Cyber Security · Monday, October 19, 2026 · 5 sources

Progress patches MOVEit Transfer SQL flaw in Custom Reports

Progress MOVEit Transfer has an SQL injection flaw in its Custom Reports module, rated 7.2 out of 10 by CVSS. OpenCVE says attackers with sufficient privileges could use crafted report queries to disclose, modify or delete data; Progress’s fixed releases are 2025.1.6 and 2026.0.4.

Bottom line — MOVEit installations before 2025.1.6, and 2026 releases before 2026.0.4, need the patch.

Go deeper 4

OpenCVE lists versions before 2025.1.6 and versions from 2026.0.0 to before 2026.0.4 as affected.
The DEV Community article says the flaw requires high privileges, including accounts with reporting rights.
OpenCVE reports an EPSS exploitation probability below 1%; it says the flaw is not listed in CISA’s KEV catalogue.
The DEV Community article says the same releases also fix an LDAP injection flaw rated 7.5.

Read the reporting 5

DEV Community dev.to CVE-2026-89076 and the Reporting Endpoint Problem in File Transfer Platforms App.opencve app.opencve.io CVE-2026-89076 - Vulnerability Details - OpenCVE Vulmon vulmon.com CVE-2026-89076 - SQL Injection Vulnerability in Progress… Vulners vulners.com CVE-2026-89076 - vulnerability database | Vulners.com Cvefind cvefind.com CVE-2026-89076 - Detail CVSS, EPSS & CISA Kev | CVE Find

The dstld brief

The news, tuned to you.

Curated news that actually mattered, delivered to your inbox.

One email a day. No noise. Unsubscribe anytime.

Pick your topics

Get the coverage you care about.

Deep sourcing

Thousands of sources - curated by humans, summarized by AI.

Right to your inbox

Ready when you are to catch up on the day's events.

Technology · Mon, Oct 19

Yandex outages cut automated web traffic, but not proven propaganda bots

Ukraine struck three Yandex data centres, disrupting services including search, ride-hailing and delivery, according to RFE/RL and CBC. Cloudflare Radar recorded automated requests from Yandex’s network falling sharply, but researchers told RFE/RL and CBC that the measure largely reflects Yandex’s web crawlers, not propaganda accounts on social media.

Bottom line — Cloudflare’s traffic drop shows a Yandex infrastructure disruption, not a confirmed fall in pro-Kremlin social media activity.

Sources UNITED24 Media RadioFreeEurope/Radi… cbc

TV/Movies · Mon, Oct 19

Netflix reports box-office figures for the first time as La Bola Negra earns $277,500

Netflix disclosed box-office grosses for the first time after Spanish-language drama La Bola Negra earned $277,500 (€255,000) from four US cinemas, averaging $69,375 (€63,800) per screen. Variety reports the average is the second-highest ever for a non-English-language film; Netflix plans a 45-day theatrical run before the film reaches its service on 2 December.

Bottom line — Netflix says it plans to disclose grosses for upcoming releases, including films from David Fincher, Greta Gerwig and Taika Waititi.

Sources Variety - Covering Latinos i… ArcaMax +2 more

World · Mon, Oct 19

Volodymyr Zelensky said the US has resumed sharing intelligence on Russian ballistic missile launches after a pause of about three days. He said Ukraine received no US warning during attacks in that period, and expressed hope that talks with Washington could take place this week.

Bottom line — The intelligence flow is back, but Zelensky said Ukraine still lacks access to the Starshield communications system.

Sources Kyiv Post The Kyiv Independent New York Post +4 more

Space · Mon, Oct 19

ESA’s Euclid telescope discovers its first previously unknown comet

ESA’s Euclid telescope detected C/2026 S1 (Euclid) in images taken between 16 and 24 September 2026, despite being designed to map distant galaxies rather than track comets. The International Astronomical Union’s Minor Planet Center confirmed it on 8 October after software developed by University of Helsinki researcher Mikko Pöntinen flagged the object for follow-up.

Bottom line — C/2026 S1 is about 1.3 billion kilometres from Earth and is not a target for ESA’s Comet Interceptor.

