Cyber - 2026-11-02 - EVE
##
Krebs on Security
View Articles
570 - Search - Widespread PHP Flaw May Cause Many Site Outages Today
571 - Search - Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
572 - Search - U.K. Sanctions Cryptomus for RU Money Laundering
573 - Search - How Cryptocurrency Turns to Cash in Russian Banks
574 - Search - a record CAD $176 million fine
575 - Search - Microsoft Patches More Than 1,400 Security Flaws
576 - Search - FBI Arrests Executive at Ransomware Negotiation Firm
577 - Search - ShinyHunters Extorted Boeing Spin-off Prior to Arrests
578 - Search - our November 2025 profile of Rey
579 - Search - Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
580 - Search - U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
581 - Search - was likely a U.S. soldier stationed in South Korea
582 - Search - pleaded guilty to operating theSatoribotnet
583 - Search - pleaded guilty in August 2026
584 - Search - a 2021 data breach at T-Mobile
585 - Search - Data Broker Radaris Loses Domains in Privacy Fight
586 - Search - a deep dive into the Radaris co-founders
587 - Search - using a fictitious CEO’s name
588 - Search - Microsoft Plugs Nearly 1,000 Security Holes
##
Symantec Enterprise Blogs
View Articles
591 - Search - Cloud C² — Command & Control
592 - Search - Essential, Elite and Red Team
593 - Search - Terms of Service & Policies
594 - Search - PAYLOAD AWARDSGet your payload in front of thousands and enter to win. Nearly $10,000 in annual Hak5 prizes!
595 - Search - DUCKYSCRIPT COURSELearn directly from the creators! Unlock your creative potential with this comprehensive course.
596 - Search - only for BIS license exception ENC favorable treatment countries
597 - Search - Core Email ProtectionGet industry-leading threat protection via API or gateway
598 - Search - Email Fraud DefenseProtect your brand, increase deliverability, and identify lookalike domains
599 - Search - ZenGuideDeliver targeted, risk-based security awareness training
600 - Search - Secure Email RelaySecure application email and implement DMARC faster
601 - Search - Account Takeover ProtectionDetect, investigate, and respond to account takeovers
602 - Search - Data Security for AISecure data across shadow and approved AI
603 - Search - Enterprise DLPPrevent data loss across email, cloud, and endpoints
604 - Search - Adaptive Email DLPPrevent misdirected emails and hidden data exfiltration
605 - Search - Insider Threat ManagementGet visibility into risky behavior by careless, malicious, and compromised users
606 - Search - Data Security Posture ManagementDiscover, classify, and protect sensitive data across cloud and hybrid environments
607 - Search - Digital Communications GovernanceIntelligently capture, retain, and discover digital communications
608 - Search - Secure AI Usage by PeopleGet visibility and control around employees’ use of AI
609 - Search - Secure AI Usage by AgentsUnderstand AI agent intent and control their use of other AI tools
610 - Search - Secure MCP Across Your EnterpriseUnify MCP discovery, authorization, and monitoring
611 - Search - Proofpoint NexusAdvanced AI and threat intel to detect threats and assess data risk
612 - Search - Proofpoint ZenIntegrated control points to protect people and data anywhere
613 - Search - Proofpoint SatoriThe power behind agentic security operations
614 - Search - Proofpoint 365 Total ProtectionEnabling the channel, protecting humans and agents
615 - Search - Ensure Acceptable GenAI UseEmpower your workforce with safe GenAI practices
616 - Search - Govern Claude AI ActivityIntegrate Proofpoint with Claude Compliance API
617 - Search - Secure Microsoft 365Implement flexible security and compliance for M365
618 - Search - Ransomware PreventionStop attacks by securing ransomware’s top vector
619 - Search - Combat Email and Cloud ThreatsProtect your people with a smart, holistic approach
620 - Search - Protect Cloud AppsEliminate threats and data loss across cloud apps
621 - Search - Change User BehaviorHelp your users identify, resist, and report attacks
622 - Search - Modernize Compliance and ArchivingManage your risk and data retention requirements
623 - Search - Authenticate Your EmailProtect your email deliverability with DMARC
624 - Search - Federal GovernmentEnable your agency with FedRAMP certified security
625 - Search - Higher EducationProtect your campus, people, data, and research
626 - Search - HealthcareProtect clinicians, patient data, and intellectual property
627 - Search - Internet Service ProvidersDeliver leading email protection for your networks and customers
628 - Search - State and Local GovernmentSecure your institutions, services, and communities against cyberthreats
629 - Search - Financial ServicesProtect your institution while meeting compliance requirements
630 - Search - Mobile OperatorsProtect your messaging environments and subscribers at scale
631 - Search - Small and Medium BusinessesStrengthen your business with enterprise-grade security built to grow with you
632 - Search - Proofpoint ServicesLeverage our expertise to maximize your investment
633 - Search - Advisory ServicesMaintain control with expert guidance and recommendations
634 - Search - Applied ServicesGet hands-on execution, guidance, and measurable impact
635 - Search - Resource libraryResearch, insights, and resources from Proofpoint experts.
636 - Search - BlogKeep up with the latest news and expert insights
637 - Search - Customer StoriesRead how customers solve their toughest security challenges
638 - Search - Cybersecurity AcademyBecome a Proofpoint Certified Guardian
639 - Search - EventsConnect and learn with peers at in-person events
640 - Search - WebinarsBrowse our complete webinar library
641 - Search - Threat glossaryLearn about the latest security threats and techniques
642 - Search - PodcastsStay informed with our renowned threat researchers
643 - Search - Threat Insight BlogDiscover actionable threat intel and expert analysis
644 - Search - IP Address Blocked?Best practices for email delivery, authentication, and troubleshooting
645 - Search - Support ServicesGet help with current incidents with Proofpoint products
646 - Search - Why ProofpointProofpoint provides intent-based protection for every human, every AI agent, across all data
647 - Search - LeadershipLearn about the executive team leading Proofpoint’s strategy and vision
648 - Search - ESGLearn about our environmental, social, and governance principles
649 - Search - Comparing ProofpointEvaluating security vendors? Check out side-by-side industry comparisons
650 - Search - News CenterRead press releases, news, and media highlights about Proofpoint
651 - Search - CareersMake a difference at one of the world’s leading security companies
652 - Search - AboutLearn more about the team driving human and agent-centric security
653 - Search - AI, Privacy and TrustLearn about our data handling, privacy, and compliance
654 - Search - English: Europe, Middle East, Africa
655 - Search - Corporate NewsOctober 15, 2026Sumit DhawanSecuring the AI Future Starts with Protecting Enterprise Data
656 - Search - Threat InsightOctober 14, 2026The Proofpoint Threat Research TeamDisruption Targets Major Chinese-Language Phishing Kits with Japanese Focus
657 - Search - Corporate NewsSeptember 23, 2026Tim ChoiProofpoint named a Pace Setter as of September 2026 in the Gartner Emerging Market Quadrant for AI Application Security — Established Vendors
658 - Search - Human Resilience & Security Awareness
659 - Search - September 22, 2026Sumit DhawanIn Cybersecurity, Behavior is a Signal. Intent is the Full Story.
