potential danger posed by Chinese firm Z.ai’s GLM-5.3, with the open-weight model showing a troubling mix of powerful hacking abilities but weak safety constraints. GLM-5.3 almost matches Anthropic’s most advanced model in terms of its cyber capabilities, but has far weaker safeguards, meaning there is greater potential for the model to be co-opted by bad actors, according to the San Francisco-based firm. In a report released on...

Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to exfiltration playing out in the browser. Here are the six most dangerous techniques that should be on every security team's radar in 2026. 1.

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat under developers' personal accounts

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, fraud

Why NASA scientists believe Scotland holds clues to Mars’ ancient pastNASA scientists, Goddard Instrument Field Team and collaborators travelled to the Scottish Highlands to find major clues regarding Mars' ancient past. According to scientists, Scotland's rocks are significant to unravel...

Air Canada, Virgin Australia and Scandinavian Airlines (SAS) have been named finalists in the World Aviation Festival’s Battle of the Airline Apps competition, set to take place during WAF 2026 from 13-15 October in Lisbon. The competition, which spotlights innovation in airline mobile technology, will challenge carriers to showcase how their apps are transforming the passenger journey – from booking and check-in to in-flight engagement and post-travel loyalty.

Subscribers: The Daily Pulse won’t be published on October 1, which is China’s National Day. We will resume publication on Friday, October 2. US President Donald Trump has again ruled out collaborating with China on artificial intelligence (AI), arguing that it would undermine American leadership in the technology. Cooperation would let China “immediately gain access to things that we know that they don’t know”, Trump told reporters on Tuesday. “We’re leading now over China and everyone else,...

Streaming services can introduce you to a wonderland of nearly unlimited audio, but downloading your digital collection has advantages.

Meta is exploiting a lucrative tax break intended to support research and experimentation. Its own accountants say the gambit is risky.

Apple has claimed the top spot in China’s smartphone market following the release of its iPhone 18 Pro series, giving a potential boost to a sluggish handset market weighed down by weak consumer demand and soaring component costs. Sales of the new Pro models in their first three days after launching on September 18 were 12 per cent higher than sales of the iPhone 17 Pro line-up during its entire first week last year, according to a report published on Wednesday by Counterpoint Research. That...

Scientists are one step closer a 'major biomedical breakthrough' after developing a drug that can prolong the lifespan of some animals by 25 per cent.

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional

Aer Lingus has installed ultra-fast free Wi-Fi powered by Starlink across its entire narrow body transatlantic fleet. This means customers flying to more than 10 North American destinations can stream movies and TV shows and stay connected with family and friends at 35,000 feet. While Aer Lingus is synonymous with flights to Ireland, the airline also serves an extensive network of destinations across North America, giving UK customers easy access to major cities in the US, via Dublin. Customers travelling with Aer Lingus to destinations including Newark, Washington D.C., Philadelphia, Pittsburgh, Cleveland, Nashville, Indianapolis, Hartford Connecticut, Raleigh-Durham, can now enjoy seamless connectivity all throughout their journeys.

Magipic AI, the AI event experience and lead attraction platform for expos and events, is one of 10 companies selected to demo live on stage at the AI for Events Demo Day at IBTM World in Barcelona on Tuesday 17 November 2026, from 10:30 to 10:50 on the Future Stage. From just one selfie, Magipic AI gives guests a branded AI experience, including video, magazine cover, calendar or comic, in seconds, and captures a verified, segmented lead. At Microsoft for Startups’ stand in Athens earlier this year, the platform generated 300 qualified leads in 12 hours, with 98% lead form completion on the booth iPad.

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash can happen when such a resend starts while a larger handshake message is stuck part-way

Funds raised through Hong Kong initial public offerings (IPOs) doubled in the first nine months of 2026, reaching the highest level for the period since records began in 1980. A total of 112 companies raised US$48.4 billion on Hong Kong’s main board during the first nine months, according to data released by LSEG Data & Analytics on Wednesday. A further two companies listed on the city’s Growth Enterprise Market (GEM). By deal count, the combined total of 114 new listings on the main board and...

Apple's iPhone Duo is reportedly facing production challenges ahead of its October 23 launch, with Foxconn's final assembly yield reportedly just above 60%. Supply chain issues with foldable OLED panels and hinge components could limit initial availability.

Amadeus is preparing to introduce its new “Amadeus Max for Travel Sellers” across the Gulf region as part of its continued commitment to advancing intelligent travel technology and empowering travel sellers with faster, smarter, and more efficient workflows.

Mainland China-based printed circuit board (PCB) maker Suzhou Dongshan Precision Manufacturing has cleared its final listing hurdle in Hong Kong and is moving towards a share sale that may rank among the city’s largest initial public offerings (IPOs) in the fourth quarter, according to people familiar with the matter. The company passed its listing hearing with bourse operator Hong Kong Exchanges and Clearing (HKEX) recently, the people said, requesting anonymity because the information was...