TechRepublic

We may earn from vendors via affiliate links or sponsorships. This might affect product placement on our site, but not the content of our reviews. See our Terms of Use for details. Hackers are abusing n8n workflows to deliver malware and evade detection, according to Cisco Talos, using trusted automation to bypass security defenses. Image: AndersonPiza/Envato A trusted automation tool has quietly become a weapon for delivering malware.

Image: Created with ChatGPT From Anthropic’s Claude Opus 4.7 and Apple’s upcoming Siri app to critical zero-day patches and fresh corporate shake-ups, this week’s tech rundown showcases how relentless AI innovation, mounting security threats, and bold market maneuvers are reshaping everything from developer workflows to global infrastructure.

McGraw-Hill confirms a data exposure tied to a Salesforce misconfiguration as hackers claim 45M records, raising concerns over SaaS security risks. Image: Nomad_Soul/Adobe McGraw-Hill has confirmed unauthorized access to a limited set of internal data following a reported Salesforce misconfiguration. The disclosure comes after an extortion threat, allegedly by ShinyHunters, that raised questions about the incident’s scale and sensitivity.

Disney cuts 1,000 jobs as it shifts toward a tech-driven, automated future. The move signals broader media industry changes and investor optimism. Image: AP Photo/Richard Drew Disney has just become the latest company to swing its axe, with about 1,000 jobs on the line as it reshapes its workforce towards a more tech-driven future. On Tuesday, employees learned of the cuts through an internal memo from the company’s new chief executive, Josh D’Amaro.

Image: Justin Morgan/Unsplash A web developer discovered dozens of malicious WordPress plugins with buried backdoors that had compromised thousands of WordPress websites after receiving a notice from a concerned user. The affected plugins, which are part of the Essential Plugin portfolio, were reportedly modified with a backdoor after their ownership quietly changed.

Image: DC_Studio/Envato The US Energy Information Administration (EIA) is moving toward its first mandatory national survey of data center energy use, reflecting a growing view in Washington that modeled estimates are no longer enough. Utilities and regulators are being asked to plan for rapidly rising AI-driven electricity demand, even though national reporting on data center power use remains incomplete.

We may earn from vendors via affiliate links or sponsorships. This might affect product placement on our site, but not the content of our reviews. See our Terms of Use for details. I compared the best QR code payment apps for small businesses, focusing on provider flexibility, in-person and remote QR payment support, POS support, transaction fees, and overall ease of use. Small businesses can use QR code payment apps to accept faster payments in-store, curbside, tableside, or remotely.

Deal teams are moving beyond virtual data rooms toward platforms that support the full deal lifecycle. Here’s how Intralinks DealCentre AI and Datasite compare. The tools that support corporate and private equity M&A dealmaking have evolved well beyond secure document sharing. What started as virtual data rooms (VDRs) built for diligence has expanded into platforms expected to support every phase of a deal. Deal teams are no longer looking for static repositories.

YouTube is changing how ads appear during livestreams, holding them back at moments when viewers are most likely to be engaged or spending money. The update applies to creators using automatic ads and changes the platform’s default logic for live monetization. Instead of simply inserting ads on a fixed pattern, YouTube is now making more real-time decisions about when not to interrupt a stream.

Image: Generated via Google Nano Banana About 20,000 people have had their data stolen by a single hacking group that weaponized 108 Chrome Extensions in a numbers game. Discovered by Socket, a security research organization, these Chrome extensions masqueraded as everyday utilities while reporting to the same Command and Control (C2) server. On the surface, they appeared to be legitimate tools.