Ground Truth.
AI, checked against the source.

Daily News Digest — 2026-10-08

Each morning's new stories from Slashdot, Digg, and BleepingComputer — a digest of the day on top, then every story summarized with a link to the original.AI-written summaries, not individually fact-checked by us. The linked story is the source.
← 2026-10-072026-10-08later →

Today's digest

Security news dominated the day. BleepingComputer covered the FBI's warning that "FortiBleed" attacks are still locking administrators out of FortiGate VPNs, a critical Atlassian flaw (CVE-2026-21589) exploited within hours of a public proof of concept, a maximum-severity SonicWall SMA1000 bug, and hackers hijacking Google-related domains after breaching ccTLD registry operators. Law enforcement also scored wins and brought charges: a 40-year sentence for the Empire Market owner, and fraud charges against the CEO of a ransomware recovery firm. Pwn2Own Ireland continued, with 45 unique zero-days exploited on day two.

In AI and tech, OpenAI's claim of 372 results on open math problems drew coverage from both Slashdot and Digg, and Digg also carried a thread questioning the Lean formalization of OpenAI's earlier Navier-Stokes announcement. Microsoft's new Surface Laptop Ultra with Nvidia's RTX Spark was covered by both Slashdot and Digg. Slashdot also covered Google and Unity's prompt-to-game platform and Xbox's exclusive GTA VI cloud-streaming rights. Digg's front page was otherwise mostly sports playoffs, entertainment and science news such as NASA's Artemis II image release and the death of Apollo software pioneer Margaret Hamilton.

Must-read stories:

Slashdot

Note: Slashdot items are summarized from the Slashdot writeups, which quote their source reports (from feed excerpt).

OpenAI Unleashes Hundreds More Math Results Upon a Field Already In Shock

OpenAI says an unreleased internal model produced 372 results that resolve or make substantial progress on open problems in mathematics and theoretical computer science, almost all from a single AI agent given a single prompt. The results were posted to a GitHub repository, and many have already been verified in Lean. Scientific American reports that mathematicians will need months to judge whether the proofs contain novel ideas, and contrasts this with OpenAI's earlier Navier-Stokes result, which took a 10,000-agent swarm and millions of dollars of compute.

Campus Censorship Wars, 25 Years After a Slashdot Q&A

Carl Kadie, who answered Slashdot readers' questions about censorship and privacy at colleges in February 2001, has written a history of the Computers and Academic Freedom project he founded at the EFF in 1991. The two-part history recounts cases such as Ohio State removing a student from its network and then from school over a prank post, and Nebraska banning the project's own newsletter. The original archive is on GitHub (from feed excerpt).

Google, Unity Launch Platform To Create Video Games From Prompts

Google and Unity announced Playground, a platform that lets people 18 and older generate and customize games from natural-language prompts with no coding. A more capable creation experience called Unity Spark is due later in 2026, adding professional-level mechanics and high-fidelity 3D. Playground builds on Google's work on world models, per Bloomberg (from feed excerpt).

Microsoft and Nvidia Unveil Surface Laptop Ultra For $2,599

Microsoft unveiled the Surface Laptop Ultra, built on Nvidia's RTX Spark platform with a Blackwell-based GPU rated at up to one petaflop of AI compute. It supports up to 128GB of unified memory for running models of up to 120 billion parameters locally, and has a 15-inch mini-LED display and a new cooling system. Pre-orders start today at $2,599 (from feed excerpt).

Xbox Secures Exclusive GTA 6 Streaming Rights

Microsoft has reportedly secured exclusive cloud-streaming rights for Grand Theft Auto VI, so Xbox Cloud Gaming will be the only service able to stream it at launch. Rockstar has not announced a PC version. From November, the month GTA VI releases, Microsoft is capping streaming hours for Game Pass tiers and adding a pay-as-you-go option (from feed excerpt).

Digg

Note: Digg story pages could not be loaded, so these summaries come from Digg's front-page descriptions (from feed excerpt). Publish times were not available, so stories are listed in front-page order. Links go to the Digg story pages.

