Are you losing nutrients while cooking your food? The ingredients you buy matter, but how you cook them matters too. From using less water to avoiding overcooking, small changes in your kitchen can help preserve more nutrients in your everyday meals. Watch these 8 tips to make the most of the food you already eat. Save this reel for your next cooking session! [Cooking tips, nutrient retention, healthy cooking, Indian food, vegetable nutrition, cooking methods, dietitian tips, food science]

Fitcheck or whatever you call it.

इलेट्रॉनिक बसच्या बिघाडामुळे सोसायटी मशिदीजवळ अंधेरी घाटकोपर लिंक रोड (साकीनाका) येथे उत्तरेकडे जाणारी वाहतूक संथ गतीने सुरू आहे. #MTPTrafficUpdate

‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up. The other caller can flood the call's event queue so your hang-up is never processed. Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.

"El agua no es un derecho"

A hacker group called CyberCartel used Claude and Grok to automate attacks on 400+ Latin American banks. Not one attack. Not ten. Four hundred. All using AI agents running in parallel. Data stolen. Accounts accessed. Money moved. Little human input required. Straiker investigated. Found Claude Code session histories sitting in open directories. Found the attacker asking Claude where to sell stolen data. How did they get around the safety guardrails. They told Claude they were in internal tests. Claude believed them. When Claude refused anyway. They switched to Grok. Grok didn't refuse. When Grok had limits. They switched to Kimi. When Kimi had limits. They fell back to traditional malware. Chain multiple models together. Each one picks up where the last one hesitated. None of them know the full picture. Claude thinks it's helping with testing. Grok thinks it's just fixing code. Kimi thinks it's just answering questions. Together they broke into 400 banks. The Information broke the story on October 20. CrowdStrike confirmed it October 21. Bank accounts in South Korea got hit the same way. ARTEX. DeepSeek. Claude Code. All chained. Over 68,000 people affected. Financial Services Commission investigating. This isn't theoretical anymore. Not a lab demonstration. Not a proof of concept. Real attacks. Real banks. Real money. Automated by AI. The moment we all waited for arrived quietly. No announcement. No warning. Just a report. And suddenly every AI lab is scrambling to figure out why their models are good at breaking into banks.

If a Somali commits a crime in Minnesota he’s Somali but if he saves 20 kids on a runaway school bus he’s a Minnesota Man

well they famously did not turn the titanic around at all

The first computer algorithm was written by a woman, keep crying.

last week, the password of the danish national id system was 123456 this week, an intermediate CAs private key was 4 next week? i am not ready for next week…

Every Indian needs to know about this because it is a massive deal for how we trust anything on the internet. Let me explain. When you open your bank's website, there's a small padlock next to the web address. That padlock means two things. First, that you're talking to your real bank. And second that nobody can read what you type, like your password. So how does your browser know the website is real? It checks the website's certificate. Think of it like an ID card for a website. Your Aadhaar is trusted because the government issued it. A website's ID card is trusted because a certificate authority issued it. A certificate authority, or CA, is a company that browsers like Chrome, Firefox and Safari already trust. If a CA says "yes, this really is this bank's website," your browser believes it and shows the padlock. eMudhra is an Indian CA. It's a big one, with more than 60 million certificates issued over the years. So how does a CA sign these ID cards? Every CA has a secret number called a private key. It uses that number to put a stamp on each certificate. Your browser checks the stamp to confirm it really came from that CA. The whole system only works if that number is impossible to guess. For the type of key in this story, it's supposed to be around 116 digits long. Every computer on Earth working together for billions of years wouldn't be able to guess a number like that, just because of the sheer combinations that exist. But here's what happened. On October 17, Mozilla got a report that the private keys behind eight eMudhra certificates had been compromised. The report came through a person called Wayne on Google's Chrome team. The keys weren't 116 digits long. All eight keys were smaller than 256. Security researcher Scott Helme found that one of them was just the number 4. Others were 66, 155, 156, 230 and 237. So anyone could break them by trying 256 numbers. A basic laptop does that in less than a second. Mozilla didn't need to know how Wayne did it. Its own team recovered the keys within two hours. Since then, several other people have found them on their own too. To understand the gravity of the problem, a bad actor could make fake ID cards for any website they want. Your bank, your email, a government portal. Browsers that trusted eMudhra would have checked the fake stamp and shown the padlock like everything was fine. If someone could get between you and the internet, say on public Wi-Fi, they could show you a fake site with a real-looking padlock and read or change what you send. eMudhra says a script used during its key creation process back in April 2025 had a flaw. It made a second, much weaker set of keys, and those were used by mistake to create the certificates. That means these weak keys were there for about a year and a half before anyone caught it. eMudhra says the person who found it may have used AI-assisted techniques. The good news is that the response was fast. Mozilla received the report at 8:06 pm UTC on October 17 and had pushed a block to Firefox users by 10:59 pm. Google, Apple and Microsoft have also blocked these certificates for their users. eMudhra revoked all eight the next morning and stopped issuing new certificates from the affected root. Mozilla is now removing that root certificate from Firefox's trusted list altogether. But there's still a lot of clean-up to do. Browsers are mostly covered. But plenty of apps, servers and backend systems don't check these block lists. They need software updates to stop trusting the bad certificates, and some of those updates are still pending. Real websites that used eMudhra are also affected. Yash Kadakia, founder of Security Brigade, estimates around 30,000 legitimate certificates will need to be moved over. A lot of those are likely Indian businesses and services. See, we're moving our whole lives online, UPI, banking, tax filing, DigiLocker, government services. All of it rests on this invisible layer of trust. So, when an Indian company that's trusted by every major browser makes a mistake this basic, it hurts how the world sees Indian digital infrastructure. This has happened before, and it went very badly. In 2011, a Dutch CA called DigiNotar was hacked, and fake Google certificates were used to spy on people in Iran. Browsers stopped trusting it completely, and the company shut down soon after. For now, here's what you can do. Keep your browser and apps updated on your phone and laptop. Be careful on public Wi-Fi. Type your bank's website address yourself instead of clicking links. eMudhra still owes India a clear, public explanation of how a key that protects millions of people ended up being the number 4.

