Skip to main content

Cletus's Blog

Cyber - 2026-11-02 - EVE

## Krebs on Security

View Articles

570 - Search - Widespread PHP Flaw May Cause Many Site Outages Today

571 - Search - Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

572 - Search - U.K. Sanctions Cryptomus for RU Money Laundering

573 - Search - How Cryptocurrency Turns to Cash in Russian Banks

574 - Search - a record CAD $176 million fine

575 - Search - Microsoft Patches More Than 1,400 Security Flaws

576 - Search - FBI Arrests Executive at Ransomware Negotiation Firm

577 - Search - ShinyHunters Extorted Boeing Spin-off Prior to Arrests

578 - Search - our November 2025 profile of Rey

579 - Search - Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

580 - Search - U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

581 - Search - was likely a U.S. soldier stationed in South Korea

582 - Search - pleaded guilty to operating theSatoribotnet

583 - Search - pleaded guilty in August 2026

584 - Search - a 2021 data breach at T-Mobile

585 - Search - Data Broker Radaris Loses Domains in Privacy Fight

586 - Search - a deep dive into the Radaris co-founders

587 - Search - using a fictitious CEO’s name

588 - Search - Microsoft Plugs Nearly 1,000 Security Holes

589 - Search - previous record set in July

590 - Search - How to Break Into Security

## Symantec Enterprise Blogs

View Articles

591 - Search - Cloud C² — Command & Control

592 - Search - Essential, Elite and Red Team

593 - Search - Terms of Service & Policies

594 - Search - PAYLOAD AWARDSGet your payload in front of thousands and enter to win. Nearly $10,000 in annual Hak5 prizes!

595 - Search - DUCKYSCRIPT COURSELearn directly from the creators! Unlock your creative potential with this comprehensive course.

596 - Search - only for BIS license exception ENC favorable treatment countries

597 - Search - Core Email ProtectionGet industry-leading threat protection via API or gateway

598 - Search - Email Fraud DefenseProtect your brand, increase deliverability, and identify lookalike domains

599 - Search - ZenGuideDeliver targeted, risk-based security awareness training

600 - Search - Secure Email RelaySecure application email and implement DMARC faster

601 - Search - Account Takeover ProtectionDetect, investigate, and respond to account takeovers

602 - Search - Data Security for AISecure data across shadow and approved AI

603 - Search - Enterprise DLPPrevent data loss across email, cloud, and endpoints

604 - Search - Adaptive Email DLPPrevent misdirected emails and hidden data exfiltration

605 - Search - Insider Threat ManagementGet visibility into risky behavior by careless, malicious, and compromised users

606 - Search - Data Security Posture ManagementDiscover, classify, and protect sensitive data across cloud and hybrid environments

607 - Search - Digital Communications GovernanceIntelligently capture, retain, and discover digital communications

608 - Search - Secure AI Usage by PeopleGet visibility and control around employees’ use of AI

609 - Search - Secure AI Usage by AgentsUnderstand AI agent intent and control their use of other AI tools

610 - Search - Secure MCP Across Your EnterpriseUnify MCP discovery, authorization, and monitoring

611 - Search - Proofpoint NexusAdvanced AI and threat intel to detect threats and assess data risk

612 - Search - Proofpoint ZenIntegrated control points to protect people and data anywhere

613 - Search - Proofpoint SatoriThe power behind agentic security operations

614 - Search - Proofpoint 365 Total ProtectionEnabling the channel, protecting humans and agents

615 - Search - Ensure Acceptable GenAI UseEmpower your workforce with safe GenAI practices

616 - Search - Govern Claude AI ActivityIntegrate Proofpoint with Claude Compliance API

617 - Search - Secure Microsoft 365Implement flexible security and compliance for M365

618 - Search - Ransomware PreventionStop attacks by securing ransomware’s top vector

619 - Search - Combat Email and Cloud ThreatsProtect your people with a smart, holistic approach

620 - Search - Protect Cloud AppsEliminate threats and data loss across cloud apps

621 - Search - Change User BehaviorHelp your users identify, resist, and report attacks

622 - Search - Modernize Compliance and ArchivingManage your risk and data retention requirements

623 - Search - Authenticate Your EmailProtect your email deliverability with DMARC

624 - Search - Federal GovernmentEnable your agency with FedRAMP certified security

625 - Search - Higher EducationProtect your campus, people, data, and research

626 - Search - HealthcareProtect clinicians, patient data, and intellectual property

627 - Search - Internet Service ProvidersDeliver leading email protection for your networks and customers

628 - Search - State and Local GovernmentSecure your institutions, services, and communities against cyberthreats

629 - Search - Financial ServicesProtect your institution while meeting compliance requirements

630 - Search - Mobile OperatorsProtect your messaging environments and subscribers at scale

631 - Search - Small and Medium BusinessesStrengthen your business with enterprise-grade security built to grow with you

632 - Search - Proofpoint ServicesLeverage our expertise to maximize your investment

633 - Search - Advisory ServicesMaintain control with expert guidance and recommendations

634 - Search - Applied ServicesGet hands-on execution, guidance, and measurable impact

635 - Search - Resource libraryResearch, insights, and resources from Proofpoint experts.

636 - Search - BlogKeep up with the latest news and expert insights

637 - Search - Customer StoriesRead how customers solve their toughest security challenges

638 - Search - Cybersecurity AcademyBecome a Proofpoint Certified Guardian

639 - Search - EventsConnect and learn with peers at in-person events

640 - Search - WebinarsBrowse our complete webinar library

641 - Search - Threat glossaryLearn about the latest security threats and techniques

642 - Search - PodcastsStay informed with our renowned threat researchers

643 - Search - Threat Insight BlogDiscover actionable threat intel and expert analysis

644 - Search - IP Address Blocked?Best practices for email delivery, authentication, and troubleshooting

645 - Search - Support ServicesGet help with current incidents with Proofpoint products

646 - Search - Why ProofpointProofpoint provides intent-based protection for every human, every AI agent, across all data

647 - Search - LeadershipLearn about the executive team leading Proofpoint’s strategy and vision

648 - Search - ESGLearn about our environmental, social, and governance principles

649 - Search - Comparing ProofpointEvaluating security vendors? Check out side-by-side industry comparisons

650 - Search - News CenterRead press releases, news, and media highlights about Proofpoint

651 - Search - CareersMake a difference at one of the world’s leading security companies

652 - Search - AboutLearn more about the team driving human and agent-centric security

653 - Search - AI, Privacy and TrustLearn about our data handling, privacy, and compliance

654 - Search - English: Europe, Middle East, Africa

655 - Search - Corporate NewsOctober 15, 2026Sumit DhawanSecuring the AI Future Starts with Protecting Enterprise Data

656 - Search - Threat InsightOctober 14, 2026The Proofpoint Threat Research TeamDisruption Targets Major Chinese-Language Phishing Kits with Japanese Focus

657 - Search - Corporate NewsSeptember 23, 2026Tim ChoiProofpoint named a Pace Setter as of September 2026 in the Gartner Emerging Market Quadrant for AI Application Security — Established Vendors

658 - Search - Human Resilience & Security Awareness

659 - Search - September 22, 2026Sumit DhawanIn Cybersecurity, Behavior is a Signal. Intent is the Full Story.

660 - Search - September 09, 2026By Mark Kelly, Greg Lesnewich, Konstantin Klinger, Saher Naumaan, Julia Paluch, David Galazin, Stuart Del Caliz, and the Proofpoint Threat Research TeamOnce in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days

661 - Search - September 03, 2026Ryan KalemberWhy Proofpoint Is Signing On to Collective Cyber Defense with Frontier Labs

662 - Search - September 03, 2026Daniel Rapp, Kevin Epstein, Duane KurodaProofpoint Introduces SOC Analyst Agent, Powered by OpenAI Daybreak Models Through Daybreak Defense Network

663 - Search - Identity & Access Mgmt Security

664 - Search - Devs Hit by Trojanized Claude Code Extension for Cursor

665 - Search - Undead Software Projects Continue to Raise Security Risks

666 - Search - Heard It From a CISO

667 - Search - As Russia’s Cyberwar Evolves, Belarus Steps Forward

668 - Search - Anthropic-Themed Phishing Emails Bypass Top Security Tools

669 - Search - Rethinking Cybersecurity Awareness in the AI Era

670 - Search - Claude Model Builds Exploits Across Major Browsers & OSes

671 - Search - Threat Modeling With 4 Simple Questions on a White Board

672 - Search - Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes

673 - Search - Cyber Vulnerabilities Besiege Italy, Absent Clear Cause

674 - Search - GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub

675 - Search - Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

676 - Search - Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature

677 - Search - 3 Frameworks to Protect CISOs & Orgs Against AI Liability

678 - Search - External Teams Chats Anchor 15-Minute Malware Delivery

679 - Search - SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack

680 - Search - Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills

681 - Search - ‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants

682 - Search - Risks & Rewards: How AI Is Redefining the CISO’s Role

683 - Search - In-the-Wild Attack Abuses AI Agents’ Trust in Markdown

684 - Search - ‘Gheist’ Weaponizes GitHub Tokens to Steal Cloud Secrets

685 - Search - Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

686 - Search - AI Tools Are Generating Massive Attacks for Little Cost

687 - Search - Cyber Insurance’s New Reality: Underwriting Isn’t Enough

688 - Search - State Bank of India Suffers a Customer PII Data Leak

689 - Search - Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

690 - Search - What We Missed: Feds Lasso Texas Laptop Farms

691 - Search - UAE Transitions 50% of Government Services to Agentic AI

692 - Search - TiDB Breach Exposes Flawed Cloud Security Assumptions

693 - Search - ‘PHP2Shell’ Bugs Signal Red Alert for Security Industry

694 - Search - OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors

695 - Search - Decades-Old Windows Utility Powers Modern ClickFix Attack

696 - Search - Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys

697 - Search - Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ

698 - Search - Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree

699 - Search - Researchers Infiltrate Microsoft Tech Support Scam Operation

700 - Search - As AI Risks Grow, Insurers Split on Covering the Damage

701 - Search - AI Takes Root in Hospital Corridors, Raises Security Stakes

702 - Search - The Future of the Datacenter

703 - Search - The State of Storage 2026

704 - Search - Linus Torvalds says Linux kernel is out of ‘stabilization phase’ and using ‘much healthier model’ for AI contributionsYet machine-made patches ‘often get rewritten’

705 - Search - Landline phones will switch off across Britland in 100 days, no extensions – OpenreachLegacy public switched telephone network service is to be retired on January 31, 2027

706 - Search - ‘Mother of all editors’ Emacs is 50By a startling coincidence, so is its arch-rival Vi

707 - Search - Amazon sends chills through its workforce with mixed message memo about AI useA lot of software engineers feel bleak about the future of the profession

708 - Search - Backbone of a beast – charting Nvidia’s rise to networking titanHow a $6.9B bet on Mellanox made Nvidia bigger than Cisco, and the world’s most valuable company to boot

709 - Search - Google’s AI satellite sends a very expensive haiku to EarthExperimental orbital datacenter prototype puts its TPU to work producing poetry

710 - Search - HTTP/3 is faster with some work and help from CloudflareHow the Uber-bound delivery giant tuned its mobile networking stack to cut latency

711 - Search - Voyager 1 gives controllers the silent treatment

712 - Search - Google struggling to make AI Mode searches pay

713 - Search - ON CALLFarm PC ‘maintained’ by a 14-year-old dumped support chap in a steaming pile of tech mess

714 - Search - AI Arms Race Puts Sovereign Supply Chains in the Spotlight

715 - Search - How to Evaluate CPU Performance for Agentic AI

716 - Search - Intel’s $2.3 Billion Bet on a Quantum Future is a Decade in the Making

717 - Search - Oracle is Expanding the Accelerator Options in OCI for Enterprises

718 - Search - Sandisk’s flash revenue rocket accelerates some more

719 - Search - Samsung memory virtually printing money

720 - Search - Cohesity protects HashiCorp’s self-hosted Terraform hybrid cloud control plane

721 - Search - Seagate: Hyperscalers hot for HAMR

722 - Search - HTTP/3 is faster with some work and help from Cloudflare

723 - Search - Topcoat enables Rust to render server-side web apps

724 - Search - Node.js creator ditches Deno to work on open source Cloudflare Workers

725 - Search - Python 3.15 goes global with UTF-8 support

726 - Search - OPINIONHugging Face is too important to fall into Nvidia’s hands$12.9 billion deal will inevitably cement Nvidia’s market dominance and harm competition in the process. Regulators should take note

727 - Search - NASA ponders a Hubble servicing mission or a controlled deorbit2 days ago

728 - Search - BattMan aims to turbocharge US batteries without robbin’ critical minerals3 days ago

729 - Search - Boffin’s software found a possible dwarf planet - a result so rare he thought it must be a bug3 days ago

730 - Search - How to access the Dark Web using the Tor Browser

731 - Search - How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11

732 - Search - How to use the Windows Registry Editor

733 - Search - How to backup and restore the Windows Registry

734 - Search - How to start Windows in Safe Mode

735 - Search - How to remove a Trojan, Virus, Worm, or other Malware

736 - Search - How to show hidden files in Windows 7

737 - Search - How to see hidden files in Windows

738 - Search - [Guide] How to identify risky OAuth grants and MCP server connections

739 - Search - Reach out to get featured—contact us to send your exclusive story idea, research, hacks, or ask us a question or leave a comment/feedback!

740 - Search - Barracuda has appointed Dan Fletcher as CFO.

