Japan's GMO Internet Group is facing hard questions about its own security process after hackers breached its Onamae.com Desktop Cloud, a Windows virtual server service that foreign-exchange traders use to run automated trading programs around the clock. On October 25, group founder and chief executive Masatoshi Kumagai acknowledged that in-house security specialists had identified weaknesses in the service before the intrusion, but that the response lacked sufficient speed and depth.

Nvidia has put a rough price on the software layer it wants to sell on top of its AI hardware: about 2,000 dollars per GPU per year for the software that runs AI agents on what the company calls AI factories. Chief executive Jensen Huang floated the figure at GTC Berlin on October 22, saying software licensing will become an increasingly major part of the company's business, with the agent software licensed, in his example, at roughly that rate per GPU annually.

The Reserve Bank of India will inaugurate its new Data Centre and Cybersecurity Training Institute in Bhubaneswar, Odisha, today, Sunday, October 25, with Prime Minister Narendra Modi scheduled to open the facilities at around 4:45 p.m. and address the gathering. The Prime Minister's Office announced the programme on October 24, framing the complex as a step to strengthen the technological foundations of India's financial system.

A new UEFI bootkit called BlackX has been used in a cyberespionage campaign against diplomatic agencies in Central Asia, exploiting an old Secure Boot bypass on machines that were, by the usual measure, fully patched. Kaspersky researchers published their analysis on October 22, saying they identified the attack in early 2026 against diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan, and attributed it to the China-linked group APT41 with medium confidence. BleepingComputer and The Hacker News reported the findings this week.

Microsoft Threat Intelligence has published a detailed breakdown of the compromised LiteLLM 1.107.0 release, and its central warning is uncomfortable for any team running Python: the malicious code did not wait for an application to use LiteLLM. Starting Python in an affected environment could be enough to run it.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild and giving Federal Civilian Executive Branch agencies until October 26, 2026 to apply the fixes. The short deadline underscores how urgently administrators should treat both flaws, even outside the federal government.

PwC said on Friday that it was aware of a cybersecurity incident involving a third-party vendor used to host the firm's employee learning records, a day after a cyber extortion group claimed to have stolen 590 gigabytes of company data. The confirmation, reported by Reuters on October 23, makes PwC the latest large enterprise to face an extortion threat that began not in its own network, but in a supplier's system.

Global spending on data centers is expected to reach 1 trillion dollars in 2026 and more than double to 2.1 trillion dollars by 2028, according to a BofA Global Research note published on Friday and reported by Reuters. The forecast is the latest sign that demand for artificial intelligence services is turning data center construction into one of the largest capital spending programs in the technology industry.

The U.S. Department of Commerce has signed letters of intent with four companies for up to 389 million dollars in federal research and development awards, targeting the power semiconductors and critical materials that sit underneath AI data centers, the electric grid and emerging fusion power plants.

Amazon Web Services and Megaport moved on Thursday, October 22, to automate one of the most stubbornly manual jobs in enterprise networking: ordering and building a private, high-capacity connection into the cloud. Megaport announced support for AWS Interconnect - last mile, a new managed connection model from AWS that is now live in public preview and is designed to simplify how businesses connect their own infrastructure to AWS.