IT, AI & Telecommunications

ATLANTA – October 28, 2026 -- IBM is extending HashiCorp Vault to AI agents, issuing each one a governed identity and short-lived credentials, as Gartner data shows only 13% of organizations believe they have the right agent governance in place. The company announced the capabilities at TechXchange 2026.

Gartner projects that by 2028 the average Fortune 500 enterprise will use more than 150,000 AI agents. IBM cites persistent credentials, unclear ownership and disconnected controls as the main obstacles to governing agents that call tools and act across teams, platforms and clouds.

Global – October 28, 2026 -- Telit Cinterion is promoting eSIM Protect, a service built on independent eSIM profiles linked to separate core networks and partner ecosystems, as a remedy for single points of failure in mission-critical IoT deployments.

Single-operator connectivity fails outside home markets

A deployment that depends on one mobile network operator (MNO) can lose connectivity during a core network outage, and devices may stay offline until the operator recovers. A commercial dispute can also disrupt service if terms change or access is restricted. Carriers in markets with national roaming restrictions may be unable to support redundancy beyond their own networks.

TRIESTE – October 28, 2026 -- Telit Cinterion averages 1.8 prototype iterations per IoT project, with most products reaching mass production after one or two spins, the company said in a description of its R&D process. Prototype fabrication can consume half of a project's total timeline, and a single PCB fabrication cycle can take months in the current supply chain environment.

Custom work accounts for up to 60% of R&D projects

About 50% to 60% of projects are custom IoT solutions built for specific deployments. Roughly 80% of customizations are software, and hardware changes make up the other 20%. Larger enterprises typically commission this work, while smaller businesses usually find a standard portfolio product sufficient.

Roughly 90% of solution products include a Telit Cinterion module. About 40% use NExT connectivity services, and another 40% run on the deviceWISE platform.

Global – October 28, 2026 -- Telit Cinterion started its AI rollout in IoT product development with validation testing, then extended it to software development and customer support, according to Antonino Sgroi, the company's global head of R&D.

Validation came first to avoid downstream bottlenecks

Telit Cinterion used AI to speed up log analysis and root-cause detection before applying it elsewhere. Sgroi said accelerating development without strengthening validation only moves the bottleneck downstream.

Software and support followed once validation was ready

In software development, AI now generates repetitive code, speeds up reviews, guides debugging and drafts documentation, without lowering the quality bar, Sgroi said. In customer support, AI helps engineers interpret logs faster and surface recurring field issues. Those insights feed back into engineering.

Global – October 28, 2026 -- Telit Cinterion averages fewer than two prototypes per IoT development project, according to Antonino Sgroi, the company's global head of R&D. He outlined how its engineering team takes customer concepts through certification and into mass production.

One team owns the product from feasibility to mass production

The engineers who design a device also support it after launch, Sgroi said. Each customer gets a dedicated contact who provides updates. The work follows a structured four-phase process.

The model targets companies that have a clear product idea and a customer base but lack in-house engineering capacity or the appetite to build the device themselves. Telit Cinterion contributes cellular and connectivity expertise and platforms.

Global – October 27, 2026 -- A malicious version of the tensorlake npm package (0.5.144), which draws about 12,000 weekly downloads, was published carrying Shai-Hulud malware, according to OX Security.

Malware wipes the host if a stolen GitHub token is revoked

The payload contains a kill-switch string, IfYouRevokeThisTokenItWillWipeTheComputerOfTheOwner, identical to the one used in the TanStack attack in May. Revoking the stolen GitHub token triggers rm -rf ~/ on Unix systems or Remove-Item on the Windows user profile.

OX advises isolating the machine from the network and killing the gh-token-monitor persistence before revoking anything. Any machine that installed tensorlake@0.5.144 should be treated as fully compromised, with all GitHub, npm, cloud, Vault, SSH and CI secrets rotated.

Global – October 27, 2026 -- Apache Airflow's SSH and SFTP providers ship with host key verification disabled by default. Two High-severity vulnerabilities, CVE-2026-94134 and CVE-2026-94135, both rated CVSS 8.1, leave connections open to man-in-the-middle attacks, according to OX Security Research.

Both apache-airflow-providers-ssh and apache-airflow-providers-sftp are affected through version 6.0.1. Version 7.0.0 of each package fixes the flaw. The weakness is classified as CWE-322, key exchange without entity authentication.

Global – October 27, 2026 -- PHP will ship an emergency patch for two critical core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, on Wednesday, October 21, 2026, at 14:00 UTC (10:00 ET). The PHP security team rates both flaws CVSS v4.0 9.2, and researchers describe them as unauthenticated remote code execution.

PHP reserves the right to release before 14:00 UTC

The project may ship earlier if technical details go public or exploitation appears in the wild, according to BleepingComputer. The official advisory names no vulnerable function, no affected versions and no fixed releases.

The CVE IDs, the "PHP 5 through 8" scope and the CVSS 10 figures come from researchers and a leak, not from PHP. Until the release, everything outside the official advisory remains theory.

Global – October 27, 2026 -- Roughly 2,000,000 internet-facing PHP servers run versions affected by two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, and 99.99% of identifiable servers remain unpatched, according to Shodan data cited by OX Security.

The PHP core team issued an out-of-band security release fixing both flaws in versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Shodan counts only servers that expose their PHP version, so the real total is likely higher.

69% of exposed servers run versions that will never get an official fix

About 1.37 million servers, or 69%, run old PHP versions outside vendor support. Only 245 servers showed a patched version as of the Shodan snapshot. Affected code spans all versions supporting session.upload_progress, from PHP 5.4.0 up to the unpatched releases.

Global – October 27, 2026 -- Sixty-five percent of 2,000 senior security decision-makers say they have too many security tools or vendors, and 53% say their tools can't be integrated, according to 2025 research by Barracuda and Vanson Bourne. For application security (AppSec) teams, the sprawl shows up as overlapping findings from static application security testing (SAST), software composition analysis (SCA), and cloud-native application protection platforms (CNAPPs).

Duplicate alerts, coverage gaps and lost context drive sprawl costs

One vulnerable open-source package can surface three times: as an SCA finding in the repository, as a container image finding in the registry, and as a runtime finding in the CNAPP. Each carries its own severity score, owner, and ticket, so triage time goes to reconciling one issue three times.