NVIDIA is investigating unauthorized activity on its Brev cloud development platform between October 4 and October 20 that may have exposed SSH keys used to access customer virtual machines. The company says it has rotated affected keys and updated customer instances, with no known improper use of the keys.
MazeBolt launched a native deployment of its RADAR validation platform for enterprises using Akamai DDoS protection. The release enables continuous testing without taking services offline, targeting protection gaps that can emerge as organizations add services and APIs.
Ivanti released security updates for two more flaws in its Connect Secure remote access gateways. BleepingComputer reports that attackers have chained the vulnerabilities in zero-day attacks since at least October 1, making this an active exploitation issue for affected deployments.
Two critical Langflow vulnerabilities could let remote attackers bypass authentication or execute arbitrary code without an account, according to IBM's findings reported by The Hacker News. The report identifies versions 1.0.0 through 1.12.8 as affected and version 1.13.0 as the fix, putting the underlying AI agent and workflow infrastructure in scope.
TechCrunch reports that OpenAI is merging ChatGPT's chat and Work tabs. OpenAI says ChatGPT and Codex will draw usage from the same allocation pool after the change, linking the two tools' usage budgets.
Canva introduced Affinity for iPad following its relaunch of the creative suite as an all-in-one desktop app last year. The free iPad app brings professional tools for vector graphics, illustration, and photo editing to tablet workflows.