Sources esa Euclid Phys.org +6 more

World · Mon, Oct 19

Drone strikes kill civilians in Darfur and Kordofan as fighting spreads

A drone strike in West Darfur killed at least 10 civilians and wounded five, according to local officials and tribal leaders cited by Radio Tamazuj; Radio Dabanga reported several deaths, including six women, and five injuries. In West Kordofan, the Kordofan Observatory told Radio Dabanga that an army drone strike on a civilian lorry killed four people and injured others. Drone attacks also targeted military installations in eastern Sudan, with no casualties reported.

Bottom line — The Kordofan Observatory says civilian vehicles and residents have been hit as fighting intensifies across the region.

Sources Dabanga Radio TV Onl… allafrica sudantribune.com +2 more

World · Mon, Oct 19

Putin proposes Ukraine summit with Trump and Xi, but Trump has not agreed

Vladimir Putin has proposed meeting Donald Trump and Xi Jinping next month to discuss ending the war in Ukraine on terms favourable to Moscow, according to the Wall Street Journal, cited by Reuters. The Kremlin says discussions are under way but no meeting or agenda has been agreed; a senior US official told the Journal that Trump has not committed. Moscow proposed talks alongside the APEC summit in Shenzhen on 18–19 November.

Bottom line — The proposed talks would exclude Ukraine’s Volodymyr Zelenskyy, and Trump’s participation remains uncertain.

Sources Українська правда Cyprus Mail Reuters +3 more

Apple · Mon, Oct 19

Apple’s Minions pools idle Macs to cut AI inference waits from 10 hours to minutes

Apple researchers describe Minions, an internal system that pools the GPUs of idle Apple silicon Macs to run machine-learning inference tasks. They report that jobs which previously waited more than 10 hours for central GPU capacity can often start within minutes; Apple has not announced plans to make the system available outside the company.

Bottom line — Minions currently handles inference, with distributed model training listed as future work.

Sources The Mac Observer Apple Machine Learni… arXiv.org +1 more

Europe · Mon, Oct 19

Dutch prosecutors seize an Italian provider’s server at US request; data remain in the Netherlands

Dutch police seized a server belonging to Italian internet provider Autistici/Inventati (A/I) at Amsterdam Science Park, following a US request under the Dutch-US mutual legal assistance treaty. Amsterdam prosecutors say there were no grounds to refuse and that the data have not been shared with the US; the Dutch Cloud Community is demanding clarification on whether an independent Dutch legal review took place.

Bottom line — A/I had served about 20,000 organisations and activists before US sanctions prompted it to dissolve.

Sources NL Times Essentially Amsterda… circleid +2 more

Cyber Security · Mon, Oct 19

Fake WhatsApp listing passes 500,000 downloads on Google Play

A WhatsApp imitation listed on Google Play has reportedly passed 500,000 downloads and appeared in sponsored search results above the genuine app, according to Android Authority and The Verge. The listing uses the name and visuals of WhatsApp, but names its developer as Agment Assets sallu; reports have not established what the app does with user data.

Bottom line — The genuine WhatsApp Messenger is published by WhatsApp LLC and has more than 10 billion Google Play downloads.

Sources Mashable India The Hans India Gadgets Now +1 more

Health · Mon, Oct 19

Swedish study links HPV vaccination before pregnancy to lower preterm-birth odds

A Swedish study of 624,713 births found that women vaccinated against HPV before pregnancy had lower odds of several adverse outcomes, including preterm and very preterm birth, than unvaccinated women. The BMJ study found stronger associations among women vaccinated before age 17, but its authors cautioned that the results do not establish that vaccination caused the differences.

Bottom line — Very preterm birth odds were 15% lower among vaccinated women, according to the Swedish study.

Sources AusDoc www.bmj.com medpagetoday +1 more

Games · Mon, Oct 19

Jagex cancels RuneScape Reignited after player criticism

Jagex has cancelled RuneScape Reignited, a planned fresh-start version of the online game, after player feedback, saying it missed the mark. The studio will instead offer eligible players 10 days of free access to members’ worlds from 2 to 12 December 2026; Old School RuneScape is excluded.

Bottom line — Jagex says its 2027 roadmap remains in place, including three named content updates.

Sources TweakTown RuneScape RuneScape Wiki +1 more

World · Mon, Oct 19

Ukrainian drones set St Petersburg oil terminal and depot ablaze

Ukraine struck the Petersburg Oil Terminal and Ruchyi oil depot overnight on 18 October, starting fires, while a VKontakte data centre and an Ozon logistics centre were also hit, according to Russian officials and company statements. St Petersburg’s governor reported one person killed and five injured; the attacks came as Kyiv accused Moscow of violating an announced energy ceasefire and said Russian strikes had hit Ukrainian energy facilities 76 times.

