TL;DR Better Auth published three security advisories on November 3, 2026, alongside version 1.7.16 of the TypeScript authentication library. The worst of these Better Auth vulnerabilities, rated CVSS 9.1, lets an unauthenticated attacker sign in as any user whose email address they know. The other two flaws affect phone sign-in and the Electron desktop plugin. Apps that register the expo() plugin face a zero-click account takeover risk.

TL;DR Threat actors are exploiting a critical GPUStack authentication bypass in the wild to hijack AI servers. Tracked as CVE-2026-102895 (CVSS 9.8), the flaw lets remote attackers take admin control and run reverse shells on worker hosts. The vendor also patched CVE-2026-102894 (CVSS 9.1), which lets attackers hijack accounts via fake SAML logins. Why It Matters GPUStack is an open-source tool that manages GPU clusters for running large AI models.

Prosecutor said she was surprised the defendant had not transmitted trial exhibits or suppression transcripts to the appeals court; she offered to locate or transmit records necessary for the court to consider authentication and corroboration questions.

I revealed a few days ago that I’ve been writing an ebook since last December. I finally finished it and priced it—not at $100,000 per copy, but at a much more reasonable $4.96. The topic? Proving hum...

Imagine if we didn’t have identity verification and authentication. I could walk into a luxury car dealership and buy a car, telling the salesperson that my name is Bill Gates. I could buy the car, an...

SMX (SMX) outlined its gold-traceability platform, describing how molecular markers and digital records can track gold through its supply chain. The system combines markers embedded during mining, refining, recycling or minting with blockchain-based records. SMX says this approach supports authentication, origin verification and responsible-sourcing compliance.The company also describes the technology as a way to distinguish recycled gold from newly mined material and reduce uncertainty about provenance. The announcement contains no new contract, transaction or financial results.

Defense counsel told the court the surveillance video admitted at trial may only illustrate an immunized witness's testimony and lacks independent authentication (source chain such as Ring camera origin), challenging whether the footage can corroborate perjury.

SMX (NASDAQ: SMX) highlighted its recycled-plastic verification technology, arguing that material authentication is becoming more important to manufacturing cost control. Its platform connects molecular markers embedded in materials to digital records covering origin, recycled content and chain of custody—the record of material transfers. The discussion focused on verification as support for recycled-plastic adoption, rather than announcing a new contract, product launch or financial results.

### Impact In GPUStack before v2.2.0, `get_current_user` (in `gpustack/api/auth.py`) promotes any request whose source is considered loopback to the built-in administrator account when `force_...

Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys. The warning came in an email sent on November 3 in the name of developer mSeven Software. It says the company recently learned of suspicious activity linked to the app but

Two Security Flaws Create a Dangerous Path to Complete Appliance Compromise Barracuda has patched two serious security vulnerabilities affecting its Email Security Gateway (ESG) appliances, warning customers that attackers could chain the flaws to bypass authentication controls and ultimately obtain root-level access to vulnerable devices. The vulnerabilities, tracked as CVE-2026-116606 and CVE-2026-111560, carry CVSS scores of 9.3 and 8.6, respectively. Although each flaw presents a different security risk, exploiting them together creates a significantly more dangerous attack path that could allow threat actors to take complete control of affected appliances.