Netease-youdao LobsterAI versions 2026.5.27 through 2026.9.23 contain CVE-2026-108156, a high-severity flaw that enables arbitrary directory deletion via a crafted skill's _meta.json file. The vulnerability carries a CVSS score of 7.1 and requires only that a user install the malicious skill.
This trust allows an attacker-supplied path to trigger recursive deletion of any user-writable directory.
Successful exploitation can delete arbitrary directories, including the user's home directory, resulting in high integrity and availability effects with no confidentiality impact.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Cohere announced the initial close of a Series E round targeting up to CAD $7 billion, which would value Cohere at CAD $35.7 billion if fully raised. The companies of Schwarz Group lead the round. Cohere calls it the largest private raise by a Canadian tech company.
ADT and Thrive Holdings announced an all-cash deal that values ADT at about $7.6 billion in equity value and $15.3 billion in enterprise value, according to the companies. ADT stockholders would get $10.00 per share, and the companies expect the deal to close in the first quarter of 2027, pending stockholder and US antitrust approval.
Marvell is in advanced talks to acquire optics maker Lumentum, Bloomberg News reported Oct 28, citing people familiar, and a source told Reuters the same. A deal could be announced as soon as next week, though talks are private and no agreement has been reached. Lumentum rose about 9% after hours and Marvell fell more than 8%, per Reuters.
Samsung reported record third-quarter operating profit of 107.4 trillion won and said it is the world's first tech company to exceed 100 trillion won in quarterly operating profit. Its chip division earned 106.5 trillion won of that, and Samsung said on its call it expects 2027 results to surpass 2026.
CISA says it added Linux kernel flaw CVE-2026-46300 to its Known Exploited Vulnerabilities catalog on Oct. 28, with a federal deadline of Oct. 31 and forensic triage required. CISA says it can be chained with two PHP flaws to implant webshells and run commands as root.
