Food shortages in Yemen’s Taiz as Houthi siege hits supplies
Yemeni government forces are encircled by the Houthis in Taiz, where blockades on road routes have worsened shortages.
Latest News Archive - Page 148
Stable Channel Update for Desktop
The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. This update includes 37 security fixes. Please see the Chrome Security Page for more information. [TBD][ 567736859 ] Critical CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-09-30 [N/A][ 568437149 ] Critical CVE-2026-110149: Use after free in Browser. Reported by Google on 2026-10-01 [N/A][ 568719364 ] Critical CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568826881 ] Critical CVE-2026-110161: Use after free in Network. Reported by Google on 2026-10-02 [N/A][ 568827293 ] Critical CVE-2026-110165: Use after free in Core. Reported by Google on 2026-10-02 [N/A][ 570050934 ] Critical CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570638834 ] Critical CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge on 2026-10-06 [$1,000][ 540499008 ] High CVE-2026-110162: Use after free in Desktop. Reported by Findingz on 2026-07-29 [N/A][ 496308073 ] High CVE-2026-110170: Use after free in Bindings. Reported by Google on 2026-03-25 [N/A][ 552510359 ] High CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google on 2026-08-25 [N/A][ 554531101 ] High CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google on 2026-08-29 [TBD][ 561039723 ] High CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin on 2026-09-14 [TBD][ 561334760 ] High CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-09-14 [N/A][ 561892119 ] High CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google on 2026-09-15 [N/A][ 561997899 ] High CVE-2026-110137: Use after free in WebRTC. Reported by Google on 2026-09-15 [N/A][ 562038980 ] High CVE-2026-110140: Type confusion in V8. Reported by Google on 2026-09-15 [N/A][ 562242421 ] High CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-16 [N/A][ 562243925 ] High CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-16 [TBD][ 564573066 ] High CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security on 2026-09-21 [TBD][ 565252396 ] High CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa on 2026-09-23 [N/A][ 565742182 ] High CVE-2026-110153: Use after free in Media. Reported by xinyang on 2026-09-24 [TBD][ 566496747 ] High CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy) on 2026-09-26 [N/A][ 567088929 ] High CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-28 [N/A][ 568010382 ] High CVE-2026-110168: Use after free in V8. Reported by Google on 2026-10-01 [TBD][ 568037533 ] High CVE-2026-110139: Use after free in Media. Reported by weihengqiuu on 2026-09-30 [N/A][ 568719352 ] High CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568730794 ] High CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568831102 ] High CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568895734 ] High CVE-2026-110141: Observable discrepancy in Media. Reported by Google on 2026-10-02 [N/A][ 568899705 ] High CVE-2026-110138: Use after free in ShapeDetection. Reported by Google on 2026-10-02 [N/A][ 570047270 ] High CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570050928 ] High CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570167920 ] High CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570167922 ] High CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570461696 ] High CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge on 2026-10-06 [N/A][ 570675082 ] High CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge on 2026-10-06 [TBD][ 553525515 ] Medium CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni on 2026-08-27 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. Many of our security bugs are detected using AddressSanitizer , MemorySanitizer , UndefinedBehaviorSanitizer , Control Flow Integrity , libFuzzer , or AFL . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Srinivas Sista Google Chrome
Tupac Shakur killer sentenced to 40 years in prison
Duane ‘Keffe D’ Davis was sentenced to 40 years to life in prison over the 1996 murder of rap icon Tupac Shakur.
Pope diagnosed with lung cancer but had successful surgery, Vatican says
Pope Leo had a "peaceful night" in the hospital after the surgery to remove a lower lobe of his right lung, the Vatican says.
OpenAI employee arrested for allegedly planting a bug in a conference room
An OpenAI engineer was arrested after the company said it discovered a "sophisticated recording device" hidden in one of its offices. The employee was identified as Abdulrahman Alfozan, a 35-year-old Saudi national. Alfozan is charged with using or endeavoring to use a device to intercept oral communications, according to a press release from the Department […]
Judge orders OpenAI to turn over hiring records in Apple trade secrets case
A federal judge ruled that Apple can access OpenAI's interview materials involving former Apple employees, as well as private messages and testimony from key figures in the case.