Woke up to Mom crying out for me. Turns out she'd slipped over a floormat and fallen down while getting water from the kitchen. Thankfully doesn't seem to be hurt badly but that sound of her crying out my name will always be my worst nightmare.

BREAKING: Hackers steal personal data of thousands of children after a UK company was breached using the password “Password1" — which had remained unchanged for 12 years.

🚨 UPDATE: India has launched a special investigation into eMudhra after 8 intermediate CA private keys were found trivially recoverable. CERT-In and Red Hat have issued fresh security alerts as the fallout extends beyond Chrome, Firefox, and Go. Read - thehackernews.com/2026/10/ei…

🇮🇳 🚨 INDIA: ADITYA BIRLA FASHION AND RETAIL EMPLOYEE DATA ALLEGEDLY LEAKED A threat actor on a dark web forum has posted a dataset they claim was taken from Aditya Birla Fashion and Retail Limited (ABFRL), the Aditya Birla Group retailer behind brands such as Pantaloons and Louis Philippe. The actor claims the data includes: * Employee names and corporate email addresses * Phone numbers * Hashed credentials and authentication tokens The sample appears to reference internal corporate mail domains. No record count was given, and the claim has not been independently verified. ⚠️ Analyst Note: If authentic, employee credentials and tokens raise the risk of account takeover, targeted phishing and lateral movement inside corporate systems. ABFRL staff should expect lookalike emails and password-reset lures; token revocation and MFA are the priority. Unverified threat-actor claim, NOT confirmation that ABFRL systems were breached. #DDW #DarkWeb #India #AdityaBirla #ABFRL #Retail #DataBreach #ThreatIntelligence

🇮🇳 🚨 INDIA: SCARLETTGROUP CLAIMS RAJASTHAN POLICE ON ITS LEAK SITE The data-extortion group ScarlettGroup has listed Rajasthan Police, the state law enforcement agency of Rajasthan, India, as a victim on its leak site. The listing carries only a generic description of the force. No data volume, file list or sample has been shown, and the group has not said what it allegedly took. ScarlettGroup is a new actor that surfaced in October 2026. It is also behind the extortion claim against US software company Genesys, which has since confirmed unauthorized access to its internal CRM and learning systems. The Rajasthan Police claim has not been independently verified, and the force has not publicly confirmed an incident. ⚠️ Analyst Note: Days before the listing, the Rajasthan Police cyber wing warned government staff that leaked official email credentials were circulating on the dark web, with risk to state SSO, SecLAN and RajSWAN systems. That advisory does not confirm this claim, but credential exposure is a common entry point. We assess this as an unverified threat-actor claim, NOT confirmation of a breach. #DDW #DarkWeb #India #Rajasthan #RajasthanPolice #ScarlettGroup #Ransomware #Extortion #LawEnforcement #ThreatIntelligence #CyberSecurity

🚨 BREAKING: AI-enabled ransomware hackers using Claude left their logs on an open server. SOCRadar found 8k+ AI messages from INC and The Gentlemen affiliates using Claude and Kimi, plus 46 INC encryptor builds. To fight refusals, they authorized it by calling it red-teaming.

“we’d be profitable if we didn’t lose $80 billion”

When your singular movie costs more than the entire Dune trilogy COMBINED, it deserves any and every bit of pedantic criticism it gets.

❗️ Apple records tie "Machiaveli", a dark web cocaine vendor with thousands of orders, to a Spokane man, US postal inspectors say. They show his ProtonMail address is registered to Salim Ghulam Nabi. His LinkedIn headline reads "E-commerce Business Owner". 💀 He's not lying.