Vibecoders HubNEWS
Tech & AI News Roundup — September 26, 2026, 10:02 AM UTC
8 real stories worth knowing about, with links to the original reporting.
By Vibecoders Hub · 9/26/2026 · 4 min read
Quick links to what's actually happening in AI, tech, and IT right now — curated from real reporting, not rewritten, so you can go read the full story wherever it's genuinely worth your time.
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery (CSRF) vulnerability, which has yet to be assigned a CVE identifier, carries a CVSS score of 8.8 out of 10.0. It only affects versions — The Hacker News
A Gravitational Battle Within the Earth Is Changing the Length of Days
A competition between the gravity of the inner core and other forces in the mantle is altering the Earth's rotation. — Wired
The Best Early Prime Day Deals Ahead of Amazon’s Second Sale (2026)
Amazon Prime Big Deal Days officially begin on October 6 and 7, but I’ve already spotted early discounts on gear our team recommends. — Wired
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows - CVE-2026-65660 (CVSS score: 8.8) - A code injection vulnerability in Microsoft Office SharePoint — The Hacker News
Is solar's growth finally slowing in the US?
Renewables easily cover changes in US demand, which is rising by 2% in 2026. — Ars Technica
Microsoft stops insisting you need a "Copilot+ PC"
Microsoft's new Surface laptops forgo Copilot+ PC branding. — Ars Technica
Discord Wants to Estimate Your Age Without Asking for ID
Discord is rolling out machine-learning age assurance that estimates whether users are teens or adults without requiring most accounts to submit ID. The post Discord Wants to Estimate Your Age Without Asking for ID appeared first on TechRepublic. — TechRepublic
Some Supabase customers are publicly exposing reams of people’s data to the web
The findings highlight how AI-generated and vibe-coded apps can spill and expose users' data when not configured or secured properly. — TechCrunch