741 - Search - More People On The Move

742 - Search - Weekly Update 528: Reading AI-generated Code & the Economics of Solar

743 - Search - Weekly Update 527: Cybergeddon News v. Reality

744 - Search - Weekly Update 526: Building HIBP AI/SI First

745 - Search - Weekly Update 525: AI Data Breach Hyperbole

746 - Search - Weekly Update 524: Live From Copenhagen

747 - Search - Weekly Update 523: Live From a Norwegian Fjord

748 - Search - Weekly Update 522: Live From Oslo with Scott Helme

749 - Search - Weekly Update 521: Breach Perception v. Reality

750 - Search - Weekly Update 520: The Unscripted Edition

751 - Search - Weekly Update 519: Breaches & Data Integrity

752 - Search - Data breach disclosure 101: How to succeed after you’ve failed

753 - Search - Data from connected CloudPets teddy bears leaked and ransomed, exposing kids’ voice messages

754 - Search - Here’s how I verify data breaches

755 - Search - When a nation is hacked: Understanding the ginormous Philippines data breach

756 - Search - How I optimised my life to make my job redundant

757 - Search - The ‘Simple and Lethal’ Solution To Tackling Interoperability Challenges

758 - Search - ‘Unique’ Quantum Sensor Technology Shows Promise in Boosting Battlefield EMS Awareness

759 - Search - The NSF Pushes Integrated Quantum Systems Toward ‘Final Mile’

760 - Search - NASA Pushes to the Lunar Surface Amid Geopolitical Competition and Greater Military Ties

761 - Search - DOE Lab Seeks Science Life Partners

762 - Search - The Pharmacy Behind the Fight: Why Military Health IT at EDCA Sites Is a National Security Imperative

763 - Search - Trust, Transparency and Mission Command

764 - Search - On Point: Q&A With Dr. Britta Hale

765 - Search - President’s Commentary: Bridging Continents at Speed and Scale

766 - Search - Disruptive By Design: Speed and Rigor Are Not Enemies

767 - Search - AFCEAN of the Month, November 2026

768 - Search - DOW Works To Meet Post-Quantum Cryptography Deadlines

769 - Search - Military Leaders Outline Next Steps for USPACOM’s Warfighting IT Platform

770 - Search - USPACOM J6 Seeks Resilient Infrastructure Solutions From Industry

771 - Search - USPACOM Stresses C2, Industry Role in Deterrence

772 - Search - DISA Establishes Regional Network Operations Security Center Pacific

773 - Search - Building Tunnels: Securing Internet Access as a Public Utility

774 - Search - What Is Policy 8140? DOW Explains Initiatives in New Cyber Workforce Framework

775 - Search - CIA Deputy Director: Two Years Later, Salt Typhoon Still Presents ‘Real Threat’

776 - Search - Intel Community Revolutionizes System Development and Acquisition Strategies

777 - Search - The U.S. Military’s Achilles’ Heel: Acquisition

778 - Search - Gen. Brunson Raises Urgency for AI Technology Development in the Indo-Pacific

779 - Search - SSC International Affairs Chief Talks Allies for Developing Space Force

780 - Search - Shifting Away From Effect-Based Thinking: ‘War Is Not Billiards’

781 - Search - Can Coalitions Move at the Speed of Their Metadata?

782 - Search - Why Conduit Capacity Matters in Defense Network Modernization

783 - Search - The Encryption Gap: Why Networks Need a New Generation of Data Protection

784 - Search - GenAI.mil: How AI Is Freeing Warfighters To Focus on the Mission

785 - Search - Building an Intelligent Network Fabric for Command, Control and Defense

786 - Search - Rethinking the Meeting Experience With Mission-Embedded, AI-Enabled Collaboration Infrastructure

787 - Search - Advancing Geo Simulation Technology for Precision Missions

788 - Search - Bridging the Divide: How Grandinetta Group Is Redefining Military Transition

789 - Search - Data Centricity for Decision Advantage in Space: Unifying Operations in the Ultimate High Ground

790 - Search - From Carrier Pigeons to Sensor Fusion - Speed Matters in Information

791 - Search - President’s Commentary: 25 Years Since September 11

792 - Search - Disruptive By Design: Preventing AI Slop

793 - Search - On Point: Q&A With Daniel McCormack

794 - Search - Cross-Cloud Collaboration Paves the Way for Data Transparency: OPM’s Groundbreaking Analytics Solution

## Industrial Cyber

View Articles

795 - Search - Australia reports 20% rise in cyber incidents, nearly 80% jump in threat notifications amid critical infrastructure risksThe Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) responded to more than 1,500 cybersecurity incidents during 2025-26, an increase of more than 20% from the previous year, while notifying entities of potential malicious activity more than 4,400 times,…

796 - Search - NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposes safeguardsThe National Institute of Standards and Technology (NIST) has outlined 10 design tenets for agent identity management systems, calling for distinct identities, tightly scoped permissions, continuous monitoring and stronger accountability as organizations expand the use of AI agents. The guidance…

797 - Search - FDD urges NIST, NSA to evaluate vaultless, keyless pseudonymization as safeguard against ransomware attacksThe Foundation for Defense of Democracies (FDD) warned that encryption alone cannot adequately protect sensitive data as it moves across cloud platforms, third-party vendors, backup systems, analytics tools and artificial intelligence (AI) pipelines. Georgianna Shea, chief technologist at FDD’s Center…

798 - Search - CISA 2030 targets OT modernization, asset visibility, supply chain security through risk-based critical infrastructure defenseThe U.S. Cybersecurity and Infrastructure Security Agency released a new strategy that shifts the nation’s cyber defense from passive measures to finding and removing adversaries already inside critical infrastructure networks. Titled ‘CISA 2030: Defend, Harden, Prevail,’ the document supports the…

799 - Search - McCormick introduces Common-Sense Cloud Security Act to strengthen cloud defenses, protect critical infrastructureA U.S. Republican Representative from Georgia introduced the Common-Sense Cloud Security Act to strengthen cloud cybersecurity by directing the National Institute of Standards and Technology (NIST) to develop updated standards for protecting sensitive data, preventing cyberattacks and securing critical infrastructure.…

800 - Search - Manufacturing cybersecurity faces persistent governance gaps as accountability, funding, operational priorities divergeSecurity initiatives across manufacturing environments are unlikely to falter due to policy reasons; rather, they are likely to stall due to accountability, financing, and responsibility residing in disparate locations. Across multi-site enterprises, governance standards coexist with uneven delivery. For instance,…

801 - Search - Centrii flags audit risks as NERC CIP-003-9 tightens vendor remote access controls for low-impact BES systemsA new post from Centrii warned that new vendor remote access requirements under the North American Electric Reliability Corp.’s (NERC) Critical Infrastructure Protection standard CIP-003-9 are creating compliance and recordkeeping challenges for owners and operators of renewable energy, storage and…

802 - Search - Frenos warns advances in AI attack planning could increase cybersecurity risks for critical infrastructure, ICS systemsFrenos, an operational technology (OT) security company, estimates that critical infrastructure operators have about two years to prepare before artificial intelligence models can reliably plan cyberattacks against industrial systems, according to its inaugural annual State of AI in OT Security…

803 - Search - Critical PHP vulnerabilities raise worldwide concerns as government websites go offline, researchers report AI-assisted attacksGlobal cybersecurity agencies urge organizations to immediately patch two critical PHP vulnerabilities that could enable unauthenticated remote code execution on vulnerable web servers. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively referred to as PHP2Shell, affect PHP installations serving…

804 - Search - Upstream oil and gas: Securing operations across distance, remoteness and harsh environmentsUpstream oil and gas production is often determined by distance, with wellheads, gathering systems and offshore platforms relying…Oct 20, 202616 min read

805 - Search - Industrial Cyber Days Begins Tomorrow – An Invitation to the People Who Keep Critical Infrastructure RunningTomorrow, October 13, the global industrial cybersecurity community once again comes together for Industrial Cyber Days: Critical Infrastructure…Oct 12, 20269 min read

806 - Search - Anchoring maritime logistics backbone against rising tide of cyber threats targeting ports, vessels, supply chainsDigitization of the marine transportation system has brought deep weaknesses, especially where Terminal Operating Systems (ToS) are involved….Oct 06, 202617 min read

807 - Search - How decades of disconnected modernization created OT security debt manufacturers can’t escapeThe OT security crisis facing manufacturers today is fundamentally a debt crisis, accumulated over decades as systems grew…Sep 29, 202614 min read

808 - Search - AI adoption in OT security accelerates as legacy infrastructure and poor data expose readiness gapsIndustrial organizations are racing to adopt AI for operational security faster than their systems can support it. Takepoint…Sep 22, 202620 min read

809 - Search - Cyber-informed engineering shifts critical infrastructure security from protecting networks to engineering out consequencesCybersecurity in critical infrastructure has long centered on keeping adversaries out. But industrial systems operate under a different…Sep 15, 202623 min read

810 - Search - Cyberattacks on food and agriculture can turn disruptions into safety crises, threatening public health and supply chainsFood and agriculture tends to be an overlooked corner of the cybersecurity conversation despite being critical infrastructure where…Sep 08, 202612 min read

811 - Search - From IT restoration to production restart: Why manufacturers continue to struggle with operational side of cyber recoveryManufacturing treats cyber recovery as a technology problem when it is actually an operational one. While IT teams…Sep 01, 202617 min read

812 - Search - CMMC Phase II halt puts C3PAO assessments on hold but leaves NIST SP 800-171 obligations in force for contractorsFollowing the July suspension of CMMC Phase II, which paused the planned third-party assessment requirement, contractors facing C3PAO…Aug 25, 202621 min read

813 - Search - Bitdefender launches GravityZone Exposure Management to prioritize vulnerabilities, map attack paths, reduce attack surface risks

814 - Search - Fortinet FortiAIGate targets AI security risks with real-time inspection, policy enforcement and agent controls

815 - Search - Rilian partners with White House cyber office to protect South Carolina rural hospitals under Project Lifeline 250

816 - Search - Beyond Horizontal Standards: Why We Must Converge ISA 99 and ISA 84 to Protect Cyber-Physical Systems

817 - Search - UK Cyber Growth Action Plan set to invest £16 million to boost the cyber sector, secure critical services

818 - Search - The EU’s Cybersecurity Blueprint and the Future of Cyber Crisis Management

819 - Search - OT-ISAC tracks 2026 Asia-Pacific cybersecurity policy shifts affecting critical infrastructure, OT and industrial operations

820 - Search - ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security

## Cybersecurity News

View Articles

821 - Search - Cyber Security NewsLatest Cyber Security News

822 - Search - FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack

823 - Search - Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More

824 - Search - Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours

825 - Search - Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours

826 - Search - Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities

827 - Search - TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers

828 - Search - Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests

829 - Search - Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks

830 - Search - Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data

831 - Search - North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages

832 - Search - Accenture Contractor Allegedly Gave Claude AI Agent Access to Secure Pentagon Network

833 - Search - Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers

834 - Search - Claude AI Exploits Linux Kernel Flaw to Execute Root Commands Without User Interaction

835 - Search - Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems

836 - Search - 319 Chrome Extensions Found Hijacking Searches, Affecting 13.4 Million Users

837 - Search - Zero-Click ‘SMS of Death’ Flaw Lets Hackers Disrupt Android Phones With a Single Text

838 - Search - When Threats Don’t Wait, Security Can’t Either

839 - Search - PropellerAds: Why Modern Malware Delivery Starts Before the Payload

840 - Search - Rethinking automotive cyber risk for the age of accelerated vulnerability discovery

841 - Search - State of Ad Fraud 2026: 52% of Schemes Use AI as Cloaking Loses Ground to iOS Exploits and Messenger Phishing

842 - Search - Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions

843 - Search - Before Your SOC Investigates: What 16K+ Security Teams Already Know

844 - Search - Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them

845 - Search - Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge

846 - Search - Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks

847 - Search - CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace

848 - Search - Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1

849 - Search - Meta Zurp AI Toolkit Connects Burp Suite With AI Coding Agents for Bug Bounty Research

## Varonis Blog

View Articles

850 - Search - Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Data

851 - Search - From CPU Spikes to Defense: How Varonis Prevented a Ransomware Disaster

852 - Search - How Attackers can Abuse Shadow Resources in Google Cloud Dataflow

853 - Search - Threat ResearchPHP2Shell: One Upload, Full ServerGavirel Fried6 min readVaronis Threat Labs’ deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.Gavirel Fried6 min read

854 - Search - Data SecurityVaronis is joining ProofpointYaki Faitelson7 min read

855 - Search - Email SecurityVaronis’ Takeaways from Forrester’s 2026 Email, Messaging, and Collaboration Security Solutions Landscape ReportMeagan Huebner2 min read

856 - Search - Introducing Varonis Triage Agent: An Autonomous Incident Responder to Amplify MDDR Service

857 - Search - Varonis and Cohesity: Improving Cyber Resilience with Data Security

858 - Search - Access Governance: Reducing Attacker Reach in the Age of AI-Accelerated Threats

859 - Search - Threat ResearchOct 23, 2026Go With the Flow: How a Shadow Dependency Led to a Cross-Tenant Vulnerability in GCP DataflowDiscover a critical cross-tenant vulnerability in Google Cloud Dataflow that allows attackers to exploit predictable bucket names for remote code execution.Gil Weizman6 min read

860 - Search - Threat ResearchOct 22, 2026StealC Is Back, and This Time It’s a RATFour months after Operation Endgame took it down, StealC’s seller returns with Stadia, a remote access trojan that shares StealC’s code byte for byte.Varonis Threat Labs8 min read

861 - Search - AI SecurityOct 20, 2026Varonis and Collibra: Improving Data Governance for Trusted AIThe Varonis for Collibra integration help organizations better govern the data used for analytics and AI initiatives.Nolan Necoechea2 min read