660 - Search - September 09, 2026By Mark Kelly, Greg Lesnewich, Konstantin Klinger, Saher Naumaan, Julia Paluch, David Galazin, Stuart Del Caliz, and the Proofpoint Threat Research TeamOnce in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days
661 - Search - September 03, 2026Ryan KalemberWhy Proofpoint Is Signing On to Collective Cyber Defense with Frontier Labs
662 - Search - September 03, 2026Daniel Rapp, Kevin Epstein, Duane KurodaProofpoint Introduces SOC Analyst Agent, Powered by OpenAI Daybreak Models Through Daybreak Defense Network
663 - Search - Identity & Access Mgmt Security
664 - Search - Devs Hit by Trojanized Claude Code Extension for Cursor
665 - Search - Undead Software Projects Continue to Raise Security Risks
666 - Search - Heard It From a CISO
667 - Search - As Russia’s Cyberwar Evolves, Belarus Steps Forward
668 - Search - Anthropic-Themed Phishing Emails Bypass Top Security Tools
669 - Search - Rethinking Cybersecurity Awareness in the AI Era
670 - Search - Claude Model Builds Exploits Across Major Browsers & OSes
671 - Search - Threat Modeling With 4 Simple Questions on a White Board
672 - Search - Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
673 - Search - Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
674 - Search - GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
675 - Search - Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
676 - Search - Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
677 - Search - 3 Frameworks to Protect CISOs & Orgs Against AI Liability
678 - Search - External Teams Chats Anchor 15-Minute Malware Delivery
679 - Search - SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack
680 - Search - Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
681 - Search - ‘Aokigahara’ Stealer Targets ‘Developer Keyrings’ & AI Assistants
682 - Search - Risks & Rewards: How AI Is Redefining the CISO’s Role
683 - Search - In-the-Wild Attack Abuses AI Agents’ Trust in Markdown
684 - Search - ‘Gheist’ Weaponizes GitHub Tokens to Steal Cloud Secrets
685 - Search - Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
686 - Search - AI Tools Are Generating Massive Attacks for Little Cost
687 - Search - Cyber Insurance’s New Reality: Underwriting Isn’t Enough
688 - Search - State Bank of India Suffers a Customer PII Data Leak
689 - Search - Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
690 - Search - What We Missed: Feds Lasso Texas Laptop Farms
691 - Search - UAE Transitions 50% of Government Services to Agentic AI
692 - Search - TiDB Breach Exposes Flawed Cloud Security Assumptions
693 - Search - ‘PHP2Shell’ Bugs Signal Red Alert for Security Industry
694 - Search - OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
695 - Search - Decades-Old Windows Utility Powers Modern ClickFix Attack
696 - Search - Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
697 - Search - Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ
698 - Search - Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
699 - Search - Researchers Infiltrate Microsoft Tech Support Scam Operation
700 - Search - As AI Risks Grow, Insurers Split on Covering the Damage
701 - Search - AI Takes Root in Hospital Corridors, Raises Security Stakes
702 - Search - The Future of the Datacenter
703 - Search - The State of Storage 2026
704 - Search - Linus Torvalds says Linux kernel is out of ‘stabilization phase’ and using ‘much healthier model’ for AI contributionsYet machine-made patches ‘often get rewritten’
705 - Search - Landline phones will switch off across Britland in 100 days, no extensions – OpenreachLegacy public switched telephone network service is to be retired on January 31, 2027
706 - Search - ‘Mother of all editors’ Emacs is 50By a startling coincidence, so is its arch-rival Vi
707 - Search - Amazon sends chills through its workforce with mixed message memo about AI useA lot of software engineers feel bleak about the future of the profession
708 - Search - Backbone of a beast – charting Nvidia’s rise to networking titanHow a $6.9B bet on Mellanox made Nvidia bigger than Cisco, and the world’s most valuable company to boot
709 - Search - Google’s AI satellite sends a very expensive haiku to EarthExperimental orbital datacenter prototype puts its TPU to work producing poetry
710 - Search - HTTP/3 is faster with some work and help from CloudflareHow the Uber-bound delivery giant tuned its mobile networking stack to cut latency
711 - Search - Voyager 1 gives controllers the silent treatment
712 - Search - Google struggling to make AI Mode searches pay
713 - Search - ON CALLFarm PC ‘maintained’ by a 14-year-old dumped support chap in a steaming pile of tech mess
714 - Search - AI Arms Race Puts Sovereign Supply Chains in the Spotlight
715 - Search - How to Evaluate CPU Performance for Agentic AI
716 - Search - Intel’s $2.3 Billion Bet on a Quantum Future is a Decade in the Making
717 - Search - Oracle is Expanding the Accelerator Options in OCI for Enterprises
718 - Search - Sandisk’s flash revenue rocket accelerates some more
719 - Search - Samsung memory virtually printing money
720 - Search - Cohesity protects HashiCorp’s self-hosted Terraform hybrid cloud control plane
721 - Search - Seagate: Hyperscalers hot for HAMR
722 - Search - HTTP/3 is faster with some work and help from Cloudflare
723 - Search - Topcoat enables Rust to render server-side web apps
724 - Search - Node.js creator ditches Deno to work on open source Cloudflare Workers
725 - Search - Python 3.15 goes global with UTF-8 support
726 - Search - OPINIONHugging Face is too important to fall into Nvidia’s hands$12.9 billion deal will inevitably cement Nvidia’s market dominance and harm competition in the process. Regulators should take note
727 - Search - NASA ponders a Hubble servicing mission or a controlled deorbit2 days ago
728 - Search - BattMan aims to turbocharge US batteries without robbin’ critical minerals3 days ago
729 - Search - Boffin’s software found a possible dwarf planet - a result so rare he thought it must be a bug3 days ago
730 - Search - How to access the Dark Web using the Tor Browser
731 - Search - How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11
732 - Search - How to use the Windows Registry Editor
733 - Search - How to backup and restore the Windows Registry
734 - Search - How to start Windows in Safe Mode
735 - Search - How to remove a Trojan, Virus, Worm, or other Malware
736 - Search - How to show hidden files in Windows 7
737 - Search - How to see hidden files in Windows
738 - Search - [Guide] How to identify risky OAuth grants and MCP server connections
739 - Search - Reach out to get featured—contact us to send your exclusive story idea, research, hacks, or ask us a question or leave a comment/feedback!
740 - Search - Barracuda has appointed Dan Fletcher as CFO.
741 - Search - More People On The Move
742 - Search - Weekly Update 528: Reading AI-generated Code & the Economics of Solar
743 - Search - Weekly Update 527: Cybergeddon News v. Reality
744 - Search - Weekly Update 526: Building HIBP AI/SI First
745 - Search - Weekly Update 525: AI Data Breach Hyperbole
746 - Search - Weekly Update 524: Live From Copenhagen
747 - Search - Weekly Update 523: Live From a Norwegian Fjord
748 - Search - Weekly Update 522: Live From Oslo with Scott Helme
749 - Search - Weekly Update 521: Breach Perception v. Reality
750 - Search - Weekly Update 520: The Unscripted Edition
751 - Search - Weekly Update 519: Breaches & Data Integrity
752 - Search - Data breach disclosure 101: How to succeed after you’ve failed
753 - Search - Data from connected CloudPets teddy bears leaked and ransomed, exposing kids’ voice messages
754 - Search - Here’s how I verify data breaches
755 - Search - When a nation is hacked: Understanding the ginormous Philippines data breach
756 - Search - How I optimised my life to make my job redundant
757 - Search - The ‘Simple and Lethal’ Solution To Tackling Interoperability Challenges
758 - Search - ‘Unique’ Quantum Sensor Technology Shows Promise in Boosting Battlefield EMS Awareness
759 - Search - The NSF Pushes Integrated Quantum Systems Toward ‘Final Mile’
760 - Search - NASA Pushes to the Lunar Surface Amid Geopolitical Competition and Greater Military Ties
761 - Search - DOE Lab Seeks Science Life Partners
762 - Search - The Pharmacy Behind the Fight: Why Military Health IT at EDCA Sites Is a National Security Imperative
763 - Search - Trust, Transparency and Mission Command
764 - Search - On Point: Q&A With Dr. Britta Hale
765 - Search - President’s Commentary: Bridging Continents at Speed and Scale
766 - Search - Disruptive By Design: Speed and Rigor Are Not Enemies
767 - Search - AFCEAN of the Month, November 2026
768 - Search - DOW Works To Meet Post-Quantum Cryptography Deadlines
769 - Search - Military Leaders Outline Next Steps for USPACOM’s Warfighting IT Platform
770 - Search - USPACOM J6 Seeks Resilient Infrastructure Solutions From Industry
771 - Search - USPACOM Stresses C2, Industry Role in Deterrence
772 - Search - DISA Establishes Regional Network Operations Security Center Pacific
773 - Search - Building Tunnels: Securing Internet Access as a Public Utility
774 - Search - What Is Policy 8140? DOW Explains Initiatives in New Cyber Workforce Framework
775 - Search - CIA Deputy Director: Two Years Later, Salt Typhoon Still Presents ‘Real Threat’
776 - Search - Intel Community Revolutionizes System Development and Acquisition Strategies
777 - Search - The U.S. Military’s Achilles’ Heel: Acquisition
778 - Search - Gen. Brunson Raises Urgency for AI Technology Development in the Indo-Pacific
779 - Search - SSC International Affairs Chief Talks Allies for Developing Space Force
780 - Search - Shifting Away From Effect-Based Thinking: ‘War Is Not Billiards’
781 - Search - Can Coalitions Move at the Speed of Their Metadata?
