Kenya In Focus

[Mike Kipruto @itsMikeKipruto]

Easy Digital Downloads now lets you manage subscription data through AI assistants.

You can investigate customer charges, identify failed renewals, analyze cancellations, and forecast recurring revenue using natural-language prompts instead of manually digging through reports.

AI handles the analysis. Refunds and cancellations stay under your control.

[Mike Kipruto @itsMikeKipruto]

Google DeepMind unveils Genie 4, its most realistic and interactive world model yet.

It lets users steer dynamic worlds in real time, change actions and camera angles, and interact with characters that can speak, while simulating realistic physics and generating matching audio.

[Mike Kipruto @itsMikeKipruto]

Black Friday discounts can drive sales while quietly eating into your margins.

WPBeginner makes a good point here: keep discounts modest on bestsellers, clear old stock with deeper cuts, and use bundles to add value without sacrificing as much profit.

More sales mean little if you’re losing money on every order.

[Mike Kipruto @itsMikeKipruto]

Mozilla has released Firefox 159, addressing numerous security vulnerabilities rated high impact.

The fixes include:
• CVE-2026-117861: Sandbox escape
• CVE-2026-117860: Same-origin policy bypass
• Privilege escalation flaws
• Numerous memory-safety bugs
These affect critical browser security boundaries.

Review the advisory:
https://t.co/P8vjbihLv5

[Mike Kipruto @itsMikeKipruto]

Apple has patched CVE-2026-86950, a CoreGraphics flaw that could allow arbitrary code execution when processing a maliciously crafted file.

Apple says it may have been exploited in targeted attacks against specific individuals.

iOS 18.7.11 and iPadOS 18.7.11 bring the fix to older devices.

[Mike Kipruto @itsMikeKipruto]

Keystone is destroying 18,835 hardware wallets after hackers stole the key used to verify device authenticity.

The breach also exposed 25,964 buyer records.

Private keys and recovery phrases weren't compromised, but counterfeit devices could pass the authenticity check.

A trusted verification process is only as strong as the secrets behind it.

[Mike Kipruto @itsMikeKipruto]

North Korea-linked Lazarus hackers are abusing South Korean banking security software to deploy malware.

Operation FlashHole uses DLL sideloading, GitHub-hosted payloads, and memory-based execution to evade detection.

The malware also uses ML-KEM-1024 for post-quantum encrypted communications.

[Citizen TV Kenya @citizentvkenya]

Personal branding on public-funded projects is illegal; Court rules https://t.co/IMxc8YY2HC

[Mike Kipruto @itsMikeKipruto]

🚨 Palo Alto Networks confirms a critical Brotli vulnerability affecting some PAN-OS firewall deployments.

CVE-2026-111497 carries a CVSS score of 9.2.

A crafted compressed stream could trigger memory corruption, expose sensitive data, crash services, or potentially execute code.

No active exploitation reported.

Official advisory: https://t.co/2VTiVvmPJU

[Mike Kipruto @itsMikeKipruto]

180,000 infected computers. One disrupted command-and-control operation.

Australia cut off a cybercriminal's access to Amadey-infected machines, but the malware wasn't removed.

Disrupting the attacker is only half the job. Infected systems still need remediation, and stolen credentials may remain exposed.

[Mike Kipruto @itsMikeKipruto]

OpenAI patched a flaw that let researchers extract hidden AI reasoning through its compaction workflow.

The encryption wasn't broken. The workflow was abused.

A critical AI security lesson: protecting sensitive data means securing every process that handles it, not just encrypting it.

[Sheikh Marghubali 🇰🇪 @sheikhmargub]

I've been a DStv customer for many years, these new packages coming on 5th November are a surprise.
After years of annual price increases, suddenly we have such drastic reductions and much better value?
Have customers finally been heard, or is competition forcing a rethink?
@DStv_Kenya, care to explain?

[Mike Kipruto @itsMikeKipruto]

Learn how to install and use it: https://t.co/QVRGH92ckk

[Mike Kipruto @itsMikeKipruto]

A form submission tells you who contacted your business. WPForms User Journey helps you understand what they did before reaching out.

When someone submits a form, you can see the pages they visited, available referral information, time spent on each page, and URL parameters, all within the form entry details.

That means you can spot patterns, such as leads regularly visiting your pricing page before enquiring, or potential customers reading a specific service page before requesting a quote.

You can use those insights to improve landing pages, refine your content, and understand which parts of your website support conversions.

You can even include journey details in form notification emails using WPForms' Entry User Journey Smart Tag.

Instead of treating every submission as an isolated lead, you get more context to help you decide what to improve next.

[Moe @moneyacademyKE]

Producing a 250ml bottle of spirit costs around Sh185, yet some “legitimate” manufacturers sell theirs at Sh140–160 per bottle.

This raises concerns about authenticity, tax compliance and consumer safety, according to the Alcoholic Beverages Association of Kenya.

[Moe @moneyacademyKE]

Kenyan taxpayers could pay Sh181 billion if the government cancels the 30-year Rironi–Mau Summit highway concession.

The amount is a potential termination liability, not an immediate bill, according to the National Treasury.

[Mike Kipruto @itsMikeKipruto]

Tailscale has confirmed serious privilege-escalation issues in Tailscale SSH.

The Tailworm research describes how a compromised device could potentially lead to root access on other servers, depending on permissions and configuration.

No CVE or patched release yet. Tailscale is targeting a fix within 24 hours.

Mitigate SSH forwarding now.

[Mike Kipruto @itsMikeKipruto]

A researcher who gained root access to a 2025 Samsung Smart TV claims to have uncovered extensive tracking capabilities, including automatic content recognition, screenshot handling, geolocation, network mapping, audio-event telemetry and AI-driven viewer profiling for targeted advertising.

The findings remain unverified on an unmodified TV.

[Nelson Amenya @amenya_nelson]

Wakenya wanangoja wapangwe na pilgrimage za wamunyoro. 🫴🏾

[Mike Kipruto @itsMikeKipruto]

Two critical Wasmtime sandbox escapes, both rated CVSS 9.9:

• CVE-2026-115889 affects all architectures.
• CVE-2026-115893 affects ARM64.
Both flaws are in Cranelift, Wasmtime’s default compiler. A malicious WebAssembly module could escape its sandbox.

If your application embeds Wasmtime, update the dependency. Updating the CLI alone is not enough.