Bottom line — The strike hit oil-export infrastructure as both sides continued attacks on energy targets.

Sources France 24 Hurriyet Daily News The Independent +7 more

Space · Mon, Oct 19

Sentinel-3C returns first images and measurements, with five months of testing ahead

Europe’s Copernicus Sentinel-3C has sent back its first images of Italy, the Canadian Arctic and the Caribbean, along with initial measurements of sea-surface height and Greenland’s ice sheet. ESA says the early data show the satellite’s instruments are performing well; commissioning is expected to take another five months before routine operations begin.

Bottom line — Sentinel-3C’s altimeter measurements closely match reference data, and the satellite is due to join sea-level monitoring after commissioning.

Sources Orbinauts EUMETSAT esa +3 more

AI · Mon, Oct 19

US bars DeepSeek from civilian agencies and federal contracts

The US Department of Homeland Security has barred civilian federal agencies from using DeepSeek products and services, and the company from federal contracts, according to Bloomberg. Agencies must remove DeepSeek products already on their systems; Homeland Security Secretary Markwayne Mullin cited potential national-security and data-privacy risks, while CyberScoop reported the order allows exceptions with advance justification.

Bottom line — Agencies seeking an exception must apply 60 days in advance and provide a compelling justification, CyberScoop reports.

Sources CyberScoop www.bloomberg.com

Gaming Hardware · Mon, Oct 19

Linux 7.3 improves gaming on AMD GPUs with limited VRAM

Linus Torvalds has released Linux 7.3, which changes how the kernel manages graphics memory when AMD GPUs run short of VRAM. OMG! Ubuntu reports that the change can move unprotected background data out of VRAM to make room for higher-priority tasks; Valve engineer Natalie Vock led the work.

Bottom line — Linux 7.3 also speeds up ext4 and changes CPU scheduling, while Ubuntu 26.10 ships with the kernel.

Sources OMG! Ubuntu XDA Zeli +3 more

Global Economy · Mon, Oct 19

Vietnam signs EFTA trade pact as tariff pressure disrupts commerce

Vietnam and the European Free Trade Association’s four members—Iceland, Liechtenstein, Norway and Switzerland—signed a free trade agreement in Hanoi on 18 October, cutting or reducing duties on a range of goods. Vietnam’s government says the pact will help diversify trade and deepen integration into global supply chains, as US tariffs on Vietnamese exports remain under negotiation with Washington.

Bottom line — EFTA says bilateral trade with Vietnam was worth €4.8 billion last year; Norway expects more than 98% of its exports to be tariff-free within seven years.

Sources The Manila Times www.nst.com.my EUROPE SAYS +12 more

Gaming Hardware · Mon, Oct 19

Brook launches StarRay controller with native PS5 support and 1,000Hz wired polling

Brook Gaming has launched the StarRay, a wireless controller with native PS5 support and an Xbox-style asymmetrical stick layout. The company says it also works with PC, Steam, iOS and Android, and is available through its Amazon store and official online shop.

Bottom line — Brook says the StarRay’s wired PC connection supports polling rates up to 1,000Hz.

Sources markets.businessinsi… www.benzinga.com BrookJapan +6 more

Europe · Mon, Oct 19

US envoy warns European firms of retaliation over EU Starlink spectrum plan

US ambassador to the EU Andrew Puzder warned that European companies could face severe consequences in the US market if Brussels reserves part of the spectrum for European satellite operators, the Financial Times reported. The European Commission says the proposal would encourage new suppliers and diversify the market while remaining open to non-EU operators; the rules still need to pass through the EU legislative process.

Bottom line — The proposed spectrum rules are not final, but Puzder has tied them to possible US retaliation against European businesses.

Sources FinancialTimes RBC-Ukraine investingLive +5 more

Europe · Mon, Oct 19

France’s 550,000-strong protests over living costs spread across Europe

Separate demonstrations in France, Italy, Belgium and Portugal on 17 October brought people out over living costs, public services, education costs and housing. France saw the largest mobilisation, with the Interior Ministry estimating 550,000 participants; clashes, looting and fires were also reported in several countries, while Spain and Albania have seen protests over housing and government grievances.