862 - Search - Threat ResearchOct 17, 2026Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQLWe uncovered a critical remote code execution vulnerability in Snowflake-managed PostgreSQL, highlighting hidden risks in cloud services.Lior Adar8 min read

863 - Search - Oct 14, 2026IBM’s Cost of a Data Breach Report 2026: AI Is Now the Attacker and the TargetThe 21st annual report confirms what security teams have suspected for some time: AI has changed who and what gets attacked.Ron Bennatan5 min read

864 - Search - AI SecurityOct 07, 2026Least Privilege for AI Agents: A Practical Guide for Security LeadersLearn what it means to enforce least privilege for AI agents, and get practical with a six-step implementation plan.Amanda Wicks7 min read

865 - Search - AI SecuritySep 25, 2026AI Security Fundamentals: The Real Industry Shift Taking PlaceExperts discuss how AI is reshaping cybersecurity, from exposing existing vulnerabilities to enabling proactive defense strategies.Jonathan Villa3 min read

## Pentest Partners Blog

View Articles

866 - Search - OT, ICS, IIoT, SCADAAutomated warehouses: 8 third parties, one network and no owner13 Min ReadOct 28, 2026

867 - Search - Artificial IntelligenceHow TosVulnerabilities and DisclosuresPHP2Shell and what the AI headlines are missing8 Min ReadOct 22, 2026

868 - Search - OT, ICS, IIoT, SCADAVulnerabilities and DisclosuresYou don’t need a nation state to warm up a fridge9 Min ReadOct 14, 2026

869 - Search - Artificial IntelligenceYour AI can access it. Can an attacker?11 Min ReadOct 08, 2026

870 - Search - Maritime Cyber SecuritySafe, but sailing nowhere. Can you stop a fleet of ships?12 Min ReadSep 30, 2026

871 - Search - Artificial IntelligenceHow TosInternet Of ThingsIs AI toast? Building an AI Talkie Toaster18 Min ReadSep 18, 2026

872 - Search - How TosInternet Of ThingsPassing the bucks $$$: Passback attacks explained4 Min ReadSep 09, 2026

873 - Search - Consumer AdviceWhy your data is safer than you think on public Wi-Fi7 Min ReadSep 03, 2026

874 - Search - Consumer AdvicePasswordsEstate planning of credentials6 Min ReadAug 26, 2026

875 - Search - OT, ICS, IIoT, SCADAOne SSID To Rule Them All6 Min ReadAug 24, 2026

876 - Search - Shameless Self PromotionDEFCON 34: Planes, PLCs and 6am runs8 Min ReadAug 21, 2026

877 - Search - Hardware HackingHow TosVulnerabilities and DisclosuresGivEnergy enters administration, batteries expose home networks13 Min ReadAug 20, 2026

878 - Search - Cloud SecurityBreaking the attack chain created by exposed cloud secrets6 Min ReadAug 07, 2026

879 - Search - Artificial IntelligenceIf you’re going to vibe code it, why not vibe pen test it?17 Min ReadJul 31, 2026

880 - Search - Social EngineeringClick. Click. Fake it until they make it… inside7 Min ReadJul 23, 2026

881 - Search - Aviation Cyber SecurityHardware HackingFlying with the Flipper Zero7 Min ReadJul 10, 2026

882 - Search - Cyber RegulationHardware HackingInternet Of ThingsEN 303 645 is the baseline, not the finish line for IoT security17 Min ReadJul 03, 2026

883 - Search - Hardware HackingDecoding Rust strings7 Min ReadJun 23, 2026

884 - Search - Shameless Self PromotionPTP Cyber Fest 2026. Built for people to get involved6 Min ReadJun 12, 2026

885 - Search - Digital Forensics and Incident ResponseClickFix, CrashFix and the growing family of copy and paste attacks13 Min ReadJun 10, 2026

886 - Search - Hardware HackingVulnerabilities and DisclosuresShelly Wall Display exposed RPC over Bluetooth4 Min ReadMay 26, 2026

887 - Search - OT, ICS, IIoT, SCADAOT pen test findings that plant teams can actually use16 Min ReadMay 14, 2026

888 - Search - Artificial IntelligenceDigital Forensics and Incident ResponseAI can help in DFIR, but it cannot replace investigator judgement10 Min ReadApr 21, 2026

889 - Search - OT, ICS, IIoT, SCADAYou can pen test OT networks without breaking them11 Min ReadApr 09, 2026

890 - Search - Cyber RegulationGRC Consultancy AdviceDigital Operational Resilience Act (DORA)9 Min ReadMar 31, 2026

891 - Search - Cloud SecurityInsecure IAM is the root of many cloud security failures6 Min ReadMar 24, 2026

892 - Search - Hardware HackingHow TosReverse EngineeringTaming the dragon: reverse engineering firmware with Ghidra14 Min ReadMar 12, 2026

893 - Search - How TosRed TeamingBreaking Out of Citrix and other Restricted Desktop Environments25 Min ReadMar 02, 2026

894 - Search - Automotive SecurityOpinionsEV batteries as grid infrastructure and the security risk that follows6 Min ReadFeb 24, 2026

895 - Search - Internet Of ThingsVulnerabilities and DisclosuresShelly IoT door controller config fail: leaving your garage, home and security exposed8 Min ReadFeb 11, 2026

896 - Search - Social EngineeringCovert recording is easy, which is the problem5 Min ReadFeb 03, 2026

897 - Search - OpinionsMovie breakdown: Hackers (1995)6 Min ReadJan 30, 2026

898 - Search - Cyber RegulationPreparing for the EU Cyber Resilience Act (CRA)8 Min ReadJan 22, 2026

899 - Search - PasswordsVulnerabilities and DisclosuresCarlsberg… probably not the best cybersecurity in the world7 Min ReadJan 16, 2026

900 - Search - Cloud SecurityCompromising a multi-cloud environment from a single exposed secret6 Min ReadJan 13, 2026

901 - Search - Artificial IntelligenceVulnerabilities and DisclosuresAI noise and the effect it’s having on vulnerability disclosure programs5 Min ReadJan 09, 2026

902 - Search - Digital Forensics and Incident Response2025, the year of the Infostealer12 Min ReadJan 06, 2026

903 - Search - Cloud SecurityBeyond cloud compliance dashboards, what’s next?6 Min ReadJan 05, 2026

904 - Search - Artificial IntelligenceVulnerabilities and DisclosuresEurostar AI vulnerability: when a chatbot goes off the rails19 Min ReadDec 22, 2025

905 - Search - Digital Forensics and Incident ResponseHow TosThe built-in Windows security features you should be using6 Min ReadDec 04, 2025

906 - Search - AndroidAndroid Activities 1019 Min ReadNov 27, 2025

907 - Search - Cloud SecurityHow TosCommon Kubernetes misconfigurations and how to avoid them6 Min ReadNov 18, 2025

908 - Search - Internet Of ThingsExploiting AgTech connectivity to corner the grain market6 Min ReadNov 13, 2025

909 - Search - Digital Forensics and Incident ResponseFinding your path into DFIR9 Min ReadNov 11, 2025

910 - Search - Cyber RegulationWhat testers need to know about the changes to the CHECK scheme4 Min ReadNov 04, 2025

911 - Search - Consumer AdviceHow TosSecurity awareness: four pillars for staying safe online12 Min ReadOct 30, 2025

912 - Search - How TosHardening your home lab16 Min ReadOct 23, 2025

913 - Search - Consumer AdviceHow TosStop payroll diversion scams before they start6 Min ReadOct 21, 2025

914 - Search - Digital Forensics and Incident ResponseThe logs you’ll wish you had configured if (when) you are breached…7 Min ReadOct 17, 2025

915 - Search - How TosCompiling static Nmap binary for jobs in restricted environments8 Min ReadOct 14, 2025

916 - Search - Maritime Cyber SecurityOpinionsWhat Speed 2 gets right and wrong about ship hacking8 Min ReadOct 08, 2025

917 - Search - Digital Forensics and Incident ResponseHow TosSpot trouble early with honeypots and Suricata12 Min ReadOct 02, 2025

918 - Search - Digital Forensics and Incident ResponseDiscord as a C2 and the cached evidence left behind11 Min ReadSep 16, 2025

919 - Search - Cyber RegulationA buyer’s guide to CHECK in 20255 Min ReadSep 10, 2025

920 - Search - Hardware HackingHow TosStart hacking Bluetooth Low Energy today! (part 3)11 Min ReadSep 04, 2025

921 - Search - AndroidHow TosAndroid Broadcast Receivers 1016 Min ReadSep 02, 2025

922 - Search - Hardware HackingHow TosStart hacking Bluetooth Low Energy today! (part 2)9 Min ReadAug 27, 2025

923 - Search - Hardware HackingHow TosStart hacking Bluetooth Low Energy today! (part 1)15 Min ReadAug 21, 2025

924 - Search - Cloud SecurityTerraform Cloud token abuse turns speculative plan into remote code execution12 Min ReadAug 15, 2025

925 - Search - Digital Forensics and Incident ResponseThumbnail forensics. DFIR techniques for analysing Windows Thumbcache7 Min ReadAug 08, 2025

926 - Search - Cloud SecurityHow TosHow to transfer files in AWS using SSM4 Min ReadAug 05, 2025

927 - Search - Digital Forensics and Incident ResponseDFIR tools and techniques for tracing user footprints through Shellbags9 Min ReadJul 31, 2025

928 - Search - Cyber Liability InsuranceRethinking cyber insurance questions to find real risk5 Min ReadJul 30, 2025

929 - Search - Shameless Self PromotionOur capabilities. A story about what we can achieve15 Min ReadJul 28, 2025

930 - Search - AndroidHow TosAndroid Services 1019 Min ReadJul 25, 2025

931 - Search - Internet Of ThingsLeaked data. Continuous glucose monitoring5 Min ReadJul 22, 2025

932 - Search - Artificial IntelligenceDigital Forensics and Incident ResponseUsing AI Chatbots to examine leaked data4 Min ReadJul 18, 2025

933 - Search - Vulnerabilities and DisclosuresFramework 13. Press here to pwn5 Min ReadJul 16, 2025

934 - Search - Digital Forensics and Incident ResponseSil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server7 Min ReadJul 11, 2025

935 - Search - How TosHow to conduct a Password Audit in Active Directory (AD)11 Min ReadJul 08, 2025

936 - Search - Consumer AdvicePet microchip scams and data leaks in the UK6 Min ReadJul 04, 2025

937 - Search - Automotive SecurityHow we turned a real car into a Mario Kart controller by intercepting CAN data9 Min ReadJun 26, 2025

938 - Search - How TosCSP directives. Base-ic misconfigurations with big consequences9 Min ReadJun 23, 2025

939 - Search - Cyber RegulationHow TosPrepare for the UK Cyber Security and Resilience Bill4 Min ReadJun 19, 2025

940 - Search - AndroidArtificial IntelligenceAndroid AI UX is great until it leaks your data8 Min ReadJun 17, 2025

941 - Search - Shameless Self PromotionPTP Cyber Fest 2025. More than just another conference4 Min ReadJun 13, 2025

942 - Search - Vulnerabilities and DisclosuresFire detection system been pwned? You’re not going to sea10 Min ReadMay 30, 2025

943 - Search - How TosHow to load unsigned or fake-signed apps on iOS10 Min ReadMay 28, 2025

944 - Search - Digital Forensics and Incident ResponseShameless Self PromotionWar stories from the DFIR front line11 Min ReadMay 27, 2025

945 - Search - OT, ICS, IIoT, SCADAFully segregated networks? Your dual-homed devices might disagree9 Min ReadMay 22, 2025

946 - Search - Artificial IntelligenceRed TeamingBypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…17 Min ReadMay 20, 2025

947 - Search - How TosVNC. RDP for all to see5 Min ReadMay 16, 2025

948 - Search - Cyber RegulationInternet Of ThingsNew cybersecurity rules for smart heat pump manufacturers5 Min ReadMay 13, 2025

949 - Search - Hardware HackingVulnerabilities and DisclosuresRCEs and more in the KUNBUS GmbH Revolution Pi PLC15 Min ReadMay 08, 2025

950 - Search - Artificial IntelligenceRed TeamingExploiting Copilot AI for SharePoint10 Min ReadMay 07, 2025

951 - Search - Digital Forensics and Incident ResponseThe remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache8 Min ReadMay 01, 2025

952 - Search - PasswordsHiding behind a password5 Min ReadApr 29, 2025

953 - Search - Consumer AdviceThe dangers of web based messaging apps6 Min ReadApr 25, 2025

954 - Search - Digital Forensics and Incident ResponseUnallocated space analysis5 Min ReadApr 23, 2025

955 - Search - Digital Forensics and Incident ResponseNot everything in a data leak is real3 Min ReadApr 15, 2025

956 - Search - How TosDon’t use corporate email for your personal life5 Min ReadApr 09, 2025

957 - Search - Cyber RegulationInternet Of ThingsPreparing for the EU Radio Equipment Directive security requirements3 Min ReadApr 03, 2025

958 - Search - How TosBackdoor in the Backplane. Doing IPMI security better7 Min ReadMar 31, 2025

959 - Search - Digital Forensics and Incident ResponseThe first 24 hours of a cyber incident. A practical playbook6 Min ReadMar 24, 2025

960 - Search - OpinionsCybersecurity communities. Small hacker groups, big impact5 Min ReadMar 19, 2025

961 - Search - How TosTake control of Cache-Control and local caching4 Min ReadMar 12, 2025

962 - Search - GRC Consultancy AdviceHow I became a Cyber Essentials Plus assessor10 Min ReadMar 06, 2025

963 - Search - How TosDNSSEC NSEC. The accidental treasure map to your subdomains9 Min ReadMar 04, 2025

964 - Search - Hardware HackingA dive into the Rockchip Bootloader8 Min ReadFeb 26, 2025

965 - Search - Aviation Cyber SecurityPen testing avionics under ED-203a3 Min ReadFeb 21, 2025

## The Register

View Articles

966 - Search - offbeatGoth aesthetic gone wild: a user’s self-inflicted black screen of non-death in Windows 3.1’sLabeled in black on black - controls for a galactic hyper-hearse or ill-advised Windows theme?