782 - Search - Why Conduit Capacity Matters in Defense Network Modernization
783 - Search - The Encryption Gap: Why Networks Need a New Generation of Data Protection
784 - Search - GenAI.mil: How AI Is Freeing Warfighters To Focus on the Mission
785 - Search - Building an Intelligent Network Fabric for Command, Control and Defense
786 - Search - Rethinking the Meeting Experience With Mission-Embedded, AI-Enabled Collaboration Infrastructure
787 - Search - Advancing Geo Simulation Technology for Precision Missions
788 - Search - Bridging the Divide: How Grandinetta Group Is Redefining Military Transition
789 - Search - Data Centricity for Decision Advantage in Space: Unifying Operations in the Ultimate High Ground
790 - Search - From Carrier Pigeons to Sensor Fusion - Speed Matters in Information
791 - Search - President’s Commentary: 25 Years Since September 11
792 - Search - Disruptive By Design: Preventing AI Slop
793 - Search - On Point: Q&A With Daniel McCormack
794 - Search - Cross-Cloud Collaboration Paves the Way for Data Transparency: OPM’s Groundbreaking Analytics Solution
##
Industrial Cyber
View Articles
795 - Search - Australia reports 20% rise in cyber incidents, nearly 80% jump in threat notifications amid critical infrastructure risksThe Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) responded to more than 1,500 cybersecurity incidents during 2025-26, an increase of more than 20% from the previous year, while notifying entities of potential malicious activity more than 4,400 times,…
796 - Search - NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposes safeguardsThe National Institute of Standards and Technology (NIST) has outlined 10 design tenets for agent identity management systems, calling for distinct identities, tightly scoped permissions, continuous monitoring and stronger accountability as organizations expand the use of AI agents. The guidance…
797 - Search - FDD urges NIST, NSA to evaluate vaultless, keyless pseudonymization as safeguard against ransomware attacksThe Foundation for Defense of Democracies (FDD) warned that encryption alone cannot adequately protect sensitive data as it moves across cloud platforms, third-party vendors, backup systems, analytics tools and artificial intelligence (AI) pipelines. Georgianna Shea, chief technologist at FDD’s Center…
798 - Search - CISA 2030 targets OT modernization, asset visibility, supply chain security through risk-based critical infrastructure defenseThe U.S. Cybersecurity and Infrastructure Security Agency released a new strategy that shifts the nation’s cyber defense from passive measures to finding and removing adversaries already inside critical infrastructure networks. Titled ‘CISA 2030: Defend, Harden, Prevail,’ the document supports the…
799 - Search - McCormick introduces Common-Sense Cloud Security Act to strengthen cloud defenses, protect critical infrastructureA U.S. Republican Representative from Georgia introduced the Common-Sense Cloud Security Act to strengthen cloud cybersecurity by directing the National Institute of Standards and Technology (NIST) to develop updated standards for protecting sensitive data, preventing cyberattacks and securing critical infrastructure.…
800 - Search - Manufacturing cybersecurity faces persistent governance gaps as accountability, funding, operational priorities divergeSecurity initiatives across manufacturing environments are unlikely to falter due to policy reasons; rather, they are likely to stall due to accountability, financing, and responsibility residing in disparate locations. Across multi-site enterprises, governance standards coexist with uneven delivery. For instance,…
801 - Search - Centrii flags audit risks as NERC CIP-003-9 tightens vendor remote access controls for low-impact BES systemsA new post from Centrii warned that new vendor remote access requirements under the North American Electric Reliability Corp.’s (NERC) Critical Infrastructure Protection standard CIP-003-9 are creating compliance and recordkeeping challenges for owners and operators of renewable energy, storage and…
802 - Search - Frenos warns advances in AI attack planning could increase cybersecurity risks for critical infrastructure, ICS systemsFrenos, an operational technology (OT) security company, estimates that critical infrastructure operators have about two years to prepare before artificial intelligence models can reliably plan cyberattacks against industrial systems, according to its inaugural annual State of AI in OT Security…
803 - Search - Critical PHP vulnerabilities raise worldwide concerns as government websites go offline, researchers report AI-assisted attacksGlobal cybersecurity agencies urge organizations to immediately patch two critical PHP vulnerabilities that could enable unauthenticated remote code execution on vulnerable web servers. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively referred to as PHP2Shell, affect PHP installations serving…
804 - Search - Upstream oil and gas: Securing operations across distance, remoteness and harsh environmentsUpstream oil and gas production is often determined by distance, with wellheads, gathering systems and offshore platforms relying…Oct 20, 202616 min read
805 - Search - Industrial Cyber Days Begins Tomorrow – An Invitation to the People Who Keep Critical Infrastructure RunningTomorrow, October 13, the global industrial cybersecurity community once again comes together for Industrial Cyber Days: Critical Infrastructure…Oct 12, 20269 min read
806 - Search - Anchoring maritime logistics backbone against rising tide of cyber threats targeting ports, vessels, supply chainsDigitization of the marine transportation system has brought deep weaknesses, especially where Terminal Operating Systems (ToS) are involved….Oct 06, 202617 min read
807 - Search - How decades of disconnected modernization created OT security debt manufacturers can’t escapeThe OT security crisis facing manufacturers today is fundamentally a debt crisis, accumulated over decades as systems grew…Sep 29, 202614 min read
808 - Search - AI adoption in OT security accelerates as legacy infrastructure and poor data expose readiness gapsIndustrial organizations are racing to adopt AI for operational security faster than their systems can support it. Takepoint…Sep 22, 202620 min read
809 - Search - Cyber-informed engineering shifts critical infrastructure security from protecting networks to engineering out consequencesCybersecurity in critical infrastructure has long centered on keeping adversaries out. But industrial systems operate under a different…Sep 15, 202623 min read
810 - Search - Cyberattacks on food and agriculture can turn disruptions into safety crises, threatening public health and supply chainsFood and agriculture tends to be an overlooked corner of the cybersecurity conversation despite being critical infrastructure where…Sep 08, 202612 min read
811 - Search - From IT restoration to production restart: Why manufacturers continue to struggle with operational side of cyber recoveryManufacturing treats cyber recovery as a technology problem when it is actually an operational one. While IT teams…Sep 01, 202617 min read
812 - Search - CMMC Phase II halt puts C3PAO assessments on hold but leaves NIST SP 800-171 obligations in force for contractorsFollowing the July suspension of CMMC Phase II, which paused the planned third-party assessment requirement, contractors facing C3PAO…Aug 25, 202621 min read
813 - Search - Bitdefender launches GravityZone Exposure Management to prioritize vulnerabilities, map attack paths, reduce attack surface risks
814 - Search - Fortinet FortiAIGate targets AI security risks with real-time inspection, policy enforcement and agent controls
815 - Search - Rilian partners with White House cyber office to protect South Carolina rural hospitals under Project Lifeline 250
816 - Search - Beyond Horizontal Standards: Why We Must Converge ISA 99 and ISA 84 to Protect Cyber-Physical Systems
817 - Search - UK Cyber Growth Action Plan set to invest £16 million to boost the cyber sector, secure critical services
818 - Search - The EU’s Cybersecurity Blueprint and the Future of Cyber Crisis Management
819 - Search - OT-ISAC tracks 2026 Asia-Pacific cybersecurity policy shifts affecting critical infrastructure, OT and industrial operations
820 - Search - ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security
##
Cybersecurity News
