Google reports UK math-tutoring and Italian classroom studies of Gemini, with gains on quizzes but no measurable STAR test improvement in the 10-week trial.
The Latest
Zero Click, Silent, Remote Android DoS
A researcher reports a zero-click Android flaw in WAP Push handling that crashed telephony and dropped calls. Google says it was patched in October 2026.
CVE-2026-76418: Cisco Secure Firewall ASA Software And Cisco Secure FTD Software Unchecked Return Value To NULL Pointer Dereference Vulnerability Actively Exploited (CISA KEV)
CISA lists CVE-2026-76418 as actively exploited in Cisco Secure Firewall ASA and FTD software; the supplied advisory details are incomplete.
CVE-2026-97229: GitLab Community Edition And Enterprise Edition Integer Overflow Or Wraparound Vulnerability Actively Exploited (CISA KEV)
CISA lists a GitLab CE and EE integer overflow vulnerability as actively exploited. The supplied alert leaves key technical and remediation details unspecified.
Cisco Firewall Security Check: Could Attackers Switch Off Your VPN?
Cisco says attackers are exploiting CVE-2026-76418 to force some Secure Firewall devices to reload. The company urges customers to upgrade.
Why A Telegram Call May Be Part Of An Android Attack
NebuSec says answering a Telegram call could enable an Android attack when chained with two other bugs. Telegram fixed the call flaw in version 12.10.4.
AI Security News: What Firewall Fixes And Stolen Tokens Mean For You
This week’s security reports cover Fortinet fixes, Android banking malware, stolen work tokens and active software exploits.
They Want The Keys: Understanding Cisco SD-WAN Malware At The Network Edge
Cisco Talos says KeyDrift malware targeted SD-WAN control systems to collect encryption keys; separate reporting links exploitation to Volt Typhoon.
XREAL AURA: What Gemini Can See And The Privacy Questions To Ask
Google and XREAL launched AURA on Oct. 28, putting Gemini on see-through Android XR glasses. View sharing, camera data and workplace rules remain key questions.
Anthropic’s AI Attack Chain Report: What We Can Verify Today
Anthropic says an unreleased Claude model built five exploit chains. Vendor records confirm some fixes; human input and Android details remain unclear.