Anthropic researchers developed an exploit for a critical Linux kernel vulnerability affecting servers with Multipath TCP (MPTCP) listeners. The reported flaw allows unauthenticated remote attackers to execute commands as root, making MPTCP exposure a key distinction when assessing affected infrastructure.
Attackers are chaining three Ivanti Connect Secure vulnerabilities to obtain unauthenticated root access. CISA added two flaws affecting the product to its Known Exploited Vulnerabilities catalog on Friday after active exploitation was observed, placing the issue beyond a theoretical attack scenario.
Google's first data center satellite is online, with a Tensor Processing Unit running a DeepMind Gemma 4 model. Its demonstration generated poetry, showing an AI inference workload operating aboard the satellite.
A security researcher discovered a database password embedded in Applebee's app that allowed unrestricted access to customers' personal data. The exposure illustrates how a credential shipped inside a client application can compromise the data behind it.