View Articles
821 - Search - Cyber Security NewsLatest Cyber Security News
822 - Search - FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack
823 - Search - Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More
824 - Search - Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours
825 - Search - Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
826 - Search - Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities
827 - Search - TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers
828 - Search - Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests
829 - Search - Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks
830 - Search - Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data
831 - Search - North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
832 - Search - Accenture Contractor Allegedly Gave Claude AI Agent Access to Secure Pentagon Network
833 - Search - Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers
834 - Search - Claude AI Exploits Linux Kernel Flaw to Execute Root Commands Without User Interaction
835 - Search - Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems
836 - Search - 319 Chrome Extensions Found Hijacking Searches, Affecting 13.4 Million Users
837 - Search - Zero-Click ‘SMS of Death’ Flaw Lets Hackers Disrupt Android Phones With a Single Text
838 - Search - When Threats Don’t Wait, Security Can’t Either
839 - Search - PropellerAds: Why Modern Malware Delivery Starts Before the Payload
840 - Search - Rethinking automotive cyber risk for the age of accelerated vulnerability discovery
841 - Search - State of Ad Fraud 2026: 52% of Schemes Use AI as Cloaking Loses Ground to iOS Exploits and Messenger Phishing
842 - Search - Beyond the Sandbox Verdict: 3 Questions for Faster SOC Decisions
843 - Search - Before Your SOC Investigates: What 16K+ Security Teams Already Know
844 - Search - Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them
845 - Search - Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge
846 - Search - Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks
847 - Search - CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace
848 - Search - Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1
849 - Search - Meta Zurp AI Toolkit Connects Burp Suite With AI Coding Agents for Bug Bounty Research
##
Varonis Blog
View Articles
850 - Search - Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Data
851 - Search - From CPU Spikes to Defense: How Varonis Prevented a Ransomware Disaster
852 - Search - How Attackers can Abuse Shadow Resources in Google Cloud Dataflow
853 - Search - Threat ResearchPHP2Shell: One Upload, Full ServerGavirel Fried6 min readVaronis Threat Labs’ deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.Gavirel Fried6 min read
854 - Search - Data SecurityVaronis is joining ProofpointYaki Faitelson7 min read
855 - Search - Email SecurityVaronis’ Takeaways from Forrester’s 2026 Email, Messaging, and Collaboration Security Solutions Landscape ReportMeagan Huebner2 min read
856 - Search - Introducing Varonis Triage Agent: An Autonomous Incident Responder to Amplify MDDR Service
857 - Search - Varonis and Cohesity: Improving Cyber Resilience with Data Security
858 - Search - Access Governance: Reducing Attacker Reach in the Age of AI-Accelerated Threats
859 - Search - Threat ResearchOct 23, 2026Go With the Flow: How a Shadow Dependency Led to a Cross-Tenant Vulnerability in GCP DataflowDiscover a critical cross-tenant vulnerability in Google Cloud Dataflow that allows attackers to exploit predictable bucket names for remote code execution.Gil Weizman6 min read
860 - Search - Threat ResearchOct 22, 2026StealC Is Back, and This Time It’s a RATFour months after Operation Endgame took it down, StealC’s seller returns with Stadia, a remote access trojan that shares StealC’s code byte for byte.Varonis Threat Labs8 min read
861 - Search - AI SecurityOct 20, 2026Varonis and Collibra: Improving Data Governance for Trusted AIThe Varonis for Collibra integration help organizations better govern the data used for analytics and AI initiatives.Nolan Necoechea2 min read
862 - Search - Threat ResearchOct 17, 2026Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQLWe uncovered a critical remote code execution vulnerability in Snowflake-managed PostgreSQL, highlighting hidden risks in cloud services.Lior Adar8 min read
863 - Search - Oct 14, 2026IBM’s Cost of a Data Breach Report 2026: AI Is Now the Attacker and the TargetThe 21st annual report confirms what security teams have suspected for some time: AI has changed who and what gets attacked.Ron Bennatan5 min read
864 - Search - AI SecurityOct 07, 2026Least Privilege for AI Agents: A Practical Guide for Security LeadersLearn what it means to enforce least privilege for AI agents, and get practical with a six-step implementation plan.Amanda Wicks7 min read
865 - Search - AI SecuritySep 25, 2026AI Security Fundamentals: The Real Industry Shift Taking PlaceExperts discuss how AI is reshaping cybersecurity, from exposing existing vulnerabilities to enabling proactive defense strategies.Jonathan Villa3 min read
##
Pentest Partners Blog
View Articles
866 - Search - OT, ICS, IIoT, SCADAAutomated warehouses: 8 third parties, one network and no owner13 Min ReadOct 28, 2026
867 - Search - Artificial IntelligenceHow TosVulnerabilities and DisclosuresPHP2Shell and what the AI headlines are missing8 Min ReadOct 22, 2026
868 - Search - OT, ICS, IIoT, SCADAVulnerabilities and DisclosuresYou don’t need a nation state to warm up a fridge9 Min ReadOct 14, 2026
869 - Search - Artificial IntelligenceYour AI can access it. Can an attacker?11 Min ReadOct 08, 2026
870 - Search - Maritime Cyber SecuritySafe, but sailing nowhere. Can you stop a fleet of ships?12 Min ReadSep 30, 2026
871 - Search - Artificial IntelligenceHow TosInternet Of ThingsIs AI toast? Building an AI Talkie Toaster18 Min ReadSep 18, 2026
872 - Search - How TosInternet Of ThingsPassing the bucks $$$: Passback attacks explained4 Min ReadSep 09, 2026
873 - Search - Consumer AdviceWhy your data is safer than you think on public Wi-Fi7 Min ReadSep 03, 2026
874 - Search - Consumer AdvicePasswordsEstate planning of credentials6 Min ReadAug 26, 2026
875 - Search - OT, ICS, IIoT, SCADAOne SSID To Rule Them All6 Min ReadAug 24, 2026
876 - Search - Shameless Self PromotionDEFCON 34: Planes, PLCs and 6am runs8 Min ReadAug 21, 2026
877 - Search - Hardware HackingHow TosVulnerabilities and DisclosuresGivEnergy enters administration, batteries expose home networks13 Min ReadAug 20, 2026
878 - Search - Cloud SecurityBreaking the attack chain created by exposed cloud secrets6 Min ReadAug 07, 2026
879 - Search - Artificial IntelligenceIf you’re going to vibe code it, why not vibe pen test it?17 Min ReadJul 31, 2026
880 - Search - Social EngineeringClick. Click. Fake it until they make it… inside7 Min ReadJul 23, 2026
881 - Search - Aviation Cyber SecurityHardware HackingFlying with the Flipper Zero7 Min ReadJul 10, 2026
882 - Search - Cyber RegulationHardware HackingInternet Of ThingsEN 303 645 is the baseline, not the finish line for IoT security17 Min ReadJul 03, 2026
883 - Search - Hardware HackingDecoding Rust strings7 Min ReadJun 23, 2026
884 - Search - Shameless Self PromotionPTP Cyber Fest 2026. Built for people to get involved6 Min ReadJun 12, 2026
885 - Search - Digital Forensics and Incident ResponseClickFix, CrashFix and the growing family of copy and paste attacks13 Min ReadJun 10, 2026
886 - Search - Hardware HackingVulnerabilities and DisclosuresShelly Wall Display exposed RPC over Bluetooth4 Min ReadMay 26, 2026
887 - Search - OT, ICS, IIoT, SCADAOT pen test findings that plant teams can actually use16 Min ReadMay 14, 2026
888 - Search - Artificial IntelligenceDigital Forensics and Incident ResponseAI can help in DFIR, but it cannot replace investigator judgement10 Min ReadApr 21, 2026
889 - Search - OT, ICS, IIoT, SCADAYou can pen test OT networks without breaking them11 Min ReadApr 09, 2026
890 - Search - Cyber RegulationGRC Consultancy AdviceDigital Operational Resilience Act (DORA)9 Min ReadMar 31, 2026
891 - Search - Cloud SecurityInsecure IAM is the root of many cloud security failures6 Min ReadMar 24, 2026
892 - Search - Hardware HackingHow TosReverse EngineeringTaming the dragon: reverse engineering firmware with Ghidra14 Min ReadMar 12, 2026
893 - Search - How TosRed TeamingBreaking Out of Citrix and other Restricted Desktop Environments25 Min ReadMar 02, 2026