967 - Search - Chocolate Caterpillar or Chocolate Teapot? Top up the disk space for Windows 10 to find outBORK!BORK!BORK!London’s Oxford Street signage shows its underwear to passing tourists

968 - Search - Darkbloom, which allowed Mac users to rent out their GPUs for AI inference, warns of low payoutsBlame plunging token prices

969 - Search - Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to seen0n-existent security

970 - Search - securityGM cracks the petty cash box for multistate driver tracking settlement$220 million? For all of you? Yeah, we can probably dig that up …

971 - Search - Anthropic: That Claude Code extension compromise… couldn’t be usClaudeshop fingers ‘malicious actor’ in targeted supply-chain attack on Cursor

972 - Search - scienceVoyager 1 gives controllers the silent treatmentWhew! Only kidding, here I am

973 - Search - AlpineBSD announced – an AI-free FOSS OSCombining the NetBSD kernel with the Alpine Linux userland

974 - Search - NASA ponders a Hubble servicing mission or a controlled deorbitAgency only looking for information, but reentry countdown ticking for veteran space telescope

975 - Search - AI projects not paying off? Keep at it, says Uni Productivity InstituteAll that up-front investment needs time to take effect, and speeding individual tasks won’t necessarily boost the entire firm

976 - Search - NHS quango warns of risk to GP patient data after website vendor collapseHundreds of practices hit by small health tech firm going into administration

977 - Search - securityBritish intelligence agency misplaced ’thousands’ of storage devices, years later still can’t say how manyOther agency errors included an unchecked software bug that led to Terrorism Act detentions

978 - Search - ai and mlAccenture AI agents are sifting through applicantsBut a human makes final hiring decisions at global tech consultancy

979 - Search - ai and mlDomestic droid gone amok? Don’t worry, you’re coveredInsurance firms look to insulate domestic humanoid robot owners against the inevitable chaos they will bring

980 - Search - cyber-crimeUK Shelly reseller warns payment data stolen after malware found on websiteEXCLUSIVECustomer says they received fraudulent charges on their card hours before company notified them

981 - Search - ai and mlGoogle’s search revenue Ferrari hits an AI-powered speed bumpJust wait ’til we add more AI and this thing’ll really fly

982 - Search - AI’s epic cash call is matched only by its ability to strangle revenue streamsThe first technology created with a self-disrupt button… But why oh why didn’t they call Claude clone Fauxtoshop?Rupert Goodwins

983 - Search - It won’t kill you, or humanity, to get off the AI upgrade treadmillNew models arrive so fast, we already have more new tech than it’s possible to understand in a careerMark Pesce

984 - Search - No shame in the Domain Name game: DNS is doomed, literallyCorey Quinn

985 - Search - Celebrating the brilliant pragmatism of TCP/IP, the wiring of the worldRupert Goodwins

986 - Search - EC users should be afraid of a US kill switch - not some new softwareSteven J. Vaughan-Nichols

987 - Search - Brighter isn’t better and more is less. The AI slowdown is nigh, no matter who says whatRupert Goodwins

988 - Search - OpenAI apes AWS Marketplace while Anthropic remains stubbornly MicrosoftianCorey Quinn

989 - Search - AWS needs to embrace its place as the Home Depot of AI infrastructureCorey Quinn

990 - Search - Open source datacenters and open source thinking will undo self-inflicted DC damageRupert Goodwins

991 - Search - Big AI’s content problem: Take the work, keep the moneySteven J. Vaughan-Nichols

992 - Search - In the age of AI, teaching networking principles remains more important than learning protocolsBruce Davie

993 - Search - Your cloud survived everything except the real worldRupert Goodwins

994 - Search - systemsFarm PC ‘maintained’ by a 14-year-old dumped support chap in a steaming pile of tech messON CALLHuman users can be hard to handle. A few hundred head of cattle and unsupported windows XP can really stink things up

995 - Search - off-premAWS installs an AI accelerator every 14 seconds and eyes $1 trillion annual revenueBefore long, we could be writing about a cloud company with a retail side hustle

996 - Search - securityIn the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad securityBinance freezes funny money after compromise of engineer’s laptop linked to $6.3 billion of unauthorized trades

997 - Search - systemsPC chip plunge wipes out a quarter of Intel’s valueCEO predicts massive datacenter CPU boom, coming soon, but production problems mean Chipzilla may not cash in

998 - Search - securityResearchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatchedEmbedded browsers are at the heart of the problem

999 - Search - offbeatHowler will have AI answer your questions, then burn the chatAsk AI dumb things and leave no local chat history, all with the style of a kids’ fantasy novel – or rather, one of its magical letters

1000 - Search - ai and mlStartup wants to make AI agents safe for DevOps dutyInfrastructure automation needs something better than prompt and pray

1001 - Search - devopsTopcoat enables Rust to render server-side web appsRust guru rejiggers web app reactivity for potentially speedier page loading

1002 - Search - securitySuspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 serversSnoops ’likely still’ have access to US government-affiliated network

1003 - Search - os platformsUbuntu 27.04 may bring a preview of the long-awaited Core DesktopCanonical has a long way to catch up, but it knows who it’s chasing

1004 - Search - scienceBattMan aims to turbocharge US batteries without robbin’ critical mineralsDoE-backed consortium hoping to scale, says orgs can apply to become, literally, part of BattMan

1005 - Search - public sectorGSA left sensitive Google Drive files open to staff, contractorsAuditors have flagged similar security failures since 2014

1006 - Search - applicationsOracle wants to bill you for every AI task, not just every seatBig Red says AI units will add to subscriptions, as it juggles $90BN-plus capex, mounting debt and a $225BN revenue goal for 2030

1007 - Search - databasesBuilt to bend: Postgres’s inventor and a steward on what AI really needsPARTNER CONTENT: Michael Stonebraker and Bruce Momjian on why enterprise AI needs a database that no one controls, and what PostgreSQL 19 says about the road ahead

1008 - Search - securityBelgium’s tax agency confirms cyberattack, pulls services offlineOfficials confirm this week’s tax deadlines extended to November as a result

1009 - Search - os platformsSystemd adds support for RustWhat’s even better than Rust in the Linux kernel? Rust in systemd!

1010 - Search - offbeatCritical launch for Vulcan as ULA targets Friday the 13thHopefully without disintegrating SRB nozzles

1011 - Search - securityShortlist of age checks for the UK’s under-16 social media ban is out, ‘some’ adults will need verifyingSome adults may not need to prove it, but many will

1012 - Search - securityAttackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour’The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully’

1013 - Search - ai and mlLibreOffice’s ’no AI’ stance meets LLM-assisted codeCore developers avoid AI coding assistants, while community contributors face disclosure and review rules

1014 - Search - personal techTraces of new Pi hardware spotted in GitHubA new Pi Zero 3 W and Pi 4 Model A seen lurking in the repository

1015 - Search - personal techMicrosoft breaks New Outlook attachment opening with Edge UpdateAttachments in New Outlook come undone thanks to Windows’ fundamental interconnectedness of things

1016 - Search - Matrix takes sovereign messaging into the realm of the tech giantsOnce more, with feeling: ‘First they ignore you, then they laugh at you, then they fight you’

1017 - Search - securityAdmin dropped the F-bomb in a password to show hackers who was really 1337PWNEDCursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS

1018 - Search - storageHPE puts storage to work on AI’s expensive memory problemPARTNER CONTENT: HPE Alletra MP X10000 cache offload delivers up to 20× faster time to first token in testing validated by Kamiwaza. Apparently, remembering things beats calculating them again.

1019 - Search - ai and mlGoogle’s Gemini 4 Carbon looks like a diamond in the roughUndercutting Claude on price ahead of Anthropic’s IPO

1020 - Search - scienceBoffin’s software found a possible dwarf planet - a result so rare he thought it must be a bug2026 ED138 is way out beyond Neptune and perhaps the smallest known object of its type

1021 - Search - storageTape is so not dead that Fujifilm will increase production capacity 5xBecause, sigh, AI

1022 - Search - ai and mlGoogle struggling to make AI Mode searches payThat’s a problem, cos it just spent $51 billion on infrastructure and still needs to rent compute from others to run its cloud

1023 - Search - offbeatPlease state the nature of the medical emergency: Google is building a robot medic for NASAThe AI medical assistant is still being tested. Now the space boffins want to give it hands

1024 - Search - ai and mlAnthropic engineer declares the coding interview deadWhy give people tests that AI aces?

1025 - Search - securityOracle celebrates end of Cybersecurity Awareness Month with quadruple troubleAttackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns

1026 - Search - ai and mlAmazon tells tokenmaxxing devs to slow their AI rollFocus more on what matters, please, like creating useful software and accomplishing company goals

1027 - Search - ai and mlGitHub powering up four million extra cores to stop its service going downRe-architects site to cope with AI slop-pocalypse

1028 - Search - cyber-crimeSerial ransomware crook gets 70 months behind bars for Nefilim, Hive rolesArtem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic

1029 - Search - devopsHow Google fumbled the frontend with Angular 2All Things Open Talk provided lessons in how not to upgrade a software package

1030 - Search - on-premMicrosoft faces potential vote: Shareholders curious about its plans to tackle emissionsGreenhouse gas output has risen dramatically since the company promised to become carbon-negative by 2030

1031 - Search - offbeatChina’s spaceplane bears striking resemblance to America’s X-37BDefense Intelligence Agency space report includes a rare orbital snap of the Chinese craft, and it looks rather familiar

1032 - Search - systemsIntel gets tax breaks while local authorities lose revenue, claims policy orgReport accuses corp of getting subsidies for its fabs from Oregon and New Mexico that deprive those states of vital funds

1033 - Search - securityCisco open sources tool for detecting AI agents on hacking spreesexclusiveProject Quarry aims to provide a ‘shared language’ for evaluating agent behavior

1034 - Search - cyber-crime123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexusCompany chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants

1035 - Search - networksOpen Cosmos steps up Europe’s space sovereignty game, shows off ConnectedCosmos satellitesEl Reg takes a tour of a satellite nursery for customers thinking about de-risking dependence

1036 - Search - offbeatMan spends 35 years collecting corporatespeak, turns it into an appWhy waste time thinking of something useful to say when an app can leverage synergies for you?

1037 - Search - ai and mlNeocloud thinks AI agents - not meatbags - will be its main customersQuake AI is developing APIs to let autonomous agents access its services more efficiently

1038 - Search - systemsEurope built sovereign clouds to escape US control. Then forgot about the processorsFEATUREIntel ME and AMD PSP: The silicon layer nobody certifies

1039 - Search - cyber-crimeNobody believes the ‘criminals and scumbags’ who hacked Canvas really deleted stolen student dataOther than Instructure execs - maybe?

1040 - Search - Europe wants out from under US tech – but first it has to find the exitsReport maps the weak points in cloud, identity, and public sector procurement

1041 - Search - EU privacy advocates accuse US data annotation firm of snooping on contractors

1042 - Search - Europe’s cloud sovereignty rules could do more harm than good

1043 - Search - Open source sovereignty gets down to the boring business of making it work

1044 - Search - US tech giants warn Europe that ditching US tech giants could cost €115B

1045 - Search - Dutch tax office ditches Microsoft 365 cloud for on-premises alternative

1046 - Search - Dutch government turns to NixOS for a sovereign desktop

1047 - Search - Europe’s AI ambitions rest on somebody else’s supply chain

1048 - Search - Ask HPE and NVIDIA the AI data question you cannot ask in public

1049 - Search - personal techWhy roaming packages have become an anachronism in the age of app-first travelPARTNER CONTENT: Connectivity at all times, abroad

1050 - Search - systemsSK Hynix says memory shortages to persist until 2030Good for its bottom line, not great news for yours, or for the PC and smartphone markets

1051 - Search - channelAI slows growth for Infosys and keeps it afloat at the same timePredicts slower growth as savings from automation hit price of extended deals

1052 - Search - ai and mlBig Red gets cozy with Google to offer TPUs to AI customersOracle plans to add those chips alongside new Nvidia hardware and OpenAI services as businesses await AI payoffs

1053 - Search - ai and mlAnthropic now lets Claude users jump out of plane without parachuteMeet CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS

1054 - Search - securityAI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hoursOne critical, three high-severity EPICS bugs could disrupt research experiments

1055 - Search - personal techApple takes powerful M6 chip to the MacBook Pro, iMac6th-gen M-series silicon promises more cores, faster memory, a fatter NPU, and better connectivity, now in more form factors

1056 - Search - os platformsZacOS 9 and Mavernix: Two classic Apple desktops find their Wayland to LinuxClassic Platinum or lickable Mavericks-era Aqua – it’s your choice

1057 - Search - cyber-crimeDay 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattackUniversity hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases

1058 - Search - saasTake it on the chin SatNad: Microsoft chief exec’s pay slips 6% in record yearRevenue up, operating profit up, 30 million paid Copilot seats locked in, 88 DCs added, $43.8 billion returned to shareholders

1059 - Search - cyber-crimeCISA confirms PHP2Shell under attack as researchers clock successful exploitsBoth critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells

1060 - Search - IBM admits mainframes need to be modernized and will use AI to do the jobPromises to build ‘IBM Z Atlas’ tool that will tidy up messy big iron and enable AIOps

1061 - Search - Former Intel CEO Pat Gelsinger bets on Nagare Labs to vault the memory wallSRAM-like bandwidth, DRAM-like density, and NAND-like manufacturing: Z2RAM makes big promises, but the road ahead is arduous and littered with the ruins of failed memory vendors

1062 - Search - ‘Let’s just shove a bigger fan in there and see what happens’Techies tiptoed around server to keep it working as company sank

1063 - Search - Vendors asking forward deployed engineers to make good on trillion-dollar AI betThey might earn more than $200k but who do they work for? Tech buyers need to put some checks in place on FDEs

1064 - Search - IBM CEO says open weight models are now irresistibly good and cheap on-prem90 percent of the performance at ten percent of the price, in just two or three racks, is hard to beat

1065 - Search - systemsTSMC sends scouts to check whether America’s datacenters can deliverSilicon giant budgets up to $64B for expansion while keeping an eye on construction progress and power supplies

1066 - Search - systemsNew motherboards, old RAM, plenty of life left in yesterday’s PCsDDR4 makes a comeback as component costs rise, while Linux offers an escape from forced upgrades

1067 - Search - ai and mlA whopping 3% of boardroom execs spy productivity and costs savings from AIA load more are spending more than they expected and forecast to shell out even more in 2027

1068 - Search - personal techApple’s foldable phone has a crease in its reputationAdmits a ‘small number’ of iPhone Duos have display problems, and no, you’re not folding it wrong.

