Listen to today's tech podcastA critical SQL injection flaw in Drupal — the CMS running websites for millions of government agencies and enterprises — is being actively exploited right now, and CISA just added it to its "actively weaponized" watch list.
A Berlin Startup No One's Heard of Just Hit $10M ARR — In Months
Six months ago, Peec AI had $4 million in annualized revenue and a freshly closed $21 million Series A that valued the company at just over $100 million. Then something unusual happened: the business actually grew. According to TechCrunch, the Berlin-based startup more than doubled its annualized revenue in a matter of months, blowing past the $10 million mark — the kind of trajectory that makes venture capitalists forget they were ever skeptical of European tech.
Peec AI sells what it calls "Generative Engine Optimization" — essentially SEO, but for AI search platforms like ChatGPT and Perplexity instead of Google. The pitch is simple and increasingly urgent: as more consumers skip search engines entirely and ask AI chatbots for product recommendations, brands that don't show up in those answers are effectively invisible. Peec helps them get visible. With AI search adoption accelerating faster than most brands' marketing budgets can react, the timing is nearly perfect.
This is the rarest thing in tech right now — a startup with a real problem, a real product, and real money coming in.
Gobble's Take: While half of Silicon Valley is still pitching "AI-native" with zero revenue, a Berlin team figured out that brands will pay serious money to exist in the answers ChatGPT gives your customers.
Source: TechCrunch
KULR's Space Battery Just Won a Lunar Contract — and the Stock Jumped 28%
KULR Technology Group, a Texas-based thermal management and battery safety company most investors hadn't heard of last week, is now 28% more expensive after announcing it will supply its KULR ONE Space battery systems to Argo Space Corp. for an upcoming orbital mission. The contract is significant because the K1S batteries are engineered to NASA safety standards, built to survive the extreme temperature swings and radiation levels beyond low Earth orbit — conditions that have killed spacecraft before.
Argo Space, founded in 2021, isn't running routine cargo hauls. The company is developing reusable, refuelable orbital transfer vehicles and has plans to harvest water from lunar regolith to produce in-space propellant — a capability that would dramatically reduce the cost of deep space operations. KULR's battery tech sits at the heart of making that possible. The space battery market is projected to reach $5.61 billion by 2030, according to industry analysts, as missions push further from Earth and power demands grow more extreme.
For a company most people had never googled before Thursday, KULR just found itself at the center of the most capital-intensive technology race on the planet.
Gobble's Take: The new space economy isn't just rockets and billionaires — it's a thousand niche hardware companies you've never heard of quietly becoming irreplaceable.
Source: Yahoo Finance
Drupal's Core Is Cracked — And Attackers Are Already Inside
Website administrators running Drupal on PostgreSQL databases woke up to a bad morning. A SQL injection vulnerability in Drupal's core database abstraction layer — tracked as CVE-2026-9082 — has been confirmed under active exploitation, and CISA has added it to its Known Exploited Vulnerabilities catalog, the agency's running list of bugs that aren't theoretical anymore. An unauthenticated attacker can send specially crafted requests that bypass normal database protections and execute arbitrary SQL queries, no login required.
The practical consequences run from bad to catastrophic: stolen password hashes, altered or deleted records, and in the worst cases, full remote code execution on the host server. A proof-of-concept exploit is already circulating publicly, which means the barrier to attack just dropped from "nation-state hacker" to "someone with a Google search." Drupal has released patches across all supported versions — but the window between "patch available" and "patch applied" is exactly where attackers live. Government agencies, enterprises, and university systems are disproportionately represented in Drupal's user base, which raises the stakes considerably.
If you manage a Drupal site and haven't patched in the last 48 hours, assume someone has already tested your defenses.
Gobble's Take: CISA adding a bug to the KEV list is the cybersecurity equivalent of a fire alarm — administrators who treat it as background noise will learn the hard way.
Source: The Hacker News
Quick Hits
- Root-level exploit in LiteSpeed's cPanel plugin: CVE-2026-48172 is being actively exploited to run scripts as root on web servers running LiteSpeed — used by roughly 14% of websites globally — giving attackers full control of compromised hosts; check with your hosting provider immediately. The Hacker News
In Case You Missed It
Yesterday's top stories:
- Meta Slips a Reddit Killer Out the Side Door While Nobody Was Watching
- Microsoft Canceled Its Own Internal Anthropic Licenses Because Token-Based AI Billing Is a Budget Grenade
- An Author Let AI Help Write His Book. It Invented Quotes. He Still Wants to Use It.
- GitHub Was Supposed to Win the AI Coding Race. Then the Outages Started.
- Trump Postponed His AI Oversight Order, and the Delay Is Already the Policy
Related reads
Other Gobbles stories on similar themes.
A Canadian-German AI Merger Just Created a $1.2B Rival Aimed Directly at Silicon Valley's Throat
The Drone Company That Quietly Returned 1,000%
Lunar Outpost Secures $30 Million Series B Round
Japan's Shoebox Satellites Just Took a Giant Leap for Research
Was this briefing useful?
One tap helps Gobbles learn what to cover more carefully.
Get Tech Gobbles in your inbox
Free daily briefing. No spam. Unsubscribe anytime.