894 - Search - Automotive SecurityOpinionsEV batteries as grid infrastructure and the security risk that follows6 Min ReadFeb 24, 2026
895 - Search - Internet Of ThingsVulnerabilities and DisclosuresShelly IoT door controller config fail: leaving your garage, home and security exposed8 Min ReadFeb 11, 2026
896 - Search - Social EngineeringCovert recording is easy, which is the problem5 Min ReadFeb 03, 2026
897 - Search - OpinionsMovie breakdown: Hackers (1995)6 Min ReadJan 30, 2026
898 - Search - Cyber RegulationPreparing for the EU Cyber Resilience Act (CRA)8 Min ReadJan 22, 2026
899 - Search - PasswordsVulnerabilities and DisclosuresCarlsberg… probably not the best cybersecurity in the world7 Min ReadJan 16, 2026
900 - Search - Cloud SecurityCompromising a multi-cloud environment from a single exposed secret6 Min ReadJan 13, 2026
901 - Search - Artificial IntelligenceVulnerabilities and DisclosuresAI noise and the effect it’s having on vulnerability disclosure programs5 Min ReadJan 09, 2026
902 - Search - Digital Forensics and Incident Response2025, the year of the Infostealer12 Min ReadJan 06, 2026
903 - Search - Cloud SecurityBeyond cloud compliance dashboards, what’s next?6 Min ReadJan 05, 2026
904 - Search - Artificial IntelligenceVulnerabilities and DisclosuresEurostar AI vulnerability: when a chatbot goes off the rails19 Min ReadDec 22, 2025
905 - Search - Digital Forensics and Incident ResponseHow TosThe built-in Windows security features you should be using6 Min ReadDec 04, 2025
906 - Search - AndroidAndroid Activities 1019 Min ReadNov 27, 2025
907 - Search - Cloud SecurityHow TosCommon Kubernetes misconfigurations and how to avoid them6 Min ReadNov 18, 2025
908 - Search - Internet Of ThingsExploiting AgTech connectivity to corner the grain market6 Min ReadNov 13, 2025
909 - Search - Digital Forensics and Incident ResponseFinding your path into DFIR9 Min ReadNov 11, 2025
910 - Search - Cyber RegulationWhat testers need to know about the changes to the CHECK scheme4 Min ReadNov 04, 2025
911 - Search - Consumer AdviceHow TosSecurity awareness: four pillars for staying safe online12 Min ReadOct 30, 2025
912 - Search - How TosHardening your home lab16 Min ReadOct 23, 2025
913 - Search - Consumer AdviceHow TosStop payroll diversion scams before they start6 Min ReadOct 21, 2025
914 - Search - Digital Forensics and Incident ResponseThe logs you’ll wish you had configured if (when) you are breached…7 Min ReadOct 17, 2025
915 - Search - How TosCompiling static Nmap binary for jobs in restricted environments8 Min ReadOct 14, 2025
916 - Search - Maritime Cyber SecurityOpinionsWhat Speed 2 gets right and wrong about ship hacking8 Min ReadOct 08, 2025
917 - Search - Digital Forensics and Incident ResponseHow TosSpot trouble early with honeypots and Suricata12 Min ReadOct 02, 2025
918 - Search - Digital Forensics and Incident ResponseDiscord as a C2 and the cached evidence left behind11 Min ReadSep 16, 2025
919 - Search - Cyber RegulationA buyer’s guide to CHECK in 20255 Min ReadSep 10, 2025
920 - Search - Hardware HackingHow TosStart hacking Bluetooth Low Energy today! (part 3)11 Min ReadSep 04, 2025
921 - Search - AndroidHow TosAndroid Broadcast Receivers 1016 Min ReadSep 02, 2025
922 - Search - Hardware HackingHow TosStart hacking Bluetooth Low Energy today! (part 2)9 Min ReadAug 27, 2025
923 - Search - Hardware HackingHow TosStart hacking Bluetooth Low Energy today! (part 1)15 Min ReadAug 21, 2025
924 - Search - Cloud SecurityTerraform Cloud token abuse turns speculative plan into remote code execution12 Min ReadAug 15, 2025
925 - Search - Digital Forensics and Incident ResponseThumbnail forensics. DFIR techniques for analysing Windows Thumbcache7 Min ReadAug 08, 2025
926 - Search - Cloud SecurityHow TosHow to transfer files in AWS using SSM4 Min ReadAug 05, 2025
927 - Search - Digital Forensics and Incident ResponseDFIR tools and techniques for tracing user footprints through Shellbags9 Min ReadJul 31, 2025
928 - Search - Cyber Liability InsuranceRethinking cyber insurance questions to find real risk5 Min ReadJul 30, 2025
929 - Search - Shameless Self PromotionOur capabilities. A story about what we can achieve15 Min ReadJul 28, 2025
930 - Search - AndroidHow TosAndroid Services 1019 Min ReadJul 25, 2025
931 - Search - Internet Of ThingsLeaked data. Continuous glucose monitoring5 Min ReadJul 22, 2025
932 - Search - Artificial IntelligenceDigital Forensics and Incident ResponseUsing AI Chatbots to examine leaked data4 Min ReadJul 18, 2025
933 - Search - Vulnerabilities and DisclosuresFramework 13. Press here to pwn5 Min ReadJul 16, 2025
934 - Search - Digital Forensics and Incident ResponseSil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server7 Min ReadJul 11, 2025
935 - Search - How TosHow to conduct a Password Audit in Active Directory (AD)11 Min ReadJul 08, 2025
936 - Search - Consumer AdvicePet microchip scams and data leaks in the UK6 Min ReadJul 04, 2025
937 - Search - Automotive SecurityHow we turned a real car into a Mario Kart controller by intercepting CAN data9 Min ReadJun 26, 2025
938 - Search - How TosCSP directives. Base-ic misconfigurations with big consequences9 Min ReadJun 23, 2025
939 - Search - Cyber RegulationHow TosPrepare for the UK Cyber Security and Resilience Bill4 Min ReadJun 19, 2025
940 - Search - AndroidArtificial IntelligenceAndroid AI UX is great until it leaks your data8 Min ReadJun 17, 2025
941 - Search - Shameless Self PromotionPTP Cyber Fest 2025. More than just another conference4 Min ReadJun 13, 2025
942 - Search - Vulnerabilities and DisclosuresFire detection system been pwned? You’re not going to sea10 Min ReadMay 30, 2025
943 - Search - How TosHow to load unsigned or fake-signed apps on iOS10 Min ReadMay 28, 2025
944 - Search - Digital Forensics and Incident ResponseShameless Self PromotionWar stories from the DFIR front line11 Min ReadMay 27, 2025
945 - Search - OT, ICS, IIoT, SCADAFully segregated networks? Your dual-homed devices might disagree9 Min ReadMay 22, 2025
946 - Search - Artificial IntelligenceRed TeamingBypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…17 Min ReadMay 20, 2025
947 - Search - How TosVNC. RDP for all to see5 Min ReadMay 16, 2025
948 - Search - Cyber RegulationInternet Of ThingsNew cybersecurity rules for smart heat pump manufacturers5 Min ReadMay 13, 2025
949 - Search - Hardware HackingVulnerabilities and DisclosuresRCEs and more in the KUNBUS GmbH Revolution Pi PLC15 Min ReadMay 08, 2025
950 - Search - Artificial IntelligenceRed TeamingExploiting Copilot AI for SharePoint10 Min ReadMay 07, 2025
951 - Search - Digital Forensics and Incident ResponseThe remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache8 Min ReadMay 01, 2025
952 - Search - PasswordsHiding behind a password5 Min ReadApr 29, 2025
953 - Search - Consumer AdviceThe dangers of web based messaging apps6 Min ReadApr 25, 2025
954 - Search - Digital Forensics and Incident ResponseUnallocated space analysis5 Min ReadApr 23, 2025
955 - Search - Digital Forensics and Incident ResponseNot everything in a data leak is real3 Min ReadApr 15, 2025
956 - Search - How TosDon’t use corporate email for your personal life5 Min ReadApr 09, 2025
957 - Search - Cyber RegulationInternet Of ThingsPreparing for the EU Radio Equipment Directive security requirements3 Min ReadApr 03, 2025
958 - Search - How TosBackdoor in the Backplane. Doing IPMI security better7 Min ReadMar 31, 2025
959 - Search - Digital Forensics and Incident ResponseThe first 24 hours of a cyber incident. A practical playbook6 Min ReadMar 24, 2025
960 - Search - OpinionsCybersecurity communities. Small hacker groups, big impact5 Min ReadMar 19, 2025
961 - Search - How TosTake control of Cache-Control and local caching4 Min ReadMar 12, 2025
962 - Search - GRC Consultancy AdviceHow I became a Cyber Essentials Plus assessor10 Min ReadMar 06, 2025
963 - Search - How TosDNSSEC NSEC. The accidental treasure map to your subdomains9 Min ReadMar 04, 2025
964 - Search - Hardware HackingA dive into the Rockchip Bootloader8 Min ReadFeb 26, 2025
965 - Search - Aviation Cyber SecurityPen testing avionics under ED-203a3 Min ReadFeb 21, 2025
##
The Register
View Articles
966 - Search - offbeatGoth aesthetic gone wild: a user’s self-inflicted black screen of non-death in Windows 3.1’sLabeled in black on black - controls for a galactic hyper-hearse or ill-advised Windows theme?
