GobblesGobbles
GobblesListen to today's tech podcast

A critical SQL injection flaw in Drupal — the CMS running websites for millions of government agencies and enterprises — is being actively exploited right now, and CISA just added it to its "actively weaponized" watch list.


A Berlin Startup No One's Heard of Just Hit $10M ARR — In Months

Six months ago, Peec AI had $4 million in annualized revenue and a freshly closed $21 million Series A that valued the company at just over $100 million. Then something unusual happened: the business actually grew. According to TechCrunch, the Berlin-based startup more than doubled its annualized revenue in a matter of months, blowing past the $10 million mark — the kind of trajectory that makes venture capitalists forget they were ever skeptical of European tech.

Peec AI sells what it calls "Generative Engine Optimization" — essentially SEO, but for AI search platforms like ChatGPT and Perplexity instead of Google. The pitch is simple and increasingly urgent: as more consumers skip search engines entirely and ask AI chatbots for product recommendations, brands that don't show up in those answers are effectively invisible. Peec helps them get visible. With AI search adoption accelerating faster than most brands' marketing budgets can react, the timing is nearly perfect.

This is the rarest thing in tech right now — a startup with a real problem, a real product, and real money coming in.

Gobbles Gobble's Take: While half of Silicon Valley is still pitching "AI-native" with zero revenue, a Berlin team figured out that brands will pay serious money to exist in the answers ChatGPT gives your customers.

Source: TechCrunch


KULR's Space Battery Just Won a Lunar Contract — and the Stock Jumped 28%

KULR Technology Group, a Texas-based thermal management and battery safety company most investors hadn't heard of last week, is now 28% more expensive after announcing it will supply its KULR ONE Space battery systems to Argo Space Corp. for an upcoming orbital mission. The contract is significant because the K1S batteries are engineered to NASA safety standards, built to survive the extreme temperature swings and radiation levels beyond low Earth orbit — conditions that have killed spacecraft before.

Argo Space, founded in 2021, isn't running routine cargo hauls. The company is developing reusable, refuelable orbital transfer vehicles and has plans to harvest water from lunar regolith to produce in-space propellant — a capability that would dramatically reduce the cost of deep space operations. KULR's battery tech sits at the heart of making that possible. The space battery market is projected to reach $5.61 billion by 2030, according to industry analysts, as missions push further from Earth and power demands grow more extreme.

For a company most people had never googled before Thursday, KULR just found itself at the center of the most capital-intensive technology race on the planet.

Gobbles Gobble's Take: The new space economy isn't just rockets and billionaires — it's a thousand niche hardware companies you've never heard of quietly becoming irreplaceable.

Source: Yahoo Finance


Drupal's Core Is Cracked — And Attackers Are Already Inside

Website administrators running Drupal on PostgreSQL databases woke up to a bad morning. A SQL injection vulnerability in Drupal's core database abstraction layer — tracked as CVE-2026-9082 — has been confirmed under active exploitation, and CISA has added it to its Known Exploited Vulnerabilities catalog, the agency's running list of bugs that aren't theoretical anymore. An unauthenticated attacker can send specially crafted requests that bypass normal database protections and execute arbitrary SQL queries, no login required.

The practical consequences run from bad to catastrophic: stolen password hashes, altered or deleted records, and in the worst cases, full remote code execution on the host server. A proof-of-concept exploit is already circulating publicly, which means the barrier to attack just dropped from "nation-state hacker" to "someone with a Google search." Drupal has released patches across all supported versions — but the window between "patch available" and "patch applied" is exactly where attackers live. Government agencies, enterprises, and university systems are disproportionately represented in Drupal's user base, which raises the stakes considerably.

If you manage a Drupal site and haven't patched in the last 48 hours, assume someone has already tested your defenses.

Gobbles Gobble's Take: CISA adding a bug to the KEV list is the cybersecurity equivalent of a fire alarm — administrators who treat it as background noise will learn the hard way.

Source: The Hacker News


Quick Hits

  • Root-level exploit in LiteSpeed's cPanel plugin: CVE-2026-48172 is being actively exploited to run scripts as root on web servers running LiteSpeed — used by roughly 14% of websites globally — giving attackers full control of compromised hosts; check with your hosting provider immediately. The Hacker News

In Case You Missed It

Yesterday's top stories:

Was this briefing useful?

One tap helps Gobbles learn what to cover more carefully.

Get Tech Gobbles in your inbox

Free daily briefing. No spam. Unsubscribe anytime.

See something wrong? Report an inaccuracy