TechCapsules

An automated campaign dubbed “Gheist” has been using stolen GitHub tokens to create malicious workflow files in private repositories and GitHub Enterprise environments. The tool opens a new branch named ci-sync‑, commits a workflow that prints every readable secret to the Actions log, downloads the log via the API, and then deletes the run. Wiz’s investigation, ongoing since September 15, identified over 13,500 such branches across more than 850 compromised accounts, ranging from personal projects to enterprise repos. GitHub’s [...]

Researchers have proposed a new readout technique for Andreev qubits that exploits the qubit’s own oscillating supercurrent as a macroscopic signal of its quantum state. By coupling a highly sensitive magnetic detector to the supercurrent, the method can reconstruct the qubit’s state with simulated accuracies between 99.52 % and 99.85 % without repeatedly resetting the qubit. The approach eliminates the need for ancillary qubits, which are currently required to transfer information for quantum nondemolition measurements and add experimental overhead. [...]

Owlcat Games, creator of the Mass Effect‑inspired RPG The Expanse: Osiris Reborn, publicly endorsed the #SaveMassEffect petition after BioWare announced its studio closure and the cancellation of the next Mass Effect title. The petition, which has amassed more than 210,000 signatures, emerged alongside a leaked trailer for a project called Mass Effect Universe. Owlcat’s Twitter post referenced the fan‑driven rescue of the TV series The Expanse, which was revived by Amazon Prime after cancellation, and urged supporters [...]

Researchers at Huntress uncovered a Microsoft 365 token‑replay campaign that hijacked sign‑in sessions and replayed stolen access tokens to infiltrate 97 accounts across 79 organizations between July 14 and September 22, 2026. The attackers used an adversary‑in‑the‑middle login page to capture credentials and MFA codes, then harvested the resulting tokens and “sprayed” them at scale, achieving 497 successful sign‑ins from over 200,000 attempts traced to the 193.26.115.0/24 subnet. After gaining access, they added rogue authenticator apps and registered 48 fake Entra [...]

Ramdeobaba University (RBU) in Nagpur and deep‑tech startup QClairvoyance Quantum Labs have signed an MoU to create two specialised labs on the RBU campus: a quantum software laboratory and a quantum communication hardware laboratory. The software lab will use QClair‑Edu, a browser‑based platform that lets students design, simulate and visualise quantum algorithms without needing local quantum hardware. The hardware lab will house kits for quantum key distribution (QKD) and quantum random number generation (QRNG), alongside cybersecurity tools, [...]

Alix Wilton Regan, known for voicing Lara Croft in Tomb Raider: Legacy of Atlantis and Catalyst, will host the Golden Joystick Awards 2026 on November 11. The ceremony will be held in person and streamed live on YouTube, Twitch, X, Future Games Show, PC Gamer and GamesRadar+. Regan expressed excitement about celebrating the year’s top games and the developers behind them. Voting for the Ultimate Game of the Year category opened simultaneously, featuring twelve nominees ranging from [...]

Chinese developer S‑Game’s action RPG Phantom Blade Zero, billed as a PS5 exclusive, has earned an 88/100 Metacritic rating on both the console and PC ahead of its October 29 launch. The score reflects 26 critic reviews for the PS5 version and 33 for the PC port, which will appear on the PlayStation Store and Steam simultaneously. Set in a semi‑open‑world wuxia setting, the game follows the protagonist Soul, a falsely accused assassin given only 66 days to [...]

A rent‑a‑spyware kit named uCreator embeds malicious code in counterfeit copies of Telegram and WeChat, allowing attackers to hijack accounts, steal Telegram two‑factor authentication passwords, and clone WeChat sessions. The kit’s Telegram module matches the Baohuo backdoor previously reported by Doctor Web, sharing the same namespace (com.ucreator.tgjar), C2 server and command set. Infections spread via sideloaded APKs, fake app‑store sites targeting Portuguese‑speaking Brazil and Indonesian users, and a container app called “Onion Box” that runs other apps inside [...]