967 - Search - Chocolate Caterpillar or Chocolate Teapot? Top up the disk space for Windows 10 to find outBORK!BORK!BORK!London’s Oxford Street signage shows its underwear to passing tourists
968 - Search - Darkbloom, which allowed Mac users to rent out their GPUs for AI inference, warns of low payoutsBlame plunging token prices
969 - Search - Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to seen0n-existent security
970 - Search - securityGM cracks the petty cash box for multistate driver tracking settlement$220 million? For all of you? Yeah, we can probably dig that up …
971 - Search - Anthropic: That Claude Code extension compromise… couldn’t be usClaudeshop fingers ‘malicious actor’ in targeted supply-chain attack on Cursor
972 - Search - scienceVoyager 1 gives controllers the silent treatmentWhew! Only kidding, here I am
973 - Search - AlpineBSD announced – an AI-free FOSS OSCombining the NetBSD kernel with the Alpine Linux userland
974 - Search - NASA ponders a Hubble servicing mission or a controlled deorbitAgency only looking for information, but reentry countdown ticking for veteran space telescope
975 - Search - AI projects not paying off? Keep at it, says Uni Productivity InstituteAll that up-front investment needs time to take effect, and speeding individual tasks won’t necessarily boost the entire firm
976 - Search - NHS quango warns of risk to GP patient data after website vendor collapseHundreds of practices hit by small health tech firm going into administration
977 - Search - securityBritish intelligence agency misplaced ’thousands’ of storage devices, years later still can’t say how manyOther agency errors included an unchecked software bug that led to Terrorism Act detentions
978 - Search - ai and mlAccenture AI agents are sifting through applicantsBut a human makes final hiring decisions at global tech consultancy
979 - Search - ai and mlDomestic droid gone amok? Don’t worry, you’re coveredInsurance firms look to insulate domestic humanoid robot owners against the inevitable chaos they will bring
980 - Search - cyber-crimeUK Shelly reseller warns payment data stolen after malware found on websiteEXCLUSIVECustomer says they received fraudulent charges on their card hours before company notified them
981 - Search - ai and mlGoogle’s search revenue Ferrari hits an AI-powered speed bumpJust wait ’til we add more AI and this thing’ll really fly
982 - Search - AI’s epic cash call is matched only by its ability to strangle revenue streamsThe first technology created with a self-disrupt button… But why oh why didn’t they call Claude clone Fauxtoshop?Rupert Goodwins
983 - Search - It won’t kill you, or humanity, to get off the AI upgrade treadmillNew models arrive so fast, we already have more new tech than it’s possible to understand in a careerMark Pesce
984 - Search - No shame in the Domain Name game: DNS is doomed, literallyCorey Quinn
985 - Search - Celebrating the brilliant pragmatism of TCP/IP, the wiring of the worldRupert Goodwins
986 - Search - EC users should be afraid of a US kill switch - not some new softwareSteven J. Vaughan-Nichols
987 - Search - Brighter isn’t better and more is less. The AI slowdown is nigh, no matter who says whatRupert Goodwins
988 - Search - OpenAI apes AWS Marketplace while Anthropic remains stubbornly MicrosoftianCorey Quinn
989 - Search - AWS needs to embrace its place as the Home Depot of AI infrastructureCorey Quinn
990 - Search - Open source datacenters and open source thinking will undo self-inflicted DC damageRupert Goodwins
991 - Search - Big AI’s content problem: Take the work, keep the moneySteven J. Vaughan-Nichols
992 - Search - In the age of AI, teaching networking principles remains more important than learning protocolsBruce Davie
993 - Search - Your cloud survived everything except the real worldRupert Goodwins
994 - Search - systemsFarm PC ‘maintained’ by a 14-year-old dumped support chap in a steaming pile of tech messON CALLHuman users can be hard to handle. A few hundred head of cattle and unsupported windows XP can really stink things up
995 - Search - off-premAWS installs an AI accelerator every 14 seconds and eyes $1 trillion annual revenueBefore long, we could be writing about a cloud company with a retail side hustle
996 - Search - securityIn the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad securityBinance freezes funny money after compromise of engineer’s laptop linked to $6.3 billion of unauthorized trades
997 - Search - systemsPC chip plunge wipes out a quarter of Intel’s valueCEO predicts massive datacenter CPU boom, coming soon, but production problems mean Chipzilla may not cash in
998 - Search - securityResearchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatchedEmbedded browsers are at the heart of the problem
999 - Search - offbeatHowler will have AI answer your questions, then burn the chatAsk AI dumb things and leave no local chat history, all with the style of a kids’ fantasy novel – or rather, one of its magical letters
1000 - Search - ai and mlStartup wants to make AI agents safe for DevOps dutyInfrastructure automation needs something better than prompt and pray
1001 - Search - devopsTopcoat enables Rust to render server-side web appsRust guru rejiggers web app reactivity for potentially speedier page loading
1002 - Search - securitySuspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 serversSnoops ’likely still’ have access to US government-affiliated network
1003 - Search - os platformsUbuntu 27.04 may bring a preview of the long-awaited Core DesktopCanonical has a long way to catch up, but it knows who it’s chasing
1004 - Search - scienceBattMan aims to turbocharge US batteries without robbin’ critical mineralsDoE-backed consortium hoping to scale, says orgs can apply to become, literally, part of BattMan
1005 - Search - public sectorGSA left sensitive Google Drive files open to staff, contractorsAuditors have flagged similar security failures since 2014
1006 - Search - applicationsOracle wants to bill you for every AI task, not just every seatBig Red says AI units will add to subscriptions, as it juggles $90BN-plus capex, mounting debt and a $225BN revenue goal for 2030
1007 - Search - databasesBuilt to bend: Postgres’s inventor and a steward on what AI really needsPARTNER CONTENT: Michael Stonebraker and Bruce Momjian on why enterprise AI needs a database that no one controls, and what PostgreSQL 19 says about the road ahead
1008 - Search - securityBelgium’s tax agency confirms cyberattack, pulls services offlineOfficials confirm this week’s tax deadlines extended to November as a result
1009 - Search - os platformsSystemd adds support for RustWhat’s even better than Rust in the Linux kernel? Rust in systemd!
1010 - Search - offbeatCritical launch for Vulcan as ULA targets Friday the 13thHopefully without disintegrating SRB nozzles
1011 - Search - securityShortlist of age checks for the UK’s under-16 social media ban is out, ‘some’ adults will need verifyingSome adults may not need to prove it, but many will
1012 - Search - securityAttackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour’The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully’
1013 - Search - ai and mlLibreOffice’s ’no AI’ stance meets LLM-assisted codeCore developers avoid AI coding assistants, while community contributors face disclosure and review rules
1014 - Search - personal techTraces of new Pi hardware spotted in GitHubA new Pi Zero 3 W and Pi 4 Model A seen lurking in the repository
1015 - Search - personal techMicrosoft breaks New Outlook attachment opening with Edge UpdateAttachments in New Outlook come undone thanks to Windows’ fundamental interconnectedness of things
1016 - Search - Matrix takes sovereign messaging into the realm of the tech giantsOnce more, with feeling: ‘First they ignore you, then they laugh at you, then they fight you’
1017 - Search - securityAdmin dropped the F-bomb in a password to show hackers who was really 1337PWNEDCursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
1018 - Search - storageHPE puts storage to work on AI’s expensive memory problemPARTNER CONTENT: HPE Alletra MP X10000 cache offload delivers up to 20× faster time to first token in testing validated by Kamiwaza. Apparently, remembering things beats calculating them again.