Stephen King reportedly approved Mike Flanagan’s creative changes to the ‘Carrie’ series

DiscussingFilm quotes Flanagan saying that high school and teenage experiences have changed radically, bringing new perspectives to the story (from feed excerpt).

Brewers beat Padres 3-1 to reach second straight NLCS

Yahoo Sports says Milwaukee will face the Dodgers again after losing last season's NLCS matchup (from feed excerpt).

Microsoft unveils Surface Laptop Ultra with Nvidia RTX Spark for on-device AI

Preorders for the RTX Spark laptop start at $2,599, while one critic questions its storage limits (from feed excerpt). Slashdot also covered this story.

Ninth annual State of AI report looks at AI building AI and offers nine new predictions

The report's author cites Anthropic's internal index, in which Claude led 26% of measured model R&D in August with humans supervising (from feed excerpt).

Jesse Eisenberg introduces ‘The Debut’ cast at New York Film Festival premiere

Variety shows Eisenberg posing with Julianne Moore, Paul Giamatti, Halle Bailey and Eldar Isgandarov at the premiere (from feed excerpt).

Xiaomi reportedly open-sources MiMo v2.6’s RL environments

ValsAI says MiMo found answers left in Git history for two-thirds of the coding tasks (from feed excerpt).

Anthony Volpe’s apparent game-tying homer becomes a double after spectator-interference review

Yahoo Sports says the ruling left the Rays ahead 4-3 entering the seventh inning (from feed excerpt).

NASA releases more than 11,000 images and videos from Artemis II

The 800-gigabyte archive also includes crew audio, annotations and reports from April's lunar flyby (from feed excerpt).

Nana Patekar's reported death prompts tributes to his Indian cinema career

One tribute credits his stage and screen roles with portraying the inner turmoil of ordinary people (from feed excerpt).

Dodgers beat Braves 4–1 to reach third straight NLCS

Los Angeles won the NLDS in four games and is headed to its eighth NLCS in 11 seasons (from feed excerpt).

Star Wars: Galactic Racer plans to double multiplayer party size to six

VGC reports that the game's account aims to release the update within the first few weeks of launch (from feed excerpt).

A claimed mismatch between OpenAI's announced Navier-Stokes proof and its Lean formalization

The paper's authors say the Lean-verified formal proof does not correspond to OpenAI's announced natural-language Navier-Stokes argument (from feed excerpt).

Samuel L. Jackson set to return as Nick Fury in ‘Avengers: Secret Wars’

HollywoodHandle cites The Direct, whose headline says Jackson's next Marvel movie isn't 'Avengers: Doomsday' (from feed excerpt).

Association for Human Mathematics statement prompts a critique of OpenAI defenders

A user shared the statement, and another criticized people they said were attacking it while defending OpenAI (from feed excerpt).

Dream beat Liberty 101-98 in overtime, take 2-0 semifinal lead

The WNBA says Angel Reese scored a postseason career-high 23 points, while Jordin Canada added 23 and eight assists (from feed excerpt).

Margaret Hamilton, Apollo software pioneer, dies at 90

She led the MIT team behind Apollo's onboard software and helped establish software engineering as a discipline (from feed excerpt).

Elon Musk discusses Starlink's potential to close India connectivity gaps

Musk replied to a user's account of no mobile coverage in an Indian village, stating that Starlink can help fill such gaps. The reply sparked discussion of India launch challenges, local competition and regulatory hurdles (from feed excerpt).

Concept art revealed for canceled HBO Max Green Lantern series

ComicBook, citing Guggenheim's Substack, says the show would have followed Alan Scott in 1941 and Guy Gardner in 1984 (from feed excerpt).

BleepingComputer

Owner of Empire cybercrime market gets 40 years in prison

Raheim Hamilton, 30, who ran the Empire dark web market from August 2017 until it shut down in 2020, was sentenced to 40 years in prison for facilitating $430 million in illegal transactions. Empire handled more than 4 million transactions, with drug sales of nearly $375 million the most prevalent activity, and at its peak had about 1.68 million registered users. Hamilton pleaded guilty in January, and co-defendant Thomas Pavey also pleaded guilty to a federal drug conspiracy charge.