Bottom line — France’s Interior Ministry counted 550,000 demonstrators; the protests remain separate, with country-specific demands and responses.

Sources Moneycontrol The Business Standar… TimesNow +8 more

Gaming Hardware · Mon, Oct 19

Samsung will use TSMC’s 3nm process for Nvidia’s custom HBM base dies

Samsung will use TSMC’s 3-nanometre process to make base dies for Nvidia’s next-generation custom high-bandwidth memory, Seoul Economic Daily reported, with Reuters relaying the report. Nvidia has asked Samsung, SK Hynix and Micron to use the same process for base dies and sixth-generation DRAM for the memory dies. The move would be Samsung and TSMC’s first collaboration at the HBM manufacturing stage.

Bottom line — Samsung is accepting Nvidia’s shared manufacturing requirements while keeping open a backup option to make the base dies itself.

Sources The Business Times firstpost Seoul Economic Daily +2 more

TV/Movies · Mon, Oct 19

Curry Barker’s Obsession reaches Netflix on 17 November after grossing €483 million

Netflix will begin streaming Curry Barker’s horror film Obsession in the United States on 17 November, six months after its theatrical release. The film grossed about €483 million ($523 million) worldwide on a reported production budget of €692,000 ($750,000), according to Polygon and CBR.

Bottom line — Obsession arrives on Netflix on 17 November after earning roughly 700 times its reported production budget.

Sources FandomWire MovieWeb Polygon.com +2 more

Europe · Mon, Oct 19

Longyearbyen keeps tap-water ban as thawing permafrost brings metals into its supply

Residents of Longyearbyen, Norway, have been told not to drink tap water after heavy metals entered the town’s main source, Isdammen lake. Researchers quoted by The Guardian link the contamination to thawing permafrost exposing pyrite-rich rock; manganese levels reached 25 times the recommended limit, and later tests found sulphate and nickel above limits.

Bottom line — The ban remains in place while Longyearbyen weighs costly filtration or desalination options, according to mayor Terje Aunevik.

Sources the Guardian United Kingdom www.thedailybreaking… +2 more

Cyber Security · Mon, Oct 19

DHS appointees asked CISA to secretly hack a voting machine

Political appointees at the US Department of Homeland Security asked the Cybersecurity and Infrastructure Security Agency to secretly acquire and hack a voting machine, then report its findings to the White House, ProPublica reports, citing two former officials. CISA staff objected to a direction not to notify the machine’s manufacturer about any flaws; the plan was abandoned after staff said it could not be carried out.

Bottom line — The request was dropped, but ProPublica reports that CISA has also lost about a third of its workforce.

Sources ProPublica verge Political Wire +5 more

World · Mon, Oct 19

Egypt seeks parliamentary approval to support Saudi Arabia against Houthi attacks

Egyptian President Abdel Fattah al-Sisi has asked parliament to authorise military support for Saudi Arabia if the kingdom requests it, as Houthi attacks on Saudi targets intensify. Reuters reports that a vote expected on Sunday was postponed until Monday; Egypt’s presidency said Cairo would provide all necessary and possible support, while also calling for de-escalation.

Bottom line — Parliament’s decision will determine whether Egypt can turn its pledge of support into a military deployment.

Sources www.jpost.com AL-MONITOR: The Midd… www.iranintl.com +7 more

Global Economy · Mon, Oct 19

UK-listed firms issue 65 profit warnings as war and policy uncertainty weigh

UK-listed companies issued 65 profit warnings in the three months to September, up from 59 in the previous quarter and the highest total since late 2024, according to EY-Parthenon. The firm said 54% cited policy change and geopolitical uncertainty, while 38% specifically referred to the Middle East conflict and 35% to rising costs, ahead of the autumn Budget.

Bottom line — Housebuilders have issued 14 warnings so far this year, already exceeding the 10 recorded during the 2008 financial crisis.

Sources CityAM The Guardian The Telegraph +2 more

Games · Mon, Oct 19

Halo Studios reportedly scrapped Project Ekur, a battle royale and extraction shooter

Halo Studios reportedly developed Project Ekur, a multiplayer game combining extraction-shooter and battle-royale mechanics, before abandoning it. YouTuber HiddenXperia’s account, based on anonymous sources, says the project evolved from battle-royale prototype Project Tatanka and was later dropped as the studio shifted to another multiplayer game and moved developers to Halo: Campaign Evolved.