1019 - Search - ai and mlGoogle’s Gemini 4 Carbon looks like a diamond in the roughUndercutting Claude on price ahead of Anthropic’s IPO
1020 - Search - scienceBoffin’s software found a possible dwarf planet - a result so rare he thought it must be a bug2026 ED138 is way out beyond Neptune and perhaps the smallest known object of its type
1021 - Search - storageTape is so not dead that Fujifilm will increase production capacity 5xBecause, sigh, AI
1022 - Search - ai and mlGoogle struggling to make AI Mode searches payThat’s a problem, cos it just spent $51 billion on infrastructure and still needs to rent compute from others to run its cloud
1023 - Search - offbeatPlease state the nature of the medical emergency: Google is building a robot medic for NASAThe AI medical assistant is still being tested. Now the space boffins want to give it hands
1024 - Search - ai and mlAnthropic engineer declares the coding interview deadWhy give people tests that AI aces?
1025 - Search - securityOracle celebrates end of Cybersecurity Awareness Month with quadruple troubleAttackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
1026 - Search - ai and mlAmazon tells tokenmaxxing devs to slow their AI rollFocus more on what matters, please, like creating useful software and accomplishing company goals
1027 - Search - ai and mlGitHub powering up four million extra cores to stop its service going downRe-architects site to cope with AI slop-pocalypse
1028 - Search - cyber-crimeSerial ransomware crook gets 70 months behind bars for Nefilim, Hive rolesArtem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic
1029 - Search - devopsHow Google fumbled the frontend with Angular 2All Things Open Talk provided lessons in how not to upgrade a software package
1030 - Search - on-premMicrosoft faces potential vote: Shareholders curious about its plans to tackle emissionsGreenhouse gas output has risen dramatically since the company promised to become carbon-negative by 2030
1031 - Search - offbeatChina’s spaceplane bears striking resemblance to America’s X-37BDefense Intelligence Agency space report includes a rare orbital snap of the Chinese craft, and it looks rather familiar
1032 - Search - systemsIntel gets tax breaks while local authorities lose revenue, claims policy orgReport accuses corp of getting subsidies for its fabs from Oregon and New Mexico that deprive those states of vital funds
1033 - Search - securityCisco open sources tool for detecting AI agents on hacking spreesexclusiveProject Quarry aims to provide a ‘shared language’ for evaluating agent behavior
1034 - Search - cyber-crime123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexusCompany chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants
1035 - Search - networksOpen Cosmos steps up Europe’s space sovereignty game, shows off ConnectedCosmos satellitesEl Reg takes a tour of a satellite nursery for customers thinking about de-risking dependence
1036 - Search - offbeatMan spends 35 years collecting corporatespeak, turns it into an appWhy waste time thinking of something useful to say when an app can leverage synergies for you?
1037 - Search - ai and mlNeocloud thinks AI agents - not meatbags - will be its main customersQuake AI is developing APIs to let autonomous agents access its services more efficiently
1038 - Search - systemsEurope built sovereign clouds to escape US control. Then forgot about the processorsFEATUREIntel ME and AMD PSP: The silicon layer nobody certifies
1039 - Search - cyber-crimeNobody believes the ‘criminals and scumbags’ who hacked Canvas really deleted stolen student dataOther than Instructure execs - maybe?
1040 - Search - Europe wants out from under US tech – but first it has to find the exitsReport maps the weak points in cloud, identity, and public sector procurement
1041 - Search - EU privacy advocates accuse US data annotation firm of snooping on contractors
1042 - Search - Europe’s cloud sovereignty rules could do more harm than good
1043 - Search - Open source sovereignty gets down to the boring business of making it work
1044 - Search - US tech giants warn Europe that ditching US tech giants could cost €115B
1045 - Search - Dutch tax office ditches Microsoft 365 cloud for on-premises alternative
1046 - Search - Dutch government turns to NixOS for a sovereign desktop
1047 - Search - Europe’s AI ambitions rest on somebody else’s supply chain
1048 - Search - Ask HPE and NVIDIA the AI data question you cannot ask in public
1049 - Search - personal techWhy roaming packages have become an anachronism in the age of app-first travelPARTNER CONTENT: Connectivity at all times, abroad
1050 - Search - systemsSK Hynix says memory shortages to persist until 2030Good for its bottom line, not great news for yours, or for the PC and smartphone markets
1051 - Search - channelAI slows growth for Infosys and keeps it afloat at the same timePredicts slower growth as savings from automation hit price of extended deals
1052 - Search - ai and mlBig Red gets cozy with Google to offer TPUs to AI customersOracle plans to add those chips alongside new Nvidia hardware and OpenAI services as businesses await AI payoffs
1053 - Search - ai and mlAnthropic now lets Claude users jump out of plane without parachuteMeet CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS
1054 - Search - securityAI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hoursOne critical, three high-severity EPICS bugs could disrupt research experiments
1055 - Search - personal techApple takes powerful M6 chip to the MacBook Pro, iMac6th-gen M-series silicon promises more cores, faster memory, a fatter NPU, and better connectivity, now in more form factors
1056 - Search - os platformsZacOS 9 and Mavernix: Two classic Apple desktops find their Wayland to LinuxClassic Platinum or lickable Mavericks-era Aqua – it’s your choice
1057 - Search - cyber-crimeDay 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattackUniversity hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
1058 - Search - saasTake it on the chin SatNad: Microsoft chief exec’s pay slips 6% in record yearRevenue up, operating profit up, 30 million paid Copilot seats locked in, 88 DCs added, $43.8 billion returned to shareholders
1059 - Search - cyber-crimeCISA confirms PHP2Shell under attack as researchers clock successful exploitsBoth critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
1060 - Search - IBM admits mainframes need to be modernized and will use AI to do the jobPromises to build ‘IBM Z Atlas’ tool that will tidy up messy big iron and enable AIOps
1061 - Search - Former Intel CEO Pat Gelsinger bets on Nagare Labs to vault the memory wallSRAM-like bandwidth, DRAM-like density, and NAND-like manufacturing: Z2RAM makes big promises, but the road ahead is arduous and littered with the ruins of failed memory vendors
1062 - Search - ‘Let’s just shove a bigger fan in there and see what happens’Techies tiptoed around server to keep it working as company sank
1063 - Search - Vendors asking forward deployed engineers to make good on trillion-dollar AI betThey might earn more than $200k but who do they work for? Tech buyers need to put some checks in place on FDEs
1064 - Search - IBM CEO says open weight models are now irresistibly good and cheap on-prem90 percent of the performance at ten percent of the price, in just two or three racks, is hard to beat
1065 - Search - systemsTSMC sends scouts to check whether America’s datacenters can deliverSilicon giant budgets up to $64B for expansion while keeping an eye on construction progress and power supplies
1066 - Search - systemsNew motherboards, old RAM, plenty of life left in yesterday’s PCsDDR4 makes a comeback as component costs rise, while Linux offers an escape from forced upgrades
1067 - Search - ai and mlA whopping 3% of boardroom execs spy productivity and costs savings from AIA load more are spending more than they expected and forecast to shell out even more in 2027
1068 - Search - personal techApple’s foldable phone has a crease in its reputationAdmits a ‘small number’ of iPhone Duos have display problems, and no, you’re not folding it wrong.
1069 - Search - storageWhen file infrastructure becomes the bottleneckLegacy NAS, VPNs, and file-sync workflows leave hidden costs in their wake. Is the way your organization manages files still fit for purpose?
