Samsung Electronics will use TSMC's 3-nanometre process to produce the base dies for Nvidia's next-generation custom high-bandwidth memory, the Seoul Economic Daily reported on Sunday. The move would mark the first time Samsung has worked with the Taiwanese contract chipmaker at the HBM manufacturing stage, according to the report, which Reuters summarized on October 18.

Microsoft has pulled out of a data center agreement with British cloud provider Nscale for a site in Loughton, Essex, according to a report in Britain's Telegraph newspaper on Sunday that was reported by Reuters on October 18. Microsoft, described as one of Nscale's two largest customers, recently terminated its agreement for the Loughton facility. Neither company immediately responded to Reuters requests for comment outside regular business hours, and the Telegraph report did not specify why Microsoft withdrew.

Drupal has patched two critical remote code execution vulnerabilities affecting every currently supported version of the open-source content management system, and its security team is urging administrators to update now, warning that working exploits could be developed within hours or days of disclosure.

A compromised credential belonging to a trusted backup application has given attackers a single key into 173 Microsoft 365 tenants, in what Microsoft is calling an active supply chain attack. The credential belongs to ConnectWise Cloud Backup, formerly SkyKick, a service managed service providers use to back up and restore their clients' Microsoft 365 and Google Workspace data.

Canadian AI company Cohere announced on October 15 that it has signed a letter of intent to acquire AISLE, a cybersecurity startup that builds autonomous systems to discover and remediate previously unknown vulnerabilities in critical software. Cohere described the move as a proposed agreement rather than a closed deal, and the financial terms were not disclosed. AISLE said it will share more details as the transaction progresses, and that its focus for customers and partners remains continuity and stronger products.

A critical flaw in the Linux kernel is forcing virtualization hosts to patch and reboot, after a researcher showed that code inside a guest virtual machine can read memory belonging to the host itself. Tracked as CVE-2026-99999 and nicknamed PwnEscape, the vulnerability is rated critical, with a CVSS score of 9.3. It breaks one of the basic promises of cloud and sandbox platforms: that an untrusted guest stays inside its own machine.

A critical flaw in BeyondTrust Remote Support was exploited as a zero-day for weeks before a fix shipped, according to disclosures released this week by BeyondTrust and by Google Threat Intelligence Group and Mandiant. Investigators attribute the activity to Armory Castle, a suspected China-nexus espionage actor also tracked as UNC5221 and Warp Panda.

Proofpoint has agreed to acquire Varonis Systems in an all-cash transaction valued at about 6.3 billion dollars, the companies announced on October 15, 2026. The definitive agreement brings together Proofpoint, a specialist in protecting people and AI agents against cyber threats, with Varonis, a Miami-based firm focused on data and AI security. Proofpoint is a portfolio company of private equity firm Thoma Bravo.

U.S. semiconductor stocks were set to lose about $2 trillion in market value on Thursday, extending a steep selloff that had already erased $1.64 trillion over the previous six trading sessions, according to Reuters.

GlobalFoundries has been selected as the technology provider and operator for two new semiconductor manufacturing facilities at its Malta, New York, site under a U.S.-Japan initiative providing up to 21 billion dollars in funding. The company announced the plan on October 14, saying Japan will provide the investment while GlobalFoundries contributes its manufacturing technology and operational expertise. The fabs are intended to expand trusted U.S. production of foundational semiconductors and strengthen supply chains for automotive, industrial and connected infrastructure markets.