Bottom line — Project Ekur’s reported Flood outbreak was meant to connect the game’s story to an eventual Halo 7.

Sources TweakTown GamesRadar+ 16 Bit World

Global Economy · Mon, Oct 19

Morgan Stanley’s Andrew Sheets says markets are right to cut ECB hike bets

Andrew Sheets, Morgan Stanley’s global head of fixed income research, said markets are right to lower expectations for European Central Bank rate hikes. Speaking on Bloomberg, he pointed to volatility in French bonds and equities as a factor clouding the policy outlook.

Bottom line — Sheets says French market volatility is weighing on expectations for the ECB’s next rate moves.

Sources www.bloomberg.com guavy.com www.binance.com +1 more

Gaming Hardware · Mon, Oct 19

Nvidia says RTX 5090 production continues, but supply remains constrained

Nvidia said the GeForce RTX 5090 has not been discontinued and that it will continue shipping the card, according to Shanghai Metals Market and Lowyat.NET. Senior vice-president Jeff Fisher acknowledged constrained supply; neither outlet reported a restock timetable or assurance that buyers can find the card at its recommended price.

Bottom line — Nvidia has confirmed continued shipments, but no source gives a date or volume for improved RTX 5090 availability.

Sources Lowyat.NET PC Mag Middle East PC Mag Middle East +7 more

Global Economy · Mon, Oct 19

Kenya seeks new World Bank and AfDB funds for its budget through June 2027

Kenya is negotiating fresh financing with the World Bank and African Development Bank to support its budget, with funds expected before the financial year ends in June 2027, central bank governor Kamau Thugge told Reuters. No new agreement or disbursement has been announced; the talks come as Kenya manages debt repayments and seeks to limit domestic borrowing.

Bottom line — Kenya’s 2026/27 budget targets €1.7bn (KES247.2bn) in net external financing, but that borrowing is not yet secured.

Sources Intellinews

Apple · Mon, Oct 19

Apple’s iPhone Duo has a 4,883 mAh battery, EU label confirms

Apple’s EU energy label lists the iPhone Duo’s battery capacity at 4,883 mAh, apparently confirming a previous leak of two cells totalling that amount. MacRumors reports the foldable is eSIM-only, so the capacity applies across its versions; iFixit measured 4,288 mAh in the iPhone 18 Pro and 5,567 mAh in the Pro Max.

Bottom line — At 4,883 mAh, the iPhone Duo sits between the iPhone 18 Pro and Pro Max.

Sources MacRumors www.kucoin.com Industry Wired +2 more

Cyber Security · Mon, Oct 19

Broadcom Wi-Fi flaw leaves 1.56 million Belgian routers exposed

Security researcher Quentin Kaiser disclosed a Broadcom Wi-Fi vulnerability that can let an attacker within wireless range execute code on affected routers without the network password. He demonstrated the exploit on gateways used by Proximus and Orange Belgium; Kaiser estimates about 1.56 million Belgian routers may be affected, and said the devices he identified remained unpatched on 15 October.

Bottom line — Kaiser says the flaw dates to 2010; older eCos-based routers may have no route to a fix.

Sources QTNKSR Rescana theregister +3 more

AI · Mon, Oct 19

Anthropic gives six METR evaluators access to internal systems, with publication rights

Anthropic has embedded six METR evaluators in its offices, giving them company hardware and access to internal systems comparable to its own risk teams. METR can publish its findings without Anthropic’s approval, although the company can require redactions for customer data, privileged information and model architecture details, according to Ars Technica and WebProNews.

Bottom line — METR can publish its assessment without Anthropic’s veto, but the company retains limited redaction rights.

Sources Ars Technica WebProNews

World · Mon, Oct 19

Qatar warns Iran war’s energy shock has yet to peak, rejects Hormuz fees

Qatar’s deputy prime minister, Sheikh Saoud bin Abdulrahman Al Thani, warned at a Doha security forum that the Iran war’s effects on energy supplies, trade and economic growth could worsen in the coming months. Al Jazeera reports that he opposed transit fees in the Strait of Hormuz, while saying Qatar remains in contact with Tehran and is pursuing mediation alongside stronger defence preparations.