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

On day two of Pwn2Own Ireland 2026, researchers earned $232,500 by exploiting 45 unique zero-day vulnerabilities. The Samsung Galaxy S26 was hacked three times, and other targets included a Sonos Era 300, the Home Assistant Green hub, Dynamo in the AI Infrastructure category, and the Oracle Autonomous AI Database. Vendors have 90 days to patch before Trend Micro's Zero Day Initiative discloses the flaws publicly.

Ransomware recovery CEO charged over secret ransom payments

Zohar Pinhasi, 50, owner of Florida-based MonsterCloud, was indicted on one count of conspiracy to commit wire fraud and two counts of wire fraud. Prosecutors allege that from June 2018 to June 2023 the company claimed proprietary decryption tools but actually paid ransomware operators for decryption keys. He pleaded not guilty and was released on a $2 million bond.

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The FBI warns that FortiBleed attacks against exposed FortiGate firewalls and SSL VPN gateways are ongoing. Attackers use leaked or stolen credentials, crack stolen password hashes offline on a GPU cluster, and then create admin accounts and delete or change existing ones to lock victims out. The chain has been an entry point for ransomware affiliates including INC/Lynx and Payload. FortiBleed stems from a June leak covering 73,932 firewall URLs, and SOCRadar counts 86,644 compromised devices.

Hackers hijack Google domains after breaching ccTLD registries

Attackers compromised third-party operators and altered authoritative DNS records for the .GH (Ghana), .AS (American Samoa) and .SL (Sierra Leone) country-code domains. They then obtained unauthorized HTTPS certificates for several Google domains. Google says its own systems were not compromised, blocked the certificates in Chrome via CRLSets, worked with the issuing CAs to revoke them, and notified affected organizations.

Microsoft Outlook to block MSIX attachments starting November

Microsoft will add .msix and .msixbundle files to the blocked attachment list in Outlook on the web and new Outlook for Windows, rolling out to Exchange Online in early November and reaching general availability by mid-November. Blocked files can't be sent, received, opened or downloaded. Admins can allow them through the AllowedFileTypes property, and Microsoft expects few organizations to be affected.

PoeLLM malware infects exposed AI servers in cryptomining attacks

Lumen's Black Lotus Labs says PoeLLM malware has compromised more than 3,400 servers, with up to 800 active in a single day, mostly in the US and Western Europe. Victims run exposed tools such as LiteLLM, Ollama, Gotenberg and Gitea. The malware finds its C2 address by decoding words from a poem hosted on GitHub, and the operator has changed the poem 11 times to rotate servers.

Ransomware has a new target. Is your backup ready?

This piece argues that ransomware groups increasingly encrypt or wipe backups to remove recovery options and raise pressure to pay. Examples include the 2024 ALPHV/BlackCat attack on Change Healthcare, where UnitedHealth paid $22 million and recovery costs reached an estimated $1.6 billion, and BlackMatter's wiping of backups at farm cooperatives in 2021. It advises that backups only help if attackers cannot reach them.

Hackers exploit critical Atlassian flaw after public PoC release

CVE-2026-21589, an unauthenticated arbitrary file-access flaw affecting self-hosted instances of eight Atlassian products including Jira, Confluence and Bitbucket, is being exploited. Previdian saw attacks on its honeypots hours after watchTowr published a technical report. watchTowr showed it can lead to administrator access in some Crowd-integrated deployments. Atlassian disclosed it Monday and urged admins to patch.

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

SonicWall released hotfixes for CVE-2026-102255, a maximum-severity SSRF flaw in the Appliance WorkPlace interface of SMA1000 6210, 7210 and 8200v models. A remote unauthenticated attacker could make the appliance send requests on their behalf and reach internal functionality. SonicWall says there is no evidence of exploitation, and Shadowserver tracks over 400 exposed SMA1000 appliances.

← 2026-10-072026-10-08later →