1069 - Search - storageWhen file infrastructure becomes the bottleneckLegacy NAS, VPNs, and file-sync workflows leave hidden costs in their wake. Is the way your organization manages files still fit for purpose?

1070 - Search - securityMicrosoft releases out-of-band Windows fixes with certificate updatesDid you hear the one about eMudhra and the power of 4? Time to get connected to certificate trust list updates

1071 - Search - cyber-crimeAttack on email hosting provider for German far right party AfD exposed 345k accountsAlternative für Deutschland swats away scandals as reporters swarm leaked email tranche

1072 - Search - on-premUK ministers had plenty of time for AI datacenter bosses, but none for environmental groupsInvestigation finds businesses dominated govt meetings while communities were left out of decisions about AI Growth Zones

1073 - Search - os platformsFreeBSD founder ports Omarchy to FreeBSD in ten days, ten releasesDaemonarchy is unaffiliated with the Linux original, built with AI help, and could complicate FreeBSD’s debate over AI contributions

1074 - Search - offbeatYear of Linux on the Beach confirmedDon’t forget to keep code up to date. Even with a cold beverage in hand

1075 - Search - on-premHow everyday technology choices drive true workplace sustainabilitySPONSORED FEATURE: Introducing certified, environmentally friendly meeting room solutions, such as Barco ClickShare, in a standardized way across the organization can make the difference between hitting sustainability goals or not

1076 - Search - ai and mlElvis rightsholders sue Anthropic for stealing songs and leaving them in Heartbreak HotelThey want a little less chatbot conversation, and a whole lot more royalty action

1077 - Search - securityJapanese virtual desktop cloud hacked so hard it asks to be bannedCEO admits service used for foreign exchange trading had holes company was slow to fix

1078 - Search - ai and mlHumanity can’t afford not to spend $800B on AI, Anthropic insistsIt’s more important than chips, ’leccy and the net, after all

1079 - Search - ai and mlOpenAI rolls out budget-priced mid-tier GPT-6.1 TerraNot a bombshell, but it rivals pricier models on some tasks at a tenth of Astra’s API price

1080 - Search - securityWorm armed 42 GitHub repos by hiding a payload too big to failPayload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search

1081 - Search - ai and mlAlibaba’s Qwen AI caught trying to contact server in ChinaBut there’s not much evidence this is anything more than echoes of unsanitized training data

1082 - Search - securityLiteLLM supply chain attack started with an exposed master keyA ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’

1083 - Search - cxoMicrosoft offers parachutes to 60k employees if they jump by the end of the yearVoluntary exit offer extended to about one-quarter of existing Softies

1084 - Search - securityMicrosoft releases emergency .NET security fixes for Google Brotli bugRedmond joins growing list of software maintainers scrambling to patch compression flaw

1085 - Search - offbeatOpen source keyboard lets you swap parts like magnetic Lego bricksEvery key is its own module, and its designer tells us the sky’s the theoretical limit on the size of the frankenboard you can build

1086 - Search - softwareReddit’s r/opensource bans AI slop, and quite a few humans for good measure

1087 - Search - securityUK pentester ‘killa’ claims $2K Bitcoin prize in PHP2Shell capture-the-flag contestJaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours

1088 - Search - ai and mlTrumpets blare and skies part as AI hypefest culminates in Anthropic IPO filingClaude maker reveals financials and warns investors its AI models could blackmail humans, resist shutdown, or go rogue

1089 - Search - ai and mlLast call for The Register’s data sovereignty dinner in WashingtonEVENT: The Register’s Washington dinner with HPE and NVIDIA is this Thursday. The table is nearly set.

1090 - Search - os platformsRed Hat helps teach about tech writingBut learns tough lessons about AI in the process

1091 - Search - NetBSD may have found a new role: The AI-free FOSS OSIncreasing awareness and adoption, followed by increasing donations

1092 - Search - OpenAI dots inspire open source imitators amid technical difficultiesPersistent agents appeal to AI companies, but demand isn’t obvious

1093 - Search - Ubuntu ‘Stonking Stingray’ beta swims out: Deeper Rust ‘oxidization’ plus LLM speech-to-textGNOME 51 is here, and Ubuntu interim releases are getting interesting again

1094 - Search - scienceSwift operations end: 2004 spacecraft headed for fiery reentryAtmospheric drag brings an extraordinarily long-lived mission to a close

1095 - Search - ai and mlPrivate equity giant: AI payoff strictly limited to Big TechThe Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo

1096 - Search - securityWe shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glueWhat better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?

1097 - Search - securityUK Biobank back online soon, months after someone tried to sell 500k people’s data on AlibabaCharity confirms slew of security improvements as it waits for UK.gov’s go-ahead

1098 - Search - personal techiFixit dismantles Apple’s Duo: ‘You’d better baby that screen’Battery replacement gets the thumbs up, but it all hinges on dust. A conventional phone might be better bet for home repairers

1099 - Search - securityBritain bets big on AI to defend against the threats AI is helping createWhitehall wants agents guarding critical infrastructure as part of a wider £600M spending spree

1100 - Search - ai and mlEuro open source specialist proposes LLM gateway to ease token billsAiven hopes to do for LLMs what it does for databases

1101 - Search - columnistsPHP2Shell is a warning shot for vulnerability disclosureKeeping secrets is difficult in an open world, but we’ve done it before and must do it again

1102 - Search - securityPHP2Shell: No login, no app code, no warning. What next?PARTNER CONTENT: Learn what the flaws are, how far exploitation has gone, and how to get to full coverage fast with Tanium

1103 - Search - virtualizationTesco replacing VMware with Proxmox in its stores and on the edgeAdvertises for someone to ‘own cost-effective alternative virtualisation platform’

1104 - Search - networksWork to protect DNS from quantum decryption attacks is speeding upPLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers

1105 - Search - ai and mlAfter threatening AI export bans, China allows DeepSeek to keep sellingPLUS: AI datacenter bubble wobbles in Australia; E-commerce app suggests it can detect diseases; India’s top telco to IPO amid investor frenzy; and more!

1106 - Search - public sectorWant to build a UK datacenter? Please hold while Whitehall transfers youMinister insists responsibilities are clear as construction, telecoms, and energy fall under separate departments

1107 - Search - offbeatReg readers land on ‘Binface’ as name for UK space cleanup missionIntergalactic Space Warrior, or a bin in orbit?

1108 - Search - securityAutonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deedsDesigned to carry out 100,000 steps without human approval

1109 - Search - os platformsRaspberry Pi Desktop proves old PCs aren’t past itDebian 13-based refresh runs comfortably on veteran ThinkPads, without making installation a hobby

1110 - Search - ai and mlOpenAI disables internet access during model training while Anthropic issues another mea culpaWe’ve totally got things under control

1111 - Search - securityUser refused to change her password because everyone already knew it

1112 - Search - systemsRejecting a promotion sent field service tech into support hell

1113 - Search - softwareTechie was stung by a wasp, held overnight by Chinese police, then trapped in a 13-hour meeting

1114 - Search - networksProject leader thought his team understood the plan, ended up fixing their ‘interpretation’ of itMalicious compliance crosses cultural barriers

1115 - Search - networksTechie fixed Wi-Fi dead zone with a drill

1116 - Search - personal techBoss wrongly claimed IT deleted his files, refused to learn the one-click fix

1117 - Search - personal techUser who handled life-or-death situations struggled with the SHIFT key

1118 - Search - personal techExec couldn’t identify a photocopier, which made for a fax-inating tech support call

1119 - Search - ai and mlIndirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your mastersMost attempts were pranks, but some could fool unwary AI agents

1120 - Search - $24,000 AI experiment ports TypeScript compiler to RustMicrosoft’s Go rewrite gets some competition, with a developer claiming his port runs twice as fast

1121 - Search - Anthropic reinvents source control as Claude floods the world with codeWhen continuous integration gits you down, there’s always an AI-tuned monorepo

1122 - Search - There can be only one: Google Cloud casts Gemini as your enterprise AI heroThe Chocolate Factory proposes a single universal agent for work

1123 - Search - Trump launches America.gov with AI chatbots at its coreGemini, Grok now serving as front door to federal resources on unfinished, poorly designed website

1124 - Search - Claude submitted fake murder tip to Philly police during summertime testingAnthropic took more than two months to alert cops

1125 - Search - Anthropic conjures another threat that doesn’t exist yet to stoke fears of AI apocalypseSelf-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter

1126 - Search - securityThere’s a third PHP2Shell bug, but it won’t get an emergency fixBad things (and software bugs?) come in threes

1127 - Search - ai and mlRed-team report found OpenAI utterly failed to monitor its agents during Hugging Face attackMonitoring was only partial and was easily bypassed

1128 - Search - AI models describe humans as a bunch of amoral sheepAsk LLMs for their most controversial take on humanity, and it turns out they have little nice to say about us, as one AI experiment found

1129 - Search - devopsMichigan prof creates Python-like Jac language for AI agentsStop burning $165K on AI rewrites; Jac is meant to “gobble up” your polyglot stack

1130 - Search - softwareArc browser on its way out as makers suggest an alternativeNo new accounts from now, and the end will come in December

1131 - Search - os platformsSparkyOS: Lightweight general-purpose Arch, on a pendriveInteresting new project from the minds behind SparkyLinux

1132 - Search - applicationsPubKeep picks up where Microsoft Publisher signs off$99 replacement opens old .pub files on Windows and macOS, without a subscription

1133 - Search - scienceMusk disputes NASA safety panel’s lunar launch estimatesWatchdog also warns retiring Falcon and Dragon could leave US access to orbit short of a backup

1134 - Search - columnistsTorvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patchesKernel maintainers stop asking who used AI, as long as the code is good

1135 - Search - bofhBOFH: I talked to Claude and he says you’re an idiotYou know what’s really sick? Getting to the pub on time on a Friday

1136 - Search - networksUK threatens subsea cable saboteurs with 14 years behind barsWhitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm

1137 - Search - offbeatBeware the claw: Do you want to win the bunny or reboot Android?Classic arcade game put to shame by judgemental Bugdroid

1138 - Search - cyber-crimePalo Alto’s firewall OS has been under attack from multiple ransomware groups since JuneUnit 42 investigates network compromises across numerous industries

1139 - Search - securitySwamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’From October 26, only high and critical cases stay private as project seeks help sharing the workload

1140 - Search - cyber-crime’Password1’ and a forgotten test account land Welsh outfits in hot waterICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children

1141 - Search - securityBullhorn sees red after cyberattack knocks recruitment platform offlineStaffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft

1142 - Search - public sectorWhitehall shuts the front door on digital ID but leaves the back openMinisters may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive

1143 - Search - ai and mlUK finance watchdog wants firms to report AI failures and close callsFCA seeks clear accountability as financial services embrace increasingly autonomous agents

1144 - Search - networksICANN testing tech to let law enforcement access non-public WHOIS infoSingle sign-on to help address imminent threats to life, critical infrastructure, or kids

1145 - Search - securityDeepSeek deep-sixed at all US federal civilian agenciesOrder disallowing use of Chinese AI service is unhelpfully vague and broad

1146 - Search - Vendor-affiliated AI agent tech gets adopted by friendly, funded foundationFour projects for facilitating AI agents move under vendor-neutral governance

1147 - Search - personal techWindows said modem worked fine. That unmistakable scorched electronics smell suggested otherwiseCatching lightning in a tech support bottle

1148 - Search - securityPHP2Shell exploit bypasses protections designed to stop remote code execution“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.

