Wednesday, 4 November 2026Global tech news & guides — what changed, and what it means for you.

Sony So-net Breach: 2.58 Million Records Exposed, What to Do

Original editorial illustration of a dark server room at night: one network cabinet stands open with warm amber light spilling out and a stream of small glowing data fragments drifting from it toward a neighbouring cabinet

In brief Sony says hackers accessed its So-net member database on October 19, exposing 2,585,481 records — plus email passwords for 54,401 addresses. The total splits into 2,141,986 So-net membership records and 443,495 plala (S Course) records, including former customers who cancelled from March 2026 onward. Membership passwords were not leaked and no credit-card data … Read more

Cloudflare’s AI Cache Leak: How 155 Responses Got Other Users’ Data

Original editorial illustration of a dark server hall at night: two adjacent glowing memory-grid panels, warm amber light from the left panel spilling across the boundary into its neighbour, and a long ribbon of amber light stretching past the edge of its own panel

In brief Cloudflare says a sizing mismatch and an SGLang bug let its GLM-5.3 model return other customers’ data in 155 responses, all to very long prompts. The leak ran from August 27 to September 9, 2026, and only affected prompts longer than 681,280 tokens — the size of the prefill KV cache pool, against … Read more

CrowdStrike: AI Agents Ran Real Intrusions in Four Campaigns

Original editorial illustration of a dark operations room at night, four glowing agent pathways converging on server racks and a hospital building silhouette, deep blue-grey palette with amber alert accents

In brief CrowdStrike found four actors using AI agents to run real intrusions: 15+ Argentine hospitals hit, 726 databases reached, one takeover in about 20 minutes. The four campaigns ran between May and August 2026 and were described in CrowdStrike’s October 21, 2026 report. All four actors left their agent frameworks exposed in open directories, … Read more

Microsoft Offers Buyouts to 60,000 Staff: Should You Take One?

Original editorial illustration of a wide modern office floor at dusk, rows of desks with a minority of chairs pushed back and monitors dark while most remain lit, a large window showing a data center glowing on the horizon, muted blue-grey palette with one warm amber accent

In brief Microsoft offered voluntary exit packages to about 60,000 staff in the US, Canada, UK and India. Who is eligible, what the terms are, and how to decide. The offer covers employees at vice president level and below (internal level 70 and below) on select teams. Data center, sales, marketing, and security staff are … Read more

VPN Protocols Compared: WireGuard vs OpenVPN vs Lightway vs IKEv2

Original editorial illustration of four parallel glowing tunnels cut through a rock face: teal and straight, amber and winding with a checkpoint gate, blue bending between two signal towers, violet with a frosted half-closed inspection window, a small traveler standing at the fork where the tunnels split

In brief WireGuard is fastest for most people, OpenVPN TCP gets through strict networks, and IKEv2 holds a phone connection across networks. How to pick by situation. WireGuard’s one real caveat is not speed or security but identity: the protocol has no built-in way to hand out tunnel addresses dynamically, so a naive setup ties … Read more

VPN Kill Switch Explained: What It Does and How to Test It

Original editorial illustration of a laptop on a desk at night, its screen showing a glowing tunnel of light that suddenly breaks mid-air, while a firewall-like barrier of translucent panels slams shut across the gap, stopping small light-particles from escaping past it, deep blue-grey palette with one muted amber desk-lamp accent

In brief A VPN kill switch cuts your internet the moment your VPN drops, so your real IP never leaks. System-wide vs app-level, and the 2-minute test that proves yours works. A kill switch is not a feature that makes your VPN faster or stronger. It is a safety net for the moment the VPN … Read more

A Hijacked Analytics Script Skimmed Brazilian Shoppers’ Cards

Original editorial illustration of a dark online checkout scene at night: a laptop showing a shopping cart page, its screen glow reflected on a desk, while a thin thread of light runs from the page to a shadowed hand collecting small glowing card shapes, deep blue-grey palette with one muted amber accent from a desk lamp

In brief A Magecart group hid a card skimmer in Convertr’s analytics script, stealing card numbers and CPFs from Brazilian checkouts since October 24. Sansec, the security firm that found it, says a notorious Brazilian Magecart group active since 2024 planted the skimmer in Convertr’s analytics script file. From October 24, checkouts on affected stores … Read more

GMO Internet Breach: Hackers Posted Customer Data After the Company Refused a ¥8 Billion Ransom

Original editorial illustration of a dark server room at night where one row of trading-terminal screens glows with candlestick charts and a single terminal's screen has gone dark while its keyboard sits untouched, deep blue-grey palette with one muted amber accent from a desk lamp

In brief GMO Internet says attackers published data allegedly linked to Onamae cloud-desktop customers after it refused a ¥8 billion ransom demand. What traders should do. GMO Internet confirmed on October 27, 2026 that people believed to be the attackers had published information they claim relates to the company and its customers, hours after the … Read more

Quest Diagnostics Breach: Patient Records Accessed, and Almost Nothing Quantified

Original editorial illustration of a quiet clinical laboratory corridor at night where glowing test-tube racks stand on a bench and one rack's labels blur into unreadable smudges behind a frosted-glass panel, cool blue-grey palette with a muted amber accent

In brief Quest Diagnostics says an intruder accessed certain patient records via its Quanum lab system. No patient count, no data types, no entry point — what is confirmed. Quest Diagnostics, one of the largest clinical laboratory companies in the United States, disclosed on October 22, 2026 that it learned on October 21 of unauthorized … Read more

Microsoft’s Emergency .NET Patch: The Same Brotli Flaw, a Different Ecosystem

Original editorial illustration of a deep-blue server rack with a glowing compressed-data stream splitting at a decompression valve into a clean teal path and a corrupted amber path, on a dark background

In brief Microsoft’s out-of-band .NET update fixes the Brotli memory flaw behind Node2Shell — but only apps that decompress untrusted data are exposed. Check your build. The out-of-band release of October 25, 2026 covers .NET 8, 9, and 10, plus .NET 11 Release Candidate 3. The headline fix is CVE-2026-111497, a buffer overflow in .NET’s … Read more