Technology

Judge Leonie Brinkema of the Eastern District of Virginia has ordered Google to implement six years of behavioral remedies for its ad-tech business, requiring new APIs connecting AdX and DFP to the Prebid header-bidding platform and prohibiting preferential treatment of Google's own tools. The court rejected all three structural remedies sought by plaintiffs, finding divestiture of AdX neither feasible nor necessary given the behavioral relief ordered. A Monitor and three-member Technical Committee will oversee compliance, with parties required to submit a jointly proposed Final Judgment by October 2, 2026.

On September 18, 2026, CISA added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, with a federal remediation deadline that has already passed. The three flaws span a critical TLS receive-path bug (CVSS 9.8), a high-severity cryptographic-socket race condition (CVSS 7.8), and a high-severity ebtables SNAT memory-write flaw (CVSS 8.8), affecting kernel versions ranging from 5.4 through current releases. Patch availability varies significantly by distribution and branch, with some Ubuntu and Amazon Linux lines still showing vulnerable or pending status, making system-specific inventory and targeted patching the required response rather than a single universal fix.