1149 - Search - scienceHuman receives AI-designed virus for the first timeNot to kill the human, of course – to kill the antibiotic-resistant bacteria causing their infection

1150 - Search - ai and mlBackdoored robot tries its hand at finger chopping and cat cookingNo actual digits or cats were harmed beyond the number crunching that went into this LLM poisoning experiment

1151 - Search - securityMax-severity GitLab bug allows remote code execution over 12 years of releasesVendor ‘strongly recommends’ upgrading to a fixed version ‘as soon as possible’

1152 - Search - securityDisgraced Indian cert issuer leaves the cert issuing businessWe didn’t want to issue SSL/TLS certs anyway, eMudhra suggests after one private key turns out to be the number 4

1153 - Search - securityPHP2Shell puts dozens of UK government services out of serviceMinisters report 32 unavailable and four partly disrupted, but no confirmed compromise

1154 - Search - applicationsApple App Store review process hits a traffic jamApple log jam? Apple fast lane pie-lup? We’re here all week, on stage… sweeping it

1155 - Search - securityWhen the attacker becomes the user: Rethinking account takeoverSPONSORED FEATURE: AI makes phishing easier than ever

1156 - Search - offbeatSingapore boffins weave a GUI into fabric, and it’s machine washable tooFor those who find taking a phone out of their pocket just so last century

1157 - Search - Nvidia’s Huang: Don’t mention the AI-pocalypse

1158 - Search - off-premUkrainian drone attack takes out Russian datacenterPutin this cloud region back into operation might not be possible, says Yandex

1159 - Search - off-premMicrosoft defines its Azure instance lifecycle, without any info about timingRedmond explains how VMs die, but not when you can expect that to happen

1160 - Search - off-premAWS turns its best practice framework into an agent that recommends cloudy reconfigsPossesses powers equivalent to an ’experienced architect’ and will happily make cost-saving suggestions

1161 - Search - systemsGoogle launches first datacenter satellite and research that finds orbiting bit barns can workIf SpaceX can launch 1,800 Starships, and researchers nail gnarly networking, design and formation flying problems…

1162 - Search - off-premAzure maintenance mess disrupted hybrid clouds, VPNs, cloudy VMware servicesMicrosoft broke its own cloud but isn’t sure how

1163 - Search - off-premCivo plots 40 edge datacenters to power Britain’s sovereign AIFirst site is due in Hertfordshire next March, with Nvidia’s Vera Rubin systems and a longer-term 1 GW ambition

1164 - Search - off-premAlibaba Cloud plans six-year stroll to 20GW of datacenters, reveals chip to power themUSA alone has 37GW under construction, but Alibaba doesn’t think the AI boom will run out of steam

1165 - Search - AI boom could leave an e-waste trail that wraps 6 times around EarthReport says estimates focused on GPUs miss the mountains of power, cooling, and networking gear destined for scrap

1166 - Search - cyber-crimeHackers pile on PHP2Shell as AWS reveals attacks began before disclosureCloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed

1167 - Search - Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenantsAI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours

1168 - Search - scienceVeteran ESA probe rolls out welcome mat for Japan’s Phobos missionMars Express could support MMX’s 2027 arrival as another ’last ever’ extension keeps old spacecraft in flight

1169 - Search - securityIT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewallMisaligned incentives led to an intractable argument

1170 - Search - public sectorUK government hasn’t the foggiest how much it’s spending on digital transformationYears of promises, but officials unable to put a figure on investment

1171 - Search - ai and mlWhy the immediate future of liquid cooling is hybridPARTNER CONTENT: AI is driving liquid cooling adoption, but hybrid architectures will help operators balance density, flexibility, and operational realities

1172 - Search - securityCertification authority eMudhra defends its laughably weak private keysSays it passed audits and made just a minor mystery error

1173 - Search - public sectorPhilippine government suspends top tech official for alleged misconductFounder of offshore software development firm investigated for possibly giving his former outfit government contracts

1174 - Search - ai and mlTo help world gorge on GPUs, Nvidia brings cash bucket to fatten wafer-thin supply chainSigns Samsung to build substrates, bolsters spend with other players

1175 - Search - PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk’Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg

1176 - Search - Engineer was so sick of office pranks, he ‘wiped’ his antagonist’s disk

1177 - Search - To save paper, mainframe tech ruined a week of work

1178 - Search - Buyer missed one option and got 1% of the cable they needed

1179 - Search - Techie assumed boss knew what they were talking about and killed Exchange by deleting data

1180 - Search - Boss bought cheap ‘printer’ from a catalog and was left without a leg to stand on

1181 - Search - Tech team stood and laughed at colleague who pressed the wrong off button

1182 - Search - Techie sent to fix Nobel Prize winner’s PC almost set it on fire

1183 - Search - Techie with three months’ experience was sent in as the Cisco expert and proceeded to blow everything up

1184 - Search - Batch file automated a clean-up job, then fouled itself by deleting the wrong directory

1185 - Search - Part didn’t fit so techie got out his screwdriver. Then something flew off the motherboard

1186 - Search - Demoralized developer’s desperate hack came back to haunt him on LinkedIn

1187 - Search - IT boss left root session open for bring-your-kid-to-work day

1188 - Search - Manager showed off his DOS prowess – with a command that wiped data

1189 - Search - Comment in code read ‘Dear future me, sorry I wrote this’

1190 - Search - User crippled a network while trying to learn Nmap

1191 - Search - Apprentice developer defied orders – then got a job supporting her weird code

1192 - Search - Sysadmin broke hardware worth more than he made in a month – and lied his way out of the mess

1193 - Search - How dare you stop data loss – that’s not your job!

1194 - Search - Chinese e-tailer claimed 14-inch box stretched the size of a 9-inch tablet

1195 - Search - Consultant mistakenly deleted a ton of data – but reported it as a bug

1196 - Search - Techie expensed a bag of oranges and then juiced up a stupid security incident

1197 - Search - Under-trained techie didn’t claim overtime for mistakenly failing to phone it in

1198 - Search - Backup script ingested an accidental asterisk and deleted everything

1199 - Search - Lab worker built a fake PC to nuke his lunch

1200 - Search - Hope your holiday was horrid: You botched the last thing you did before leaving

1201 - Search - PowerPoint punishment sent users into an infinite loop after lunch

1202 - Search - ‘Invisible mouse’ made a mess of PC rebuild

1203 - Search - IT manager approved downtime over lunch, but made a meal of it

1204 - Search - The developer who came in from the cold and melted a mainframe

1205 - Search - Security contractor blew the whistle on support crew’s viral indifference

1206 - Search - Junior disobeyed orders and tried untested feature during a live robot demo

1207 - Search - Brilliant backups that kept data alive for ages landed web developer in big trouble

1208 - Search - Bug that wiped customer data saved the day – and a contract

1209 - Search - Server crashes traced to one very literal knee-jerk reaction

1210 - Search - Work experience kids messed with manager’s PC to send him to Ctrl-Alt-Del hell

1211 - Search - Final step to put new website into production deleted it instead

1212 - Search - Tech support chap invented fake fix for non-problem and watched it spread across the office

1213 - Search - Techie’s one ring brought darkness by shorting a server

1214 - Search - Marketing ‘genius’ destroyed a printer by trying to fix a paper jam

1215 - Search - ATM maintenance tech broke the bank by forgetting to return a key

1216 - Search - Techie banned from client site for outage he didn’t cause

1217 - Search - Techie turned the tables on office bullies with remote access rumble

1218 - Search - New boss was bad, his attitude was ugly, so the tech team pranked him good

1219 - Search - Techie ‘forgot’ to tell boss their cost-saving idea meant a day of gaming

1220 - Search - Untrained techie broke the rules, made a mistake, and found a better way to work

1221 - Search - Web dev’s crawler took down major online bookstore by buying too many books

1222 - Search - Dev’s last-day-of-contract code helped to crash app used by 350,000 people

1223 - Search - Developer made one wrong click and sent his AWS bill into the stratosphere

1224 - Search - Techie ran up $40,000 bill trying to download a driver

1225 - Search - networksLondon’s mobile networks fall to bottom of Europe’s capital leagueRooftop rent cuts, planning refusals and congestion leave Ookla ranking the UK’s capital last for speed and latency

1226 - Search - networksBroadcom Wi-Fi bug turns sweet 16, still lets strangers hijack your router

1227 - Search - networksICANN vows to work faster, improve transparency

1228 - Search - networksTime Lords kill leap seconds, before they become the new Y2K bug

1229 - Search - networksCisco, Nvidia team up to build fatter, faster pluggable

1230 - Search - Landline phones will switch off across Britland in 100 days, no extensions – Openreach

1231 - Search - Backbone of a beast – charting Nvidia’s rise to networking titan

1232 - Search - Nervous ISPs replace Chrome as strange consumers of DNS resources

1233 - Search - ai and mlOpenClaw creator says he spent $10 million in tokens last monthGood thing it’s somebody else’s money

1234 - Search - ai and mlReach new heights of laziness by burning tokens to let an AI tap your smartphone screen for youNothing will ruin your faith in humanity like an AI that operates your smartphone slowly, struggles with basic tasks, and can charge you for it

1235 - Search - ai and mlNvidia woos wary Europeans with more open weights modelsNew embedding, parsing, and reranking models promise smarter agentic RAG workflows

1236 - Search - securityLiteLLM supply chain attack hoovers up passwords and secretsPlus a RAT for good measure - get threat hunting now

1237 - Search - ai and mlAI will eat a fifth of tech budgets in 2027, but don’t expect it to pay for itselfForrester says only isolated wins are likely, while ‘good enough’ open-weight models soak up the tokens

1238 - Search - securitySignal bug could keep your mic - and camera - on after hangupCareful what you say after goodbye, or better yet, update your messaging app

1239 - Search - os platformsOpenBSD 8.0 beefs up virtual machines and gets a taste of WineProposed port brings 64-bit Windows apps within reach

1240 - Search - securityPHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatchedWebsites down as precaution as exploits have already been published

1241 - Search - ai and mlJensen Huang sends in the robot ducks to sell Nvidia’s AI-everywhere vision

1242 - Search - saasOneDrive gives Macs a million things to keep in syncOctober preview raises supported limit from 300,000 items, with general availability penciled in for June 2027

1243 - Search - ai and mlAI cuts coding time, but it’s also filling open source’s inbox with crapMaintainers reckon a quarter of incoming pull requests are slop, rising to 31% on larger projects

1244 - Search - securityAI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackersConsider this the wake-up call

1245 - Search - ai and mlNvidia picks OpenShell to tame AI gentsGive your agents freedom to do useful work by locking them down

1246 - Search - on-premNvidia’s grand plan for speeding up datacenter deployments: AI trailer parksGPUzilla boasts modular bit barns could speed up deployments from six months to just two weeks

1247 - Search - securityEU wants Booking.com to check out of its scam problemCommission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses ‘absolutely substandard’

1248 - Search - offbeatJava crashes the departure board at Tyne and Wear MetroTrain times remain on show as an elderly Windows dialog demands attention

1249 - Search - softwareThe spec is the new code, so brush up on your prose, says Kaseya CTODomain expertise and clear writing will matter more than syntax, and yes, that means documentation

1250 - Search - offbeatHappiness is the next AI KPI if Oxford boffins have their wayResearchers say public subsidies for AI should be repaid in wellbeing, not just economic growth

1251 - Search - Amazon makes vague commitment to unproven nuclear tech to power Indiana datacentersPartner X-energy has not built a single working reactor yet

1252 - Search - Uber dodges £340M cabbie lawsuit after drivers miss legal deadlineBlack cab drivers accused ride-hailing giant of misleading London’s transport regulator, but judge says they left it too late to sue

1253 - Search - In space, ‘We’ve gone from exploration to exploitation,’ says original Voyager team memberVoyager imaging team member Dr. Garry Hunt joins The Reg’s Kettle podcast to talk about his role in the mission as probe approaches one light day’s distance from Earth

1254 - Search - Museum exhibit reveals the intricate workings of a knackered DellWhen it should have been weaving tales of the Jacquard loom

1255 - Search - Oh no, what happened to my OOHPod? Windows command prompt puts in a surprise appearancePop quiz: somebody left a command shell logged in. What do you do?

1256 - Search - Give him a hand: Dev publishes 25-year-old Palm OS tools to GitHubAaron Ardiri opened his old development archive after discovering enthusiasts were still improving apps for the platform

1257 - Search - YouTuber built 30-frame-per-second grayscale Game Boy, then open sourced it for all e-paper displaysNot afraid of custom waveforms frying your e-paper? Download it from GitHub and give it a shot on your stock screen today

1258 - Search - Royal Navy goes fishing for suppliers to build its Type 93 robot submarinePreliminary notice seeks XLUUV builders, payload makers and AI developers, with Excalibur and Herne the obvious candidates

1259 - Search - Chaos ensues when AI interviewer meets AI intervieweeThings got weird, but there’s a lesson to be learned: Don’t trust a bot to negotiate for you

1260 - Search - Leap seconds face judgment day as time lords prepare to voteProposal would let UTC drift an hour from Earth’s rotation, sparing computer systems awkward adjustments for centuries

1261 - Search - Fire up that iPhone 1 emulation and party like it’s 2007Browser-based fun to remember a time before Apple’s annual cash grab became a thing

1262 - Search - Welcome to the lovely landlocked land of Luxembork, where the fares are free, and the terminals are technoTick, tick, tick, tick, ticket, ticket, tick tick

1263 - Search - Pigeon-powered internet packet goes under the hammer at Christie’s25 years after taking flight, a surviving packet from the world’s most impractical network has attracted a $4,000 bid

1264 - Search - US Navy bets another $150M on fighter drone that skips the runwayShield AI matches the funding as autonomous X-BAT heads toward flight testing later this year

1265 - Search - NASA taps DoE to help it build nuclear space reactorsSpace agency claims steady progress on lunar reactor plans, but offers little evidence to back it up

1266 - Search - Microsoft unveils ‘Surace’ Laptop UltraWhat the f?

1267 - Search - It’s a bird, it’s a plane…well, more of a spinning parachute, but really it’s a droppable robot boatThe ALBATROSS has landed

1268 - Search - Starlink’s plan to avoid orbital near-misses: Ephemeris sharingHang on. How about not chucking tens of thousands more satellites into space?