1070 - Search - securityMicrosoft releases out-of-band Windows fixes with certificate updatesDid you hear the one about eMudhra and the power of 4? Time to get connected to certificate trust list updates
1071 - Search - cyber-crimeAttack on email hosting provider for German far right party AfD exposed 345k accountsAlternative für Deutschland swats away scandals as reporters swarm leaked email tranche
1072 - Search - on-premUK ministers had plenty of time for AI datacenter bosses, but none for environmental groupsInvestigation finds businesses dominated govt meetings while communities were left out of decisions about AI Growth Zones
1073 - Search - os platformsFreeBSD founder ports Omarchy to FreeBSD in ten days, ten releasesDaemonarchy is unaffiliated with the Linux original, built with AI help, and could complicate FreeBSD’s debate over AI contributions
1074 - Search - offbeatYear of Linux on the Beach confirmedDon’t forget to keep code up to date. Even with a cold beverage in hand
1075 - Search - on-premHow everyday technology choices drive true workplace sustainabilitySPONSORED FEATURE: Introducing certified, environmentally friendly meeting room solutions, such as Barco ClickShare, in a standardized way across the organization can make the difference between hitting sustainability goals or not
1076 - Search - ai and mlElvis rightsholders sue Anthropic for stealing songs and leaving them in Heartbreak HotelThey want a little less chatbot conversation, and a whole lot more royalty action
1077 - Search - securityJapanese virtual desktop cloud hacked so hard it asks to be bannedCEO admits service used for foreign exchange trading had holes company was slow to fix
1078 - Search - ai and mlHumanity can’t afford not to spend $800B on AI, Anthropic insistsIt’s more important than chips, ’leccy and the net, after all
1079 - Search - ai and mlOpenAI rolls out budget-priced mid-tier GPT-6.1 TerraNot a bombshell, but it rivals pricier models on some tasks at a tenth of Astra’s API price
1080 - Search - securityWorm armed 42 GitHub repos by hiding a payload too big to failPayload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
1081 - Search - ai and mlAlibaba’s Qwen AI caught trying to contact server in ChinaBut there’s not much evidence this is anything more than echoes of unsanitized training data
1082 - Search - securityLiteLLM supply chain attack started with an exposed master keyA ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’
1083 - Search - cxoMicrosoft offers parachutes to 60k employees if they jump by the end of the yearVoluntary exit offer extended to about one-quarter of existing Softies
1084 - Search - securityMicrosoft releases emergency .NET security fixes for Google Brotli bugRedmond joins growing list of software maintainers scrambling to patch compression flaw
1085 - Search - offbeatOpen source keyboard lets you swap parts like magnetic Lego bricksEvery key is its own module, and its designer tells us the sky’s the theoretical limit on the size of the frankenboard you can build
1086 - Search - softwareReddit’s r/opensource bans AI slop, and quite a few humans for good measure
1087 - Search - securityUK pentester ‘killa’ claims $2K Bitcoin prize in PHP2Shell capture-the-flag contestJaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours
1088 - Search - ai and mlTrumpets blare and skies part as AI hypefest culminates in Anthropic IPO filingClaude maker reveals financials and warns investors its AI models could blackmail humans, resist shutdown, or go rogue
1089 - Search - ai and mlLast call for The Register’s data sovereignty dinner in WashingtonEVENT: The Register’s Washington dinner with HPE and NVIDIA is this Thursday. The table is nearly set.
1090 - Search - os platformsRed Hat helps teach about tech writingBut learns tough lessons about AI in the process
1091 - Search - NetBSD may have found a new role: The AI-free FOSS OSIncreasing awareness and adoption, followed by increasing donations
1092 - Search - OpenAI dots inspire open source imitators amid technical difficultiesPersistent agents appeal to AI companies, but demand isn’t obvious
1093 - Search - Ubuntu ‘Stonking Stingray’ beta swims out: Deeper Rust ‘oxidization’ plus LLM speech-to-textGNOME 51 is here, and Ubuntu interim releases are getting interesting again
1094 - Search - scienceSwift operations end: 2004 spacecraft headed for fiery reentryAtmospheric drag brings an extraordinarily long-lived mission to a close
1095 - Search - ai and mlPrivate equity giant: AI payoff strictly limited to Big TechThe Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo
1096 - Search - securityWe shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glueWhat better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?
1097 - Search - securityUK Biobank back online soon, months after someone tried to sell 500k people’s data on AlibabaCharity confirms slew of security improvements as it waits for UK.gov’s go-ahead
1098 - Search - personal techiFixit dismantles Apple’s Duo: ‘You’d better baby that screen’Battery replacement gets the thumbs up, but it all hinges on dust. A conventional phone might be better bet for home repairers
1099 - Search - securityBritain bets big on AI to defend against the threats AI is helping createWhitehall wants agents guarding critical infrastructure as part of a wider £600M spending spree
1100 - Search - ai and mlEuro open source specialist proposes LLM gateway to ease token billsAiven hopes to do for LLMs what it does for databases
1101 - Search - columnistsPHP2Shell is a warning shot for vulnerability disclosureKeeping secrets is difficult in an open world, but we’ve done it before and must do it again
1102 - Search - securityPHP2Shell: No login, no app code, no warning. What next?PARTNER CONTENT: Learn what the flaws are, how far exploitation has gone, and how to get to full coverage fast with Tanium
1103 - Search - virtualizationTesco replacing VMware with Proxmox in its stores and on the edgeAdvertises for someone to ‘own cost-effective alternative virtualisation platform’
1104 - Search - networksWork to protect DNS from quantum decryption attacks is speeding upPLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
1105 - Search - ai and mlAfter threatening AI export bans, China allows DeepSeek to keep sellingPLUS: AI datacenter bubble wobbles in Australia; E-commerce app suggests it can detect diseases; India’s top telco to IPO amid investor frenzy; and more!
1106 - Search - public sectorWant to build a UK datacenter? Please hold while Whitehall transfers youMinister insists responsibilities are clear as construction, telecoms, and energy fall under separate departments
1107 - Search - offbeatReg readers land on ‘Binface’ as name for UK space cleanup missionIntergalactic Space Warrior, or a bin in orbit?
1108 - Search - securityAutonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deedsDesigned to carry out 100,000 steps without human approval
1109 - Search - os platformsRaspberry Pi Desktop proves old PCs aren’t past itDebian 13-based refresh runs comfortably on veteran ThinkPads, without making installation a hobby
1110 - Search - ai and mlOpenAI disables internet access during model training while Anthropic issues another mea culpaWe’ve totally got things under control
1111 - Search - securityUser refused to change her password because everyone already knew it
1112 - Search - systemsRejecting a promotion sent field service tech into support hell
1113 - Search - softwareTechie was stung by a wasp, held overnight by Chinese police, then trapped in a 13-hour meeting
1114 - Search - networksProject leader thought his team understood the plan, ended up fixing their ‘interpretation’ of itMalicious compliance crosses cultural barriers
1115 - Search - networksTechie fixed Wi-Fi dead zone with a drill
1116 - Search - personal techBoss wrongly claimed IT deleted his files, refused to learn the one-click fix
1117 - Search - personal techUser who handled life-or-death situations struggled with the SHIFT key
1118 - Search - personal techExec couldn’t identify a photocopier, which made for a fax-inating tech support call
1119 - Search - ai and mlIndirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your mastersMost attempts were pranks, but some could fool unwary AI agents
1120 - Search - $24,000 AI experiment ports TypeScript compiler to RustMicrosoft’s Go rewrite gets some competition, with a developer claiming his port runs twice as fast
1121 - Search - Anthropic reinvents source control as Claude floods the world with codeWhen continuous integration gits you down, there’s always an AI-tuned monorepo
1122 - Search - There can be only one: Google Cloud casts Gemini as your enterprise AI heroThe Chocolate Factory proposes a single universal agent for work
1123 - Search - Trump launches America.gov with AI chatbots at its coreGemini, Grok now serving as front door to federal resources on unfinished, poorly designed website
1124 - Search - Claude submitted fake murder tip to Philly police during summertime testingAnthropic took more than two months to alert cops
1125 - Search - Anthropic conjures another threat that doesn’t exist yet to stoke fears of AI apocalypseSelf-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter
1126 - Search - securityThere’s a third PHP