Unrushed Ledger

Attackers began exploiting the SSHhole authentication bypass in OpenSSH, CVE-2026-123158, less than 24 hours after public disclosure, with crypto-miners and IoT botnets getting in using passwords longer than 256 characters.

Gnosis Pay said its monitoring systems detected unauthorized access on November 3 to the system powering its consumer cards, a platform already due for retirement on December 20, and CoinDesk reported the stolen data included names, full home addresses, card numbers and every linked crypto wallet address.

LG AI Research opened K-EXAONE 2.5, a 750-billion-parameter model with 31 billion active per token and a 524,288-token context window, through an API its changelog says is free for now, and has published no open weights for it, unlike the Apache 2.0 release of K-EXAONE 2.0.

Rebellions will connect its next-generation R200 neural processing units to Nvidia's rack-scale platform over NVLink Fusion, with SK Telecom deploying the systems in its AI data centre under Korea's AI for All project and availability expected in 2028.

DeepSeek disclosed that Harness, its open-source agent app, reached 1.54 million daily active users by November 4, up from about 271,000 at the end of September, and is consuming roughly 92 trillion tokens a day across some 35,000 plugins.

TikTok was charged by the European Commission with breaching the Digital Services Act over the harmful rabbit holes effect of its For You feed, which EU tech chief Henna Virkkunen said serves more of the same every time a user scrolls or likes, and the company rejected the findings as fundamentally inaccurate.

Nvidia's board said it has no reason to believe national security or company secrets were compromised, as House chairs Brian Mast, John Moolenaar and Rick Crawford invited chief executive Jensen Huang to a closed-door briefing on November 18, the day after the company reports earnings, and Nvidia would not say whether he will attend.

TEKEVER secured €13 million from Denmark's export and investment fund EIFO as part of a €520 million Series D, with the Lisbon defence drone maker using the Danish cheque to build out Nordic operations.

Return secured €835 million in portfolio financing underwritten by Deutsche Bank and Rabobank, which the Amsterdam battery storage company will spend installing at least 1 GW of German capacity a year from 2027.

Titan OS raised €40 million from existing backers Highland Europe and Mangrove Capital Partners plus a credit facility from BlackRock-managed funds, taking the Barcelona smart TV operating system to €97 million raised.

VÆRIDION raised a €30 million Series A2 co-led by SHIFT Invest and Invest-NL, and was separately selected for a €94.5 million European Commission Innovation Fund grant, still subject to an agreement expected in 2027.

T-Therapeutics closed an oversubscribed $133 million Series B co-led by Advent Life Sciences and the British Business Bank, with Johnson & Johnson's JJDC, Samsara BioCapital, M-Ventures and Lilly joining the Cambridge biotech as new investors.

Alethio Therapeutics completed an oversubscribed €80.46 million Series A co-led by Sofinnova Partners and RA Capital, with founding investor Oxford Science Enterprises returning to back the Abingdon-on-Thames blood cancer spin-out.

FluoRok raised €26.64 million led by Orano Ventures Fund and Supernova Invest, with Bidra Innovation Ventures joining, to scale the Oxford spin-out's fluorochemical process that avoids hazardous hydrogen fluoride.

Supa raised £21 million in seed funding for its property management platform, led by 2150 and OpenOcean with Kompas VC, Actia Capital Partners and Heartfelt joining.

OpenAI closed $11 billion at a $1.25 trillion valuation, the first tranche of a round it had opened seeking up to $30 billion at $1.4 trillion, with SoftBank, Sequoia Capital, Founders Fund and Andreessen Horowitz among the investors.

Applied Compute raised $350 million at a $3.25 billion valuation in a round led by Elad Gil, with Nvidia among a long list of participants backing its platform for training and running large models.

Traversal raised $120 million at a $1 billion valuation, co-led by Kleiner Perkins, Redpoint Ventures and Khosla Ventures with existing backers Sequoia Capital and Battery Ventures, for AI agents that debug enterprise software.

Larridin raised a $30 million Series A led by Pelion Ventures to measure what companies are actually getting back from their AI spending, eight months after a $17 million seed.

Sequoia Capital said it has raised roughly $10 billion in new funds while closing its London office and ending several programmes, unwinding 20 years of expansion to concentrate on Silicon Valley.

Creandum raised $750 million for its eighth and largest fund, having tripled its San Francisco presence over the past two years.

The European Innovation Council adopted a €1.8 billion 2027 work programme that doubles individual Women TechEU grants to €150k, completes a €1 billion commitment to the EQT-managed Scaleup Europe Fund and finishes a €200 million defence allocation.

Team8 raised $365 million to back AI-native enterprise companies, following earlier funds whose portfolio includes Classiq, FundGuard and Port.

Mighty Capital closed $91 million for Fund III, triple the size of its second fund, after six portfolio IPOs in eight years.

Mucker Capital raised $45 million for a second institutional fund targeting seed and pre-seed internet deals.

Anthropic's Claude Code can write a credential into a project's local settings file when a developer approves a command and asks not to be prompted again, and Apiiro found 2,539 distinct secrets across 1,994 public GitHub repositories at 63 organisations, among them 379 database passwords and 43 SSH logins.

SonicWall's SonicOS SSLVPN authentication bypass, CVE-2026-19868, was added to CISA's Known Exploited Vulnerabilities catalog after the company said its product security team had investigated a report of potential exploitation; the flaw lets a user holding valid credentials for an alternate login method skip SAML authentication and the multi-factor checks it enforces.

BBT SE, the company building the Brenner Base Tunnel between Austria and Italy, confirmed a cyberattack that reached data accessible over the internet, said it isolated the affected data source and notified authorities, and declined to say whether it had negotiated with the attackers.

Vanguard reported a data breach that exposed the Social Security numbers of 94 Vermont residents, with the nationwide count still undisclosed.

Meta launched Spaces in its Muse app, where the agent builds a tracker, planner or project board from a description in chat and keeps it current through connected apps, a day after it added voice and video calls to the same agent, which Meta said in October had 10 million users in the US and Canada.