Amazon Leo’s Globalstar deal, Anthropic’s first-half loss, PHP2Shell exploitation

US regulator approves Amazon Leo’s $11.57 billion Globalstar deal

The US Federal Communications Commission says it has approved Amazon Leo’s $11.57 billion Globalstar acquisition. Amazon announced the agreement in April with a 2027 completion target, while Amazon Leo aims to deploy about 3,200 satellites by 2029.

Cloudflare counts 18 exam-related internet shutdowns in Iraq

Cloudflare’s count puts Iraq’s exam cuts at 18 of the 19 government-directed disruptions it recorded worldwide in July–September 2026. The measurements track traffic to Cloudflare customers rather than disconnected people. The company says it will keep monitoring Iraqi networks as the minister’s proposed alternative develops.

Rostelecom says backups restored internet in four Russian regions

Rostelecom’s account of restored connectivity covers a disruption affecting Chukotka, Magadan, Kamchatka and Sakhalin. Cloudflare relays the operator’s account in its October 27 review.

Ukraine’s cyber response team warns of Dahua camera breaches

Ukraine’s CERT-UA warned of unauthorized viewing, changed settings and third-party accounts on Dahua surveillance systems. The alert identifies predictable device identifiers and weak or bypassed login checks as access routes, and recommends disabling unneeded peer-to-peer access, avoiding direct internet exposure and updating device software.

Updated

US cyber agency confirms PHP2Shell exploitation and sets patch deadline

The US cyber agency’s confirmation follows earlier warnings that had not established successful exploitation. Separately, Censys’s advertised-version counts cannot verify patch status, because fixes can be backported without changing version numbers.

Australia says it cuts a criminal off from 180,000 infected computers

Australia’s cyber agency says it cut one criminal off from 180,000 infected computers worldwide. The disruption blocks that controller’s access, not every Amadey network, and does not undo earlier theft: stolen login details can remain available for attackers to use months later.

South Korean police arrest seven over alleged theft of 8.2 million records

South Korean police have arrested seven suspects over the alleged theft of 8.2 million records. Police say most attacks used a superintelligence (SI) framework, and 38 incidents involved ransom demands. The alleged leader’s case has gone to prosecutors.

Warp notifies users of vendor breach that may have affected about 1%, CEO says

Warp has notified users identified as affected by a vendor compromise. CEO Zach Lloyd estimates roughly 1% of users may have been affected, but Warp has not clarified whether source code, prompts or credentials were exposed; the investigation continues with outside specialists.

University of New Mexico clinics reopen after cyberattack

University of New Mexico clinics have resumed scheduled care after the October 26 cyberattack. The university says its critical health-sciences systems are back online. It says some user devices were affected without core systems or servers being penetrated. The university plans to work with patients to reschedule missed care.

Hacking tool CyberStrikeAI used 44 agents in October, TrendAI says

TrendAI says CyberStrikeAI distributed an automated attack workflow among 44 agents. Recovered tools and logs also describe two less automated operations, including a human-led intrusion that reportedly took land records, commercial records, Windows credentials and email data.

Keystone pauses website-order shipments after verification-key theft

Keystone has paused website-order shipments until devices with a replacement verification key are ready. The stolen key could let counterfeit wallets pass its online check, the company says, making support confirmation necessary before owners use devices received after October 20 that carry the old key.

Updated

Anthropic posts $80.7bn first-half 2026 loss in public share-sale filing

Anthropic disclosed its $80.7 billion first-half 2026 loss in the public S-1 submitted on 26 October, following an earlier confidential draft. Reported fundraising of up to $100 billion remains a possibility, not agreed terms, as the company provisionally pursues a mid-November share sale.