Zit

Tech industry commentator Ed Zitron appeared on The Tech Report this week, arguing that Nvidia can compel large customers like Microsoft to buy and hold vast quantities of AI chips that sit idle. He noted Microsoft's own chief executive has admitted to holding chip inventory the company cannot yet connect, fuelling debate over whether data centre buildouts can keep pace with Nvidia's supply commitments.

Management platform Twizzit has suffered a data breach after attackers exploited a vulnerability to steal personal details of more than 1.2 million users across roughly 5,500 organizations. The stolen data reportedly includes names, email addresses, and other personal information. Security communities are discussing the incident as a further example of how a single platform vulnerability can put large numbers of users at risk.

The US budget deficit has climbed to nearly $2 trillion, with interest costs exceeding $1.1 trillion. Rising yields on US Treasury bonds are putting pressure on risk assets, with commentators noting the strain is also weighing on the S&P 500 and Bitcoin as investors watch Washington's fiscal trajectory.

Ed Zitron, a tech industry critic, argues Microsoft has amassed roughly $80 billion worth of AI chips and data center capacity that it cannot fully power or use. His commentary feeds into a wider debate about whether Big Tech's massive AI infrastructure spending will pay off or become a costly overbuild.

An appellate court ruling requires Belgium to cut CO2 emissions by 55 percent by 2030, yet the country is still below a 30 percent reduction. Critics say Belgium is failing to comply with the judgment and is not taking its responsibility at the European level, thereby breaching climate obligations. The ruling adds to pressure on the Belgian government to strengthen its climate policy.

The GFZ German Research Centre for Geosciences reports that the water deficit in Germany and Europe has worsened in recent years. The findings are based on current data from the GRACE Follow-On satellite mission, operated by GFZ together with NASA, which tracks changes in water storage from space.

Security researchers disclosed a cluster of seven vulnerabilities in ZITADEL, an open-source identity and access management platform. The most severe, CVE-2026-105209 with a CVSS score of 9.3, involves forging the x-zitadel-orgid header to trigger passkey enrollment for arbitrary users, potentially allowing full account takeover across tenants. Another flaw, CVE-2026-105215 (9.1), enables pre-hijacking accounts via forged identity provider callbacks. Administrators are urged to patch promptly.

Posts in Dutch claim Israel has released its own version of a documentary titled NAZA since 30 September to undermine the original film. Commenters argue that the effort put into producing a competing copy is itself the best proof that the original documentary contains uncomfortable truths. The debate is unfolding amid wider discussions about Israel and media coverage of the Middle East conflict.

An investigation claims the United Arab Emirates is relying on Aviacon Zitotrans, a Russian cargo airline linked to Moscow's war effort, to carry out missions in Africa. The company has been sanctioned by the United States, Canada and Ukraine for supporting Russia's invasion. The report raises questions about Gulf-Russian cooperation and sanctions enforcement.

Security analyst Hugo Valters reports that Zitadel, the open-source identity and access management platform, carries a D trust score based on 41 published CVEs, a maximum severity of 9.3, and 97% of vulnerabilities left unpatched. Authentication flaws classified under CWE-287 recur in the vendor's history. He urges organisations to assess their exposure before deploying the software.

Security researchers are flagging a possible phishing attack involving the website dietzens.de. A malicious URL on the site's quote search page appears to exploit an image injection technique, redirecting visitors to an external address. The alert, shared on Mastodon by the threat-intelligence account urldna, has drawn attention from the infosec community, who urge users to avoid clicking unsolicited links pointing to the domain.