North America tech news
Technology news from North America: official announcements from its governments, companies and institutions.

Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.

Cloudflare applies to become a public certificate authority
The company says it has applied to four root programs and agreed to buy a trusted root from GlobalSign, with free ACME-based issuance and post-quantum certificates planned.

Microsoft Research unveils Quine, an AI world model of biology
Microsoft says its experimental Quine system combines a multimodal biology model with a research harness, and ranked cancer compounds later tested with the Broad Institute.

Google Play adds team seats and usage-based billing to subscriptions
Google says Android developers will be able to sell multiple subscription seats in one transaction, meter AI usage and bundle subscriptions with other developers.

CISA flags two high-severity flaws in Lantronix G520 gateways
Two vulnerabilities in the cellular gateway's update mechanism could let attackers run code with root privileges, CISA said, with fixed firmware available from Lantronix.

CISA lists nine Anjvision YSSD-RTMP-H5 flaws with no fix planned
CISA says the worst of the nine vulnerabilities scores 9.8 and could give an attacker full control of the device, and that the vendor has not responded.

NASA Glenn develops Moon dust composite for in-space manufacturing
NASA says the biodegradable plastic mixed with simulated lunar and Martian dust could let crews build and repair tools on site, cutting resupply needs.

Cloudflare launches Threat Signals for all accounts, free
Cloudflare says its new agentic skills turn open-source threat reports into tagged, contextualized indicators that can feed WAF rules, with one RSS feed free per account.

BreakingApple Multiple Products flaw CVE-2026-86950 is being actively exploited, CISA warns
CISA added the Apple Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on September 29, 2026, with a federal remediation deadline of October 2, 2026.

Cisco Talos launches Executive Threat Detection hunting service
Cisco Talos Incident Response says the retainer-based service runs monthly human-led threat hunts on systems tied to up to 10 executives.