1269 - Search - Permanent daylight saving time could be a public health time bombTrump pushes the US to adopt pDST, but Canadian researchers say darker mornings come with costs for sleep, learning, and productivity

1270 - Search - Only the finest Swedish Bork will do for Stockholm stationNo, this is not GRUB of the meatball variety

1271 - Search - Security researcher claims they found KVM guest-host escape flawFirecracker MicroVMs, which started at AWS, seem to be the problem

1272 - Search - Musk follows Trump’s lead, swaps AI for SI in SpaceX rebrandActual intelligence in worryingly short supply

1273 - Search - Spies, prime ministers, and balls: The BBC Domesday project @ 40The Centre for Computing History gathers the minds behind the project and the ones keeping it alive today

1274 - Search - Clever database, but can it run Doom?Reg hack learns the meaning of ‘Be careful what you wish for’

1275 - Search - Flight delayed? So are these codec updatesA slice of Bolivian bork at Alcantarí International Airport

1276 - Search - Erase social media tomorrow? Brits say yesSo why are more and more people snorting their daily fix of cat videos, men fighting and political propaganda

1277 - Search - YouTube lunatic designed and 3D printed a working mechanical calculatorIf you can’t afford a Curta, we still don’t recommend trying this: It’ll eat up months of your life and all the filament you have

1278 - Search - Drunk Van Halen fan called Microsoft support and demanded to speak to GatesA broken Java applet had one FrontPage user ready for an Eruption

1279 - Search - Airbus gets a new freighter – and its giant door – into the air for the first timeThe A350F is apparently good for carrying servers

1280 - Search - Boeing’s Calamity Capsule gets another shot at the ISS taxi businessStarliner-1 could fly by January, with astronauts to follow by 2028 if all goes well

1281 - Search - Starship finally makes orbit but engine trouble cuts the victory lap shortSpaceX deployed 26 Starlink V3 satellites before bringing its planned ten-hour flight home after three

1282 - Search - What eldritch horror lurks behind Heathrow’s information screens?A triptych of airport bork awaits the unwary passenger

1283 - Search - Space Jam: UK debuts space squadron to protect satellitesNumber III Space Effects Squadron likely to use electronic warfare rather than lobbing missiles at hostile orbiting threats

1284 - Search - Judge uses electronic tag on Pokémon card tracker. It’s super effective!Ohio man planted a device on a delivery van to follow scarce trading card stock and caught a year of probation

1285 - Search - iPhone 18 Pro benchmark boosted by giving it a cold drink3x the vapor-chamber surface area can only do so much; luckily the fridge helped with sustained performance

1286 - Search - Discordians now subject to whims of new age verification technologyDiscord users asked to prove they’re adults get less intrusive options

1287 - Search - scienceHPE to launch AI straight to the MoonMystery silicon and mirrored SSDs set to touch down before year’s end

1288 - Search - scienceGet in the bin! UK Space Agency wants public to name its debris removal missionClearSpace UK aims to be operational in 2029 with public’s suggestion etched on the side of the spacecraft

1289 - Search - scienceRocket Lab pushes back first Neutron launch to 2027Carbon composite woes cause another delay for Peter Beck’s Hungry Hippo

1290 - Search - scienceResearchers work out how to control 2D semiconductor growth for future chipsKorean boffins use oxygen to stop crystals forming in the wrong places, aiming to get tech to commercial sector by 2030

1291 - Search - scienceScientists get a new clue to the origin of solar wind ‘switchbacks’Understanding why our nearest star does what it does

1292 - Search - scienceArgonne scientists create chatty X-ray microscope that zooms in where you tell it toTalking to an X-ray nanoprobe beamline is far better than talking to a toaster, we assume

1293 - Search - scienceScientists find planet made on new matter recipe, and it formed after a Red Giant ate a solar systemDeath of a star may not be game over for the inner solar system after all

1294 - Search - BOFH: Smells like team spiritIn which BOFH and PFY meet 1990s heroes who know how to deal with Bosses

1295 - Search - BOFH: The Helldesk opens its third eye and ascends to a higher plane of troubleshootingPutting the ‘om’ in computing

1296 - Search - BOFH: Oh no! The CMS ate 500 pages of corporate documentationHow could such a terrible tragedy have occurred?

1297 - Search - BOFH: Schrödinger’s petty cash puts us in a very awkward superpositionWhy oh why are the accountants stricter than the IRS and HMRC put together?

1298 - Search - BOFH: How our Covid ransomware protocol’s Y2K blockchain lowered uptimeDiary of an excuse hound: Pie charts make us hungry for pizza

1299 - Search - BOFH: This printer engineer knows every trick in the bookBut so does this customer

1300 - Search - BOFH: Cross-department AI pitches are easier to swallow with a pint in handSome ideas need workshopping, others need a warning light

1301 - Search - BOFH: Amnesty means never having to say you’re sorryThere’s no I in team, but there is one in insurance fraud

1302 - Search - BOFH: For one ambitious security type, chaos is a ladderMission Control sends its regards

1303 - Search - public sectorMPs urge UK government to play venture capitalist with taxpayer-funded techWatchdog says Whitehall is too timid about taking stakes in British startups, leaving taxpayers at risk of missing out when they strike gold

1304 - Search - securityIndian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’Massive clean-up job under way because this mess makes it possible to impersonate any website or service

1305 - Search - cyber-crimeAuto tech startup claims it traced hack attempt back to rival’s IP addressIQ.Lvbs implies that rival Comma.ai isn’t playing fair

1306 - Search - systemsTens of thousands of Nvidia GPUs sit in Meta’s Prometheus supercluster, waiting for a failureAnd other fun facts about how Zuckercorp aims to keep a million GPUs running long enough to train a model

1307 - Search - Do not share my personal information

1308 - Search - Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offlineSecond security snafu in two years

1309 - Search - Security patches need patches now that attackers have AITerra finds sharp rise in GitHub security fixes reported broken within 90 days

1310 - Search - ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFUHuntress alleges takeover of M365 accounts

1311 - Search - Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape

1312 - Search - Cybercrims go beyond stealing data to attack physical building systems’Hold my beer, have fun getting into your offices’

1313 - Search - Networking problems after the October 2026 Windows update? NTLM might be to blameLegacy protocol is going to be axed, and enforcement by default will highlight how migration is going

1314 - Search - Uncle Scam Wants You … to cough up your cash and personal data, FBI warns ahead of midtermsThe inevitable election-themed cyberattacks are whirring again, as the feds issue PSA about the ones to watch out for

1315 - Search - Attack on BAE-managed system disrupts US bankruptcy courtsLegal eagles still plodding along with some operations, but paper and e-notices delayed until further notice

## Security Affairs

View Articles

1316 - Search - FBI Blames North Korea for $6 Billion Binance Crypto Theft

1317 - Search - SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

1318 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

1319 - Search - Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

1320 - Search - SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

1321 - Search - U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

1322 - Search - Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

1323 - Search - Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

1324 - Search - U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

1325 - Search - $6.3 Billion Stolen from Binance in Attack Attributed to North Korea

1326 - Search - How to prioritize remediation after a pentest: a practitioner workflow

1327 - Search - Hacker leaks data on more than 40,000 Homeland Security employees

1328 - Search - Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

1329 - Search - US Probes Suspected Hack Behind Military Base Freezer Failures

1330 - Search - 484,142 Exposed Cloud Buckets Contain 18 Billion Files

1331 - Search - U.S. CISA adds Linux Kernel and Broadcom VMWare ESX  flaws to its Known Exploited Vulnerabilities catalog

1332 - Search - Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

1333 - Search - Election Website Security: 42% of US County Sites Still Lack .gov Domains

1334 - Search - ENGIE Data Breach Exposes Customer Details and Energy Contracts

1335 - Search - Virtualine Domain Seized, but Allegedly Abusive Website Remains Online

1336 - Search - Hackers access Booking.com user data, company secures systems

1337 - Search - Inside ZionSiphon: politically driven malware aims at Israeli water systems

1338 - Search - RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace

1339 - Search - Checkmarx supply chain attack impacts Bitwarden npm distribution path

1340 - Search - Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed

## The Hacker News

View Articles

1341 - Search - CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyNov 01, 2026Vulnerability / Cloud SecurityA critical flaw in Canonical’s LXD and MicroCloud let an attacker log in as a trusted client without holding that client’s private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client’s public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is privileged, the attacker could gain “root access to the host machine,” Canonical said. The flaw, tracked as  CVE-2026-112816 , carries a maximum CVSS score of 10.0, and Canonical has  released fixed versions  of both products. How the Flaw Works LXD and MicroCloud let remote clients access their APIs over mutual TLS, a setup in which the client presents a certificate to prove who it is. A client is trusted when its certificate is in the server’s trust store, the list of identities the server will accept. The flaw was in how the server checked that certificate. It compa…

1342 - Search - Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptNov 01, 2026Cryptocurrency / Web SecurityMalicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says  it is refunding about $2.7 million to 726 affected wallets.  Blockchain records  show crypto worth about $2.64 million reached the hackers’ wallet in under an hour. The replaced script came from DebugBear, whose real user monitoring (RUM) tool measures how fast web pages load for real visitors. Researchers at Hudson Rock  downloaded the malicious file on October 29 from the address Polymarket’s site used to load the DebugBear script. They also found a change in Polymarket’s site code that removed the DebugBear script. DebugBear’s DNS records were compromised through its domain registrar, the company said on X. Its early findings indicate the attack targeted one customer’s website. It has seen no sign…

1343 - Search - FBI Links North Korea’s TraderTraitor to Record $6.43 Billion Binance Crypto HeistNov 01, 2026Cyber Crime / CryptocurrencyThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor , a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, along with the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation (IRS-CI), said it observed the threat actor converting stolen assets primarily into Ethereum (ETH). “It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages,” the FBI said in a statement. The agency has also provided a list of wallet addresses that the attackers are said to be using to launder the stolen assets. The development comes as Binance said it has resumed phase one of withdrawals starting today between 6 and 9 a.m. UTC after they were paused in the wake of the incident. “S…

1344 - Search - NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET InjectionNov 01, 2026Windows Security / Cyber EspionageCybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET assembly-loading framework codenamed NetamLoader . The attack has not been attributed to any known threat actor or group. Nor is it clear if the intrusion compromised more than one system and allowed the hackers to steal any sensitive information. The Russian cybersecurity company said the artifact was detected in the first half of 2026, packaged inside a Windows cabinet archive (CAB) file placed in a directory that stores Windows operating system update packages. It’s suspected the operation involved a supply chain attack , in which bad actors compromised a trusted third-party vendor to gain access to downstrea…

1345 - Search - Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataOct 31, 2026Data Security / Cyber AttackAmerican blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. “This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools,” Chainalysis said Friday. “Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users.” The company said it’s patching vulnerabilities and hardening its systems in response to the incident. The mention of “offensive agentic techniques” indicates that an artificial intelligence (AI)-powered tool was used …

1346 - Search - Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessOct 31, 2026Vulnerability / Cyber AttackThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities ( KEV ) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. CVE-2026-118527 (CVSS score: 4.3) - A generation of predictable numbers or identifiers vulnerability that could allow a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. It’s worth noting that the security bugs are part of an exploit chain that was first documented by Volexity earlier this month as weaponized in conjunction with an authentication bypass flaw (CVE-2026-104935, CVSS score: 8.6) by a previously undocumented threat actor dubbed UTA0576. CVE-2026-10493…

1347 - Search - A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsOct 31, 2026Vulnerability / Web SecurityA malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through  OpenAI’s bug bounty program  on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category. The trap was an ordinary ChatGPT conversation shared via its public link. It could be sent the same way as any real shared chat: by email, as a chat message, as a support ticket, or as a social post. The victim did not have to install anything, join a workspace, or sign in through the attacker. In the most reliable version of the attack, they opened the link and clicked ChatGPT’s Preview button once. In a later version, Parameter set the page to open Preview on its own, so opening the link was the only step. What the Attacker Could Do Once the link opened, the attacker’s code ran ins…

1348 - Search - Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%Oct 31, 2026Threat Intelligence / Network SecurityThreat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44 seconds. In comparison, a total of 13.2 million and 10.0 million L3 DDoS attacks were recorded in Q2 and Q1 2026, respectively. The increase has been linked to DDoS-for-hire booter or stresser services that are responsible for hundreds of thousands of attacks.  “Short-burst, low-bandwidth attacks lasting under 10 minutes and 1 Gbps surged by 208%,” the Cloudforce One threat intelligence team said in its quarterly DDoS Threat Report shared with The Hacker News. An interesting trend is the decline of hyper-volumetric attacks exceeding 1 Tbps by 69% from the previous quarter – going …

1349 - Search - Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideOct 30, 2026Cyber Espionage / Artificial IntelligenceChinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based “targeted intrusion adversary” it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in February 2021, the hacking group overlaps with a threat cluster detailed by Trend Micro as Earth Estries . “Agentic tooling like ARTEX enables this scale of expansion at speed, allowing a small team to pursue a wider target set than manual operations would support, rather than a wholesale shift away from the adversary’s established access-development mission,” CrowdStrike said in a Thursday analysis. Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in …

1350 - Search - TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemOct 30, 2026Vulnerability / Endpoint SecurityTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host can exploit the flaw to crash the viewer’s TeamViewer and, depending on the platform, may also run code on the viewer’s computer. This works only after the user starts a remote-control session to that host. The fix is in TeamViewer version 15.83. The flaw is tracked as  CVE-2026-111585  and scored 8.8 out of 10, in the high range. It affects the TeamViewer Full Client on Windows, Linux, and macOS, the Windows Portable edition, and the Android Remote Control app, in all versions before 15.83. For this flaw, TeamViewer’s  bulletin  lists the Full Client, Portable, and Android app, but not the Host. The same 15.83 update fixes two other flaws in that bulletin that do affect…

