Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

SecurityWeek - Oct 9, 2026

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.

Read full article

MORE NEWS

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

Oct 9, 2026

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.

What to Know About the Facebook Whistle-Blowing Case Depicted in ‘The Social Reckoning’

Oct 9, 2026

What to Know About the Facebook Whistle-Blowing Case Depicted in ‘The Social Reckoning’

Aaron Sorkin’s sort-of sequel to the 2010 “Social Network” dramatizes a whistle-blowing case at Facebook. Here’s what to know.

US targets Microsoft, Adobe in new visa crackdown

Oct 9, 2026

US targets Microsoft, Adobe in new visa crackdown

The Trump administration continues to crack down on immigration, with new restrictions on the H-1B visa programme. US Vice President JD Vance singled out Microsoft as having abused the system to recruit low-cost foreign workers, to the detriment of the American workforce. The tech giant has defended its hiring practices. Also in the show: Germany could join a UK-led fighter jet development programme, months after pulling out of a joint French project.

China's FAST telescope finds rare triple-star system still evolving

Oct 9, 2026

China's FAST telescope finds rare triple-star system still evolving

China's FAST telescope finds rare triple-star system still evolving

Duetto acquires FLYR Hospitality to expand its platform and accelerate innovation for hoteliers

Oct 9, 2026

Duetto acquires FLYR Hospitality to expand its platform and accelerate innovation for hoteliers

Duetto, a leading provider of revenue and profit software for hotels, today announced it has acquired FLYR Hospitality, a provider of automated revenue management and business intelligence for hotels. This expands Duetto’s Revenue & Profit Operating System to now include FLYR Hospitality’s AI-first revenue strategy platform, inclusive of its best-in-class business intelligence tool, and advanced AI capabilities. This bolsters Duetto’s already strong product suite that includes tools for revenue management, group business, AI-powered insights, and profit benchmarking (through HotStats, which Duetto acquired in 2025).

Pegasus Airlines invests in Zingly.ai to bring agentic voice AI to guest service

Oct 9, 2026

Pegasus Airlines invests in Zingly.ai to bring agentic voice AI to guest service

Pegasus Innovation Lab, which leads Pegasus Airlines’ innovation-driven transformation, has entered into a strategic partnership with Zingly.ai as both an investor and design partner to bring agentic voice AI to its guest service operations. The first use case is now live, marking the start of a phased roadmap that will run through mid-2027 and is planned to cover the top 10 guest service use cases, which account for the majority of relevant contact centre volume. Pegasus served approximately 43.3 million guests in 2025 across routes spanning Europe, the Middle East, North Africa, and Asia.

China state funds double down on Hua Hong in legacy chip push

Oct 9, 2026

China state funds double down on Hua Hong in legacy chip push

Chinese state funds are ramping up support for the country’s second-largest contract chipmaker, pouring billions of yuan into the parent of Hua Hong Grace Semiconductor and a new manufacturing facility to fuel Beijing’s drive for self-reliance in mature-node chips. The capital blitz, spanning Hua Hong’s Shanghai-based parent company and a fabrication plant in Wuxi, highlights how government-coordinated financing is doubling down on domestic foundries, as Washington tightens technology...

Super El Nino event formed in September, Chinese climate center says

Oct 9, 2026

Super El Nino event formed in September, Chinese climate center says

A super El Nino event officially formed in September 2026, according to monitoring data from China's National Climate Center.

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Oct 9, 2026

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Oct 9, 2026

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions," Citrix said. The vulnerability

89% of guests want AI working behind the scenes, not running the front desk, Mews finds

Oct 9, 2026

89% of guests want AI working behind the scenes, not running the front desk, Mews finds

New survey data released today by Mews, the operating system for hospitality, shows that as AI adoption in hotels accelerates, guest expectations are moving the opposite way - 89% of guests want either a hybrid stay blending AI and human service or AI operating quietly in the background on repetitive tasks. Almost none want an AI-led stay. 59% of guests believe AI should take over repetitive tasks so hoteliers can instead focus on building trust with their guests. At a time when AI adoption in hotels has never moved faster, guests have never been clearer that they still want a human at the center of the stay - not at every point in it.

168% rise in AI travel traffic shows brands must prepare before peak booking season

Oct 9, 2026

168% rise in AI travel traffic shows brands must prepare before peak booking season

New data shows AI engaged sessions across travel websites are up 168% over the year, meaning travel business need to be AI-ready before the peak booking season takes hold. AI visibility preparation is now key as travellers are increasingly turning to AI to research, compare and plan holidays, according to IDHL’s State of AI Search report analysing 1.5 million AI engaged sessions across 175 websites.

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.