Tech Roundup: Ubuntu 26.10 Lands, GhostAction Hits GitHub, and a Spy Bug in OpenAI's Conference Room
Title: ## Cybersecurity **Windows Server zero-day crashes servers with one packet.** Microsoft patched CVE-2026-70111, a flaw that lets a network-adjacent attacker crash affected Windows Servers in seconds using a crafted DFS referral response. If you're running exposed DFS services, patch now. <!bk_citation citationType="message" url="https://litzseytech.slack.com/archives/C0B802PCF0W/p1792065386862829" index="1" channel="C0B802PCF0W" message_ts="1792065386.862829" text="[1]"> **GhostAction supply-chain campaign balloons.** The GhostAction attack has now compromised roughly 1,900 GitHub accounts and targeted more than 30,000 repositories, attempting to steal CI/CD, cloud, and API secrets. Worth an audit of your org's GitHub Action secrets and recent commits. <!bk_citation citationType="message" url="https://litzseytech.slack.com/archives/C0B802PCF0W/p1792065386829169" index="2" ...