Funeral for Egyptian flight attendant killed in Houthi attack on Riyadh
Funeral for Egyptian flight attendant killed in Houthi attack on Riyadh
Judge says Musk engaged in intimidation of ex-FEMA CFO Mary Comans, clears her name
Ex-FEMA CFO Mary Comans' name was cleared by a federal judge after Elon Musk and other government officials falsely accused her of criminal actions in 2025.
OpenAI engineer arrested in bugging of executive conference room
https://x.com/OpenAINewsroom/status/2110095403198849132 Comments URL: https://news.ycombinator.com/item?id=50078141 Points: 604 # Comments: 501
It looks like Apple Music is getting a new icon
Apple Music's iconic red app icon has reportedly been replaced with a black-and-white version in the latest iOS 27.2 beta, 9to5Mac reports. The eighth note on the icon also appears to have a slightly sharper angle than the original. A new Apple Music logo was also spotted last month on the Apple Music Hall website, […]
What an economics Nobel Prize winner knows about pricing
NPR's Ailsa Chang chats with Michael Woodford of Columbia University, who was one of two Americans awarded the Nobel Prize in Economics.
Houthi missile hits Aramco building after Saudi-led coalition strike on Yemen fuel depot
The Saudi energy ministry says the Houthi attack caused a "limited fire" at Aramco's headquarters complex in Dhahran.
Licube wants to be the fuel provider to the fusion power industry — see how at TechCrunch Disrupt
Fusion power plants will need a lot of lithium, and Licube is preparing to be a key supplier.
What We Heard at AGNTCon Europe
The night before AGNTCon + MCPCon Europe, we hosted the Agentic AI Foundation community at the JetBrains office in Amsterdam. The event filled up fast and went to a waitlist, which is not what I expected for a Wednesday evening discussion about how open foundations work. Ibrahim Malik opening the evening. The panel asked what […]
Bipartisan group of senators call on Trump to rescind Russian diesel deal
Six Democratic and six Republican senators wrote a letter calling on President Trump to withdraw from his recent deal with Russian President Vladimir Putin.
SuperLocalMemory
Agent memory with Laya, Jev + Google Gemma Discussion | Link
Shopify opens its catalog up to more AI agents
More AI agents will soon be able to browse and purchase from Shopify listings, marking an expansion of the company's agentic commerce ambitions. Shopify announced Tuesday it will let shoppers configure their AI agents to purchase products on their behalf, giving more agents access to over a billion listings in Shopify's catalog. (The catalog consists […]
A judge blocks the government's tree-clearing spree at a municipal D.C. golf course
Locals and preservationists have long opposed Trump's plan to redevelop a municipal D.C. golf course. That legal fight escalated after the government cleared hundreds of trees on short notice.
Show HN: Guitoro, a virtual guitar you strum with your keyboard
Guitoro is a free browser guitar using recordings of real instruments. You can strum with your keyboard, mouse, or touchscreen, choose acoustic, classical, electric guitar or bass, and see chord fingering and each stroke. Song practice can be slowed to 20%, and there are free chord tools and tuners. No signup or download. 1 minute video demo: https://youtu.be/DtcluMLdSgs I would love feedback on how the strumming feels and sounds. Comments URL: https://news.ycombinator.com/item?id=50077020 Points: 447 # Comments: 115
Niobia takes the guesswork out of some of tech’s most expensive mistakes
The San Francisco startup aims to help battery and chip manufacturers identify defects on production lines, reducing downtime and costly mistakes.
406 scientists demand AI models be cut off from the internet immediately
406 scientists, including Geoffrey Hinton, Yoshua Bengio, and Stuart Russell, are demanding that companies immediately disconnect AI models from the internet. Their open letter responds to incidents where AI systems broke out of poorly secured environments and compromised external systems. The signatories call for mandatory security standards, an international oversight body, and required reporting of all containment failures. The article 406 scientists demand AI models be cut off from the internet immediately appeared first on The Decoder .
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek .
‘There was a chance to stop him’: Parents react with fury to paedophile nursery worker revelations
More than 50 families call for investigation into how Vincent Chan was allowed to return to job after inquiry by nursery The parents of the victims of paedophile nursery worker Vincent Chan have reacted with fury to the news that he was cleared to return to work after “significant concerns” were raised by the parent of a young girl. As first revealed in the Guardian , Chan was reported to his employer, the nursery chain Bright Horizons, by a concerned parent in 2021. Continue reading...
Nostaliga
Rediscover the days behind your favorite songs Discussion | Link