1351 - Search - WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursOct 30, 2026Vulnerability / Web SecurityThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability , which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring system. Patches for the flaw were released on October 28, 2026. “This is due to predictable, web-accessible staging paths used during full-package core upgrades,” Wordfence said . “This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.” The WordPress security company noted that successful exploitation requires an “attacker to hit a very narrow window while WordPress is unpacking a complete Core update.” The issue boils down to the fact that affected versions unpack new files part of a full-package Core update into a predictable directory under “wp-c…

1352 - Search - Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisOct 30, 2026Hardware Security / CryptocurrencyA Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. Trezor said in a  blog post  on October 30 that the report came in two days earlier from a customer in Indonesia. He bought the wallet from CryptoBilis in August, through the marketplace Tokopedia. The board sits between the wallet’s main board and its screen, with a cellular module and an antenna, according to the report. It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in. Trezor has the customer’s photos and description and has interviewed him on a video call. It is arranging for the wallet to be sent to its lab. Trezor find…

1353 - Search - Why Urgent Security Fixes Aren’t Fixed. Observe, Prove, Act, Confirm Gets Them MovingOct 30, 2026Intrusion Prevention / Endpoint SecurityThe alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything.  Their concerns are practical. An IPS protection could block legitimate traffic. A configuration change could interrupt a service. An endpoint policy could affect an application the business depends on. Without evidence, the recommendation waits.  Safe remediation answers that hesitation with evidence. It tests the proposed action against your environment, applies the approved change, and confirms the result. Security and operations teams decide together, with facts.  The Cost of Leaving Protection in Detect  Many organizations already own protection they don’t enforce. Signatures sit inactive or in Detect mode while teams weigh false positives, inspection capacity, and business continuity. Meanwhile, applications and traffic patterns change, excep…

1354 - Search - Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in PrisonOct 30, 2026Cyber Crime / Cyber EspionageAhmad Umar Agha , a Syrian Electronic Army hacker known online as " Th3Pr0 ,” has been  sentenced by a U.S. federal court  to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets. The conspiracy was organized and led by members of former Syrian President Bashar al-Assad’s inner circle, including the commander of Syria’s General Intelligence Directorate, the U.S. Justice Department said on October 29. The pro-Assad Syrian Electronic Army began its attacks in 2011. Its members sent phishing emails to steal employees’ passwords, then used those passwords to deface websites, redirect web traffic, and hijack social media accounts, according to a  2014 FBI affidavit . On April 23, 2013, the group hijacked the Associated Press’s Twitter account and posted a false report that President Barack Obama had been injured in two explosions at the White House. Twitter’s message confirming a password reset for that account w…

1355 - Search - Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorOct 30, 2026Malware / Artificial IntelligenceCybersecurity researchers have disclosed that a trojanized version of Anthropic’s official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was distributed under the extension’s legitimate publisher identity, prompting Cursor to temporarily shut down its marketplace to remove the compromised package. The exact method attackers used to introduce the unauthorized update remains unclear. “We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users,” Cursor said . “This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor[.]com/marketplace, Grok Bot, Grok, or our other SpaceXSI product. However, Cursor’s statement that the…

1356 - Search - Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawOct 30, 2026Vulnerability / Web SecurityDrupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. “This module enables you to sell goods and services to customers through an included shopping cart and checkout form or through decoupled applications via APIs,” Drupal said in an advisory. “The module doesn’t sufficiently protect certain routes and entity fields, leading to an access bypass that may financially impact the vendor.” The open-source content-management framework acknowledged that the vulnerability is being “actively exploited in the wild,” but provided no specifics about the nature of the activity or the extent of the campaign. Users are being recommended to update to the latest version - Version 3.x - Upgrade to Commerc…

1357 - Search - Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

1358 - Search - Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

1359 - Search - ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

1360 - Search - Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

1361 - Search - Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

1362 - Search - China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

1363 - Search - Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

1364 - Search - PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

1365 - Search - Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

1366 - Search - Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

1367 - Search - CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

1368 - Search - GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

1369 - Search - Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

1370 - Search - PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

1371 - Search - Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

1372 - Search - Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

1373 - Search - Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

1374 - Search - The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers

1375 - Search - Wazuh and AI for Enhanced SOC Workflows

1376 - Search - American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

1377 - Search - AI-Generated Fake Login Pages Are Making Account Takeovers Easier

1378 - Search - Your Backup Isn’t Ransomware-Proof Just Because It ExistsOctober 26, 2026Read ➝

1379 - Search - Why Root and Jailbreak Detection Alone Cannot Guarantee Mobile App SecurityOctober 26, 2026Read ➝

1380 - Search - The Least Trusted Author Sets the AI Agent’s PrivilegeOctober 19, 2026Read ➝

1381 - Search - Security Rests on Hard Math Problems. Quantum and AI Are Both Coming for ThemOctober 19, 2026Read ➝

## ThreatPost

View Articles

1382 - Search - Student Loan Breach Exposes 2.5M Records

1383 - Search - Watering Hole Attacks Push ScanBox Keylogger

1384 - Search - Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

1385 - Search - Ransomware Attacks are on the Rise

1386 - Search - Inside the Hackers’ Toolkit – Podcast

1387 - Search - Being Prepared for Adversarial Attacks – Podcast

1388 - Search - The State of Secrets Sprawl – Podcast

1389 - Search - A Blockchain Primer and a Bored Ape Headscratcher – Podcast

1390 - Search - Security Innovation: Secure Systems Start with Foundational Hardware

1391 - Search - Securely Access Your Machines from Anywhere – Presented by Keeper Security

1392 - Search - Log4j Exploit: Lessons Learned and Risk Reduction Best Practices

1393 - Search - How to ID and Protect Sensitive Cloud Data: The Secret to Keeping Secrets

1394 - Search - Cloud Security: The Forecast for 2022

1395 - Search - 2021: The Evolution of Ransomware

1396 - Search - Healthcare Security Woes Balloon in a Covid-Era World

1397 - Search - 2020 in Security: Four Stories from the New Threat Landscape

1398 - Search - Cybercriminals Are Selling Access to Chinese Surveillance Cameras

1399 - Search - Twitter Whistleblower Complaint: The TL;DR Version

1400 - Search - Firewall Bug Under Active Attack Triggers CISA Warning

1401 - Search - Fake Reservation Links Prey on Weary Travelers

1402 - Search - iPhone Users Urged to Update to Patch 2 Zero-Days

1403 - Search - Is your Java up to date?

1404 - Search - Top 5 Tips to Avoid Viruses and Spyware

1405 - Search - U.S. needs to investigate cyberweapons

1406 - Search - Six months later, DNS still taking a hit

1407 - Search - Pwn2Own 2009: Browsers and smart phones are targets

1408 - Search - Telegram Fraudsters Ramp Up Forged COVID-19 Vaccine Card Sales

1409 - Search - How the Pandemic is Reshaping the Bug-Bounty Landscape

1410 - Search - A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return

1411 - Search - Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes

1412 - Search - Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills

1413 - Search - Cyber-Spike: Orgs Suffer 925 Attacks per Week, an All-Time High

1414 - Search - PYSA Emerges as Top Ransomware Actor in November

1415 - Search - Encrypted & Fileless Malware Sees Big Growth

1416 - Search - Innovative Proxy Phantom ATO Fraud Ring Haunts eCommerce Accounts

1417 - Search - Women, Minorities Are Hacked More Than Others

1418 - Search - Threatpost Podcast & Video Hub: Going Beyond the Headlines

1419 - Search - Wikileaks Alleges Years of CIA D-Link and Linksys Router Hacking Via ‘Cherry Blossom’ Program

1420 - Search - Bash Exploit Reported, First Round of Patches Incomplete

1421 - Search - Threatpost News Wrap, February 21, 2014

1422 - Search - Jeremiah Grossman on His New Role as CEO of WhiteHat Security

1423 - Search - Threatpost News Wrap, January 24, 2014

1424 - Search - Rich Mogull on the Target Data Breach

1425 - Search - Threatpost News Wrap, January 10, 2014

1426 - Search - 2013: The Security Year in Review

1427 - Search - Lyceum APT Returns, This Time Targeting Tunisian Firms

1428 - Search - National Surveillance Camera Rollout Roils Privacy Activists

1429 - Search - Malware Gangs Partner Up in Double-Punch Security Threat

1430 - Search - How Email Attacks are Evolving in 2021

1431 - Search - Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks

1432 - Search - Ransomware and IP Theft: Top COVID-19 Healthcare Security Scares

1433 - Search - Experts Weigh in on E-Commerce Security Amid Snowballing Threats

1434 - Search - Cybercriminals Step Up Their Game Ahead of U.S. Elections

1435 - Search - 2020 Cybersecurity Trends to Watch

1436 - Search - Top Mobile Security Stories of 2019

1437 - Search - Facebook Security Debacles: 2019 Year in Review

1438 - Search - Biggest Malware Threats of 2019

1439 - Search - Top 10 IoT Disasters of 2019

1440 - Search - 2019 Malware Trends to Watch

1441 - Search - Top 2018 Security and Privacy Stories

1442 - Search - 2019: The Year Ahead in Cybersecurity

1443 - Search - 2018: A Banner Year for Breaches

## Security Week

View Articles

1444 - Search - Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

1445 - Search - Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

1446 - Search - PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

1447 - Search - In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

1448 - Search - Passkeys Are Better Than Passwords. But They Are Not Enough.

1449 - Search - Bulletproof Host Virtualine Loses Its Domain to FBI Seizure

1450 - Search - Fresh WordPress Vulnerability in Attackers’ Crosshairs

1451 - Search - Drupal Commerce Core Vulnerability Exploited Against Online Stores

1452 - Search - $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

1453 - Search - Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

1454 - Search - TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

1455 - Search - $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor

1456 - Search - When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis

1457 - Search - Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

1458 - Search - This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

1459 - Search - The Key to AI Software Security Isn’t Speed, It’s Maturity

1460 - Search - Oracle Health Data Breach Tally Climbs to Nearly 20 Million

1461 - Search - Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

1462 - Search - Anthropic Acquires Confidential AI Startup Opaque Systems

1463 - Search - Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

1464 - Search - IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion

1465 - Search - Cybersecurity M&A Roundup: 39 Deals Announced in September 2026

1466 - Search - Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal

1467 - Search - Cyber Insights 2026: The Ongoing Fight to Secure Industrial Control Systems

1468 - Search - Cyber Insights 2026: Cyberwar and Rising Nation State Threats

1469 - Search - Cyber Insights 2026: Malware and Cyberattacks in the Age of AI

1470 - Search - Cyber Insights 2026: Zero Trust and Following the Path

1471 - Search - Cyber Insights 2026: Offensive Security; Where It Is and Where It’s Going

1472 - Search - Cyber Insights 2026: Quantum Computing and the Potential Synergy With Advanced AI

1473 - Search - Hacker Conversations: Corey Thuen and the Evil Bit

1474 - Search - Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass

1475 - Search - Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster

1476 - Search - Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption

1477 - Search - Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker

1478 - Search - CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO

1479 - Search - CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast

1480 - Search - CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite

1481 - Search - CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW

1482 - Search - CISO Conversations: Russ Kirby – Passion Is the Antidote to Burnout

1483 - Search - Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model

1484 - Search - How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI

1485 - Search - Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps

1486 - Search - Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

1487 - Search - 500,000 Active Credentials Left Exposed on GitHub

1488 - Search - Malicious B-tree NPM Package Accumulates Millions of Downloads

1489 - Search - Virtual Event Today: Attack Surface Management Summit

1490 - Search - Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

1491 - Search - Microsoft Patches Exploited Entra ID Vulnerability

1492 - Search - Fortune 500 Companies Hit in Azure Data Theft Campaign

1493 - Search - Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer

1494 - Search - Long-Hidden Flaws Patched in EPICS Research Facility Control Software

1495 - Search - Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

1496 - Search - Industrial Vendors Check Products for PHP2Shell Vulnerabilities

1497 - Search - Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

## CSO Online

View Articles

1498 - Search - blogCSO Security CouncilExpert insights and strategic guidance for CISOs on emerging threats, AI risks, zero trust and enterprise security leadership. This blog is part of the Foundry Expert Contributor Network. Want to join? Learn more here: https://www.csoonline.com/exper...252 articles

1499 - Search - blogBehind the Mic: Tech insights from IT events20 articles

## Troy Hunt

View Articles

1500 - Search - why I chose to use Ghost

## Schneier on Security

View Articles

1501 - Search - Friday Squid Blogging: Bigfin Squid Off California Coast

1502 - Search - Bloatware in Aftermarket Auto Parts

1503 - Search - Studying Fraudulent North Korean IT Workers

1504 - Search - Hiding Capabilities in AI Models

1505 - Search - Posted on October 26, 2026 at 7:03 AM

1506 - Search - Friday Squid Blogging: Increasing Squid Populations

1507 - Search - Posted on October 23, 2026 at 7:04 AM

1508 - Search - New Serious PHP Vulnerabilities Released and Patched

1509 - Search - Workshop on Economics and Information Security (WEIS) Archive

1510 - Search - Possible new Cellebrite iPhone Radio Zero-Day

1511 - Search - Four Ways AI Is Being Used to Strengthen Democracies Worldwide

1512 - Search - The CrowdStrike Outage and Market-Driven Brittleness

1513 - Search - How Online Privacy Is Like Fishing

1514 - Search - How AI Will Change Democracy

1515 - Search - Seeing Like a Data Structure

1516 - Search - The Eternal Value of Privacy

1517 - Search - Terrorists Don’t Do Movie Plots

## AFCEA Signal Media

View Articles

1518 - Search - The Cyber Edge Writing Award