Tech IT News Today: Breaches & Cooling (Nov 2026)

Top story

The biggest IT story circulating on November 2, 2026, is a breach of Florida's student financial aid website. According to SecurityWeek, the Florida Department of Education says the incident may have affected about 4.9 million people. The department discovered the intrusion on October 19 and says it has been contained; how the attackers got in is still unknown, and no group has claimed responsibility. The exposed data includes Social Security numbers, names, dates of birth, home addresses, phone numbers and email addresses, the kind of data that can be abused for identity theft at scale. The department says students' existing aid, disbursements and eligibility are not affected.

Hardware

On November 2, 2026, MarketScale reported that AI chip power is climbing fast. Citing Dell'Oro Group, it says leading-edge GPUs are projected to exceed 4,000 watts of thermal design power by 2029, and that rising accelerator power and rack density are pushing air cooling beyond practical limits. Dell'Oro also forecasts the data center liquid cooling market to reach about $7 billion in manufacturer revenue by 2029. Racks are moving toward megawatt scale: NVIDIA's MGX 1.2 specification supports racks up to 250 kW, today's racks sit around 100 kW, and the Open Compute Project community sees a path to 1 MW racks, though likely later than earlier roadmaps suggested. This matters because it reshapes data center design, raises energy and infrastructure costs, and forces operators to rethink cooling.

Security and cloud

SecurityWeek's coverage around November 2 pointed to a busy stretch for breaches and defensive moves across several sectors:

• The Florida student aid website breach, which may affect about 4.9 million people.
• A Revolve data breach: the SecurityWeek article, updated on November 3, now says at least 200,000 people were affected (breach notices filed with state attorneys general cover about 197,000 people).
• Google introduced a $250,000 top reward tier in its Cloud Vulnerability Reward Program for "root-in-cloud" flaws that could give full administrative control of a cloud project.
• A fake Claude Code extension (not made by Anthropic) was distributed through Cursor's extension marketplace for about 11 hours on October 29, showing that developer tools remain a weak link for injecting malware.
• Chainalysis disclosed a data breach following an AI-driven cyberattack.
• Polymarket returned $3.9 million to traders after DebugBear cited a DNS hijack.
• The FBI attributed the roughly $6.3 billion Binance theft to North Korea's TraderTraitor group and published more than 600 attacker addresses.

Together these stories show that threats are hitting many targets at once: public-sector websites, retail platforms, developer tooling, blockchain analytics firms and prediction markets. Breach exposure is no longer confined to one industry.

Industry

Oracle used its AI World event (October 26, 2026) to introduce Claw-powered agentic applications for its Fusion Applications suite. It also unveiled its Deep Trust AI Architecture and added Autonomous AI Lakehouse tools that let AI agents query data across connected systems. Oracle says the agentic apps keep routine actions within guardrails and surface only exceptions for human decision. This matters because it shows large software vendors packaging automation and data-management tools together.

Why it matters

The common thread across these stories is infrastructure under pressure, whether that is data centers struggling to cool increasingly power-hungry chips or digital platforms struggling to keep sensitive data safe. As AI workloads push chip power higher, and as attackers find new entry points through extensions, DNS and web portals, both hardware design and cybersecurity practices are being forced to adapt quickly.