Attackers chain PHP and Linux flaws to take root control of Palo Alto firewalls

Singapore's Cyber Security Agency issued an alert on 3 November 2026 warning that attackers are actively exploiting PHP vulnerabilities dubbed PHP2Shell, CVE-2026-109618 and CVE-2026-109619. The flaws are being used against internet-exposed management interfaces of Palo Alto Networks firewalls running affected PAN-OS versions. Because the exploitation requires no authentication, a remote attacker can execute arbitrary code and gain initial access without credentials. Reports say attackers combined this with a Linux kernel privilege-escalation flaw, CVE-2026-46300, to obtain root privileges and move deeper into networks. The alert notes that other vendors' products are also affected and that the list of impacted products is not exhaustive.

J&K High Court rejects plea by two IAS officers in gun licence scam case

The Jammu and Kashmir High Court has dismissed a petition filed by two IAS officers who were seeking relief in connection with an alleged gun licence scam. The court declined to grant the requested reprieve to the officers. The case concerns irregularities surrounding the issuance of arms licences in the Union Territory. The ruling leaves the officers to face the ongoing proceedings related to the scam.

Why Beginner Coders Keep Blaming Everything Except Their Own Typos

A student learning to code keeps a private list of the things they have blamed for bugs, from slow laptops and home internet routers to programming languages themselves. Nearly every case turned out to be a simple mistake, such as a misspelled variable, a missing semicolon, a closing tag left out, or a copied smart quote. The writer notes that the error messages were usually accurate, but beginners often read them too late or too quickly. They conclude that the blaming stage has cost them more learning time than any difficult topic. The piece is written as a humorous, self-reflective account aimed at other beginners.

ET Wealth | Wedding budget: Know the hidden costs

Why rising bond yields are hurting stock valuations

Group health plans: Watch out for claim deductions

These NRIs can now complete online KYC from overseas

Don't chase market momentum, says Sundaram AMC MD

Children's activities: How much should parents spend?

Family business: How to split without losing wealth

The financial cost of parents’ US green card

Alpha factor outperforms as other factor indices lag behind

The alpha factor has been leading performance across the factor indices. Other factor indices have faltered in comparison, lagging the alpha segment. The divergence highlights uneven returns across investment factor strategies. No further details from the original article text were provided to expand on the specific drivers or timeframe.

Retirement planning is becoming earlier and more structured among younger savers

Retirement planning is increasingly starting at younger ages, according to the trend highlighted by the Economic Times. Younger investors are approaching it in a more systematic way than previous generations did. The article's full text was not included in the submission, so the specific figures, sources, and examples it cites cannot be reported here. This summary is therefore limited to the trend indicated by the original headline.

Retirees, gear up for inflation beyond CPI

Can insurers reject claims after five years?

Ops AI Agents Risk Following Instructions Planted by Attackers in Logs and PRs

Agents that triage incidents or review code read text that attackers can write, including application logs, alert labels, pull request descriptions, wiki runbooks, and third-party tool descriptions. Because the model cannot reliably distinguish data from instructions, a crafted log line or PR claim can steer an agent's conclusions, such as reporting an incident as resolved. The article cites a February 2026 incident in which the Context7 MCP documentation server served attacker-registered instructions to connected coding agents, and an October 2025 joint evaluation in which most of twelve prompt-injection defenses failed against adaptive attackers. The author argues that prompt-only hardening provides little protection, since system prompts cannot reliably override injected content. Developers should therefore treat every externally writable input as a potential attack surface rather than trusted ground truth.

IA et découverte de peptides : un laboratoire moléculaire en réalité virtuelle

Google DeepMind a présenté Antigravity, une plateforme d'IA capable de réduire des mois de criblage expérimental à quelques heures de calcul. Pour la recherche de peptides antimicrobiens, elle explore rapidement un vaste espace chimique et fait remonter des candidats prometteurs. Les modèles prédisent cependant mal la géométrie 3D, les interactions stabilisatrices ou l'effet de mutations, ce qui rend l'étape suivante cruciale. C'est là qu'intervient NexoPeek, une application de réalité virtuelle sur Meta Quest développée par Seven Sportz, qui permet de manipuler des structures moléculaires à échelle humaine. L'outil propose à la fois des visites pédagogiques s'appuyant sur des structures de la Protein Data Bank et un volet analytique destiné à la recherche.

Solo Sailor Relies on AI Systems for Navigation and Monitoring at Sea

A solo sailor aboard a 26-foot sailboat is using a set of AI-driven onboard systems to assist with his voyage. The operating system d3kOS monitors navigation, engine health, and sensor data, providing contextual answers to the captain's questions. A companion system, d3kTV, streams weather updates and charts while issuing alerts when boat telemetry changes. A third system, d3kAPS, reportedly uses WiFi signal distortion to detect nearby obstacles before they are visible to the captain. The captain remains in control of steering and decisions, with the article presenting the systems as a way to make solo sailing safer and more informed.

Airlines expand premium cabins as demand for business-class seats rises

Carriers are increasingly shifting capacity toward premium travel in response to strong demand for business-class seating. Airlines are finding that higher-paying passengers are willing to spend more for upgraded cabins, prompting fleet and seating adjustments. The move reflects a broader strategy to boost revenue per passenger rather than relying solely on volume. Industry observers note the trend is reshaping how airlines allocate space on their aircraft.

EU Says TikTok's For You Feed Breaches Content Rules; Researchers Explore Attention Training

The European Union has accused TikTok's For You page of breaching its content rules, arguing the algorithm should change to protect users' mental health. The article contends that endlessly optimized feeds capture attention well but do little to train it, and asks what a deliberately designed attention-training system might look like. It highlights amblyopia, where mismatched signals from the two eyes impair depth perception and binocular coordination, as a case where such training matters. The author describes Amblyotube, a VR app by Seven Sports for Meta Quest that shows different visual content to each eye while users watch videos, with the goal of making eye coordination exercises more engaging than traditional patches or glasses.