Bottom line — Repairs to Qatar’s damaged Ras Laffan facilities are expected to take several years, Al Jazeera reports.

Sources Al Jazeera Apa.az Foreign Affairs Foru… +8 more

Science · Mon, Oct 19

A 75,000-year-old Neanderthal bears a likely fatal wooden-spear wound

A shoulder blade from Shanidar Cave in Iraqi Kurdistan has a 15-millimetre hole that researchers at the University of Cambridge say is consistent with a wooden spear thrust through the chest. They consider interpersonal violence the likeliest explanation, though the evidence cannot establish why it happened; earlier facial injuries suggest Shanidar A survived for at least a year with help from others.

Bottom line — Shanidar A’s remains place evidence of lethal violence alongside signs of care within a Neanderthal group.

Sources ynetnews Lee National Newsroo… RayHaber | RaillyNew… +1 more

AI · Mon, Oct 19

Anthropic proposes US AI bill limiting intervention to 50 injuries or €920 million in damage

Anthropic has circulated a draft bill to US lawmakers that would let the government block an advanced AI model only if it poses an imminent risk of killing or seriously injuring more than 50 people, or causing over €920 million (US$1 billion) in damage. According to POLITICO, the risk would have to involve a biological weapon, a model escaping its developer’s controls or a cyberattack; the draft would also require independent evaluations and give the Commerce Department sole authority to seek a halt from a judge.

Bottom line — The draft would set a federal intervention threshold while overriding some state AI rules; Congress has not passed it.

Sources Mashable WION apokalypsnu.com +7 more

Science · Mon, Oct 19

Researchers predict a fractional Fermi sea beyond standard quantum theory

A team led by the University of Innsbruck’s Nägerl group and theorist Alvise Bastianello predicts that cycling ultracold caesium atoms between strong attraction and repulsion can produce a highly excited but ordered state. The researchers call it a fractional Fermi sea; its correlations differ from those predicted by Tomonaga–Luttinger liquid theory. The study is theoretical, while a companion paper on experimental realization is under review.

Bottom line — The proposed state’s Friedel oscillations and unusual correlation patterns distinguish it from the established one-dimensional model.

Sources uniinnsbruck arXiv.org ScienceDaily +3 more

Health · Mon, Oct 19

Ebola outbreak reaches Congo’s eighth province, with two cases confirmed

Congo’s health authorities confirmed the outbreak has reached North Ubangi, on the border with the Central African Republic, bringing the total to eight provinces. The two confirmed cases were men in their 20s in Wapinda; one died, according to the Health Ministry.

Bottom line — The outbreak has caused more than 4,500 deaths in Congo, according to the latest official figures cited by The Independent.

Sources The Independent Anadolu Ajansı Reuters

TV/Movies · Mon, Oct 19

Netflix removes film chief Dan Lin amid cuts affecting about 1,000 staff

Netflix has dismissed film chief Dan Lin, who joined the streamer in 2024, as it reshapes its content leadership. The move follows the departure of chief content officer Bela Bajaria and layoffs affecting roughly 1,000 employees; Peter Rice, Bajaria’s successor, is expected to oversee the search for Lin’s replacement, according to The Hollywood Reporter.

Bottom line — Peter Rice now faces the task of choosing Netflix’s next film chief.

Sources Variety en.wikipedia.org The Hollywood Report… +4 more

Space · Mon, Oct 19

Hanwha begins assembly of reusable rocket test vehicle ahead of 2028 flight

Hanwha Aerospace has begun final assembly of a reusable rocket technology demonstrator in a project led by the Korea Aerospace Research Institute, with Vitzro Nextech and Hanyang ENG also participating. The company aims to verify vertical take-off, landing and control technologies by 2028, as groundwork for reusing the first stage of South Korea’s next-generation launch vehicle, planned for the mid-2030s.

Bottom line — The 2028 test is intended to support first-stage reuse on South Korea’s next-generation rocket in the mid-2030s.

Sources koreajoongangdaily

Technology · Mon, Oct 19

Amazon’s Bee wearables turn conversations into notes, reminders and shopping suggestions

Amazon has introduced two Bee devices that listen to conversations and use AI to create summaries, reminders and suggested actions: the wrist-worn Frontier, priced at €69 (US$74.99), and the phone-attached Eclipse, from €92 (US$99.99). Amazon says audio is processed and deleted, and that users control their data; linking Bee to apps and Amazon shopping features requires a Pro subscription at €11 (US$11.99) a month.

