Patchstack reports active exploitation of CVE-2026-85097, a maximum-severity vulnerability in the Bricksforge WordPress plugin. The flaw allows unauthenticated attackers to upload and execute arbitrary PHP code, making exposed WordPress installations a priority for security review.
Attackers are exploiting CVE-2026-102255 in SonicWall Secure Mobile Access 1000 appliances, with 135 exploitation attempts reported after a patch became available. The maximum-severity flaw is a pre-authentication server-side request forgery issue that can make an appliance issue attacker-directed requests.
Microsoft has announced its third-generation Maia AI chip, designed to become the primary inference system for its products and services. The company positions Maia 300 as improving cloud AI workload cost and efficiency while better supporting reasoning models and agentic tasks.
Ambi, founded by a former Plaud executive, has raised $26 million for an AI app that listens in the background. It is releasing ambient-capture apps for iPhone, Mac, and Apple Watch, extending the product across mobile, desktop, and wearable devices.