Bottom line — Bee Pro connects conversation-derived tasks and shopping suggestions to Amazon’s services for €11 (US$11.99) a month.

Sources PCMag Middle East Yahoo Tech CBS News +1 more

Cyber Security · Mon, Oct 19

Progress patches MOVEit Transfer SQL flaw in Custom Reports

Bottom line — MOVEit installations before 2025.1.6, and 2026 releases before 2026.0.4, need the patch.

Sources DEV Community app.opencve.io Vulmon +2 more

TV/Movies · Mon, Oct 19

Peter Jackson says Tintin 2 will be his next film

Peter Jackson says the screenplay for the sequel to Steven Spielberg’s 2011 film The Adventures of Tintin is complete, and that it will be the next film he directs. He announced the plan at the Sitges Film Festival in Catalonia; the sequel has no release date, and Jackson has not confirmed which Tintin stories it will adapt.

Bottom line — After 15 years, Tintin 2 has a completed script and a director’s stated next-film priority, but no release date.

Sources Movieweb Dark Horizons Flickering Myth +2 more

Cyber Security · Mon, Oct 19

PwnEscape lets Linux guests expose host memory through a kernel networking flaw

Researchers at pwn.ai say CVE-2026-99999 lets guest-provided checksum metadata overwrite an IPv4 header that the Linux host has already checked, leading to a repeatable 32-byte host-memory disclosure. Pwn.ai demonstrated host code execution on its own KVM setup, while SevyDevy reports a production memory leak in Vercel sandboxes but no production host takeover. Linux merged a fix that checks checksum positions before completion in five IPv4 processing paths.

Bottom line — The upstream fix is merged; Linux hosts running untrusted guests need a patched kernel to close the 32-byte disclosure path.

Sources PWN.AI DEV Community www.verisq.ai +1 more

Football · Mon, Oct 19

Markus Krösche leaves Eintracht Frankfurt’s sporting role with immediate effect

Eintracht Frankfurt has granted board member for sport Markus Krösche’s request to leave his role immediately, ending his five-year spell at the club. The club said his contract, which runs until 30 June 2028, remains in force in amended form; it also appointed executive board spokesman Axel Hellmann chairman of the executive board, with a contract until 30 June 2031.

Bottom line — Krösche’s five-year tenure included Frankfurt’s 2022 Europa League title.

Sources Goal.com bundesliga.com - the…

Global Economy · Mon, Oct 19

ECB adds two indicators to track euro area bank vulnerabilities between stress tests

The European Central Bank has developed quarterly indicators to track euro area banks’ potential capital losses and pressure on current earnings between regular stress tests, according to Cyprus Mail. The ECB paper says the measures can help supervisors assess vulnerabilities and decide whether to maintain, strengthen or release capital buffers.

Bottom line — The ECB paper says the Stress Vulnerability Index remained slightly elevated even as the Profitability Vulnerability Index improved.

Sources cyprus-mail.com UA.NEWS repec_org +1 more

Football · Mon, Oct 19

Nuno Mendes will miss PSG’s Champions League clash with Barcelona

Paris Saint-Germain confirmed that left-back Nuno Mendes will be out for several weeks with a muscle injury to his left thigh, sustained against Strasbourg on Saturday. He will miss Tuesday’s Champions League match against Barcelona, leaving Luis Enrique to choose a replacement as Lamine Yamal’s side visit the Parc des Princes.

Bottom line — Mendes’s absence removes PSG’s usual answer to Lamine Yamal ahead of a match between two sides on six points.

Sources Goal.com Italpress Reuters +3 more

Apple · Mon, Oct 19

Apple releases Xcode 27.1 with Swift 6.4 and iPhone Duo support

Apple released Xcode 27.1 on 15 October, adding Swift 6.4 and SDKs including iOS 27.1. Apple says developers can now submit apps built with the release to the App Store and TestFlight, but its iPhone Duo simulator cannot run most app extensions and has other testing limits.

Bottom line — Xcode 27.1 enables iOS 27.1 submissions, though Apple’s iPhone Duo simulator still leaves some tests for physical devices.

Sources The Mac Observer developer.apple.com www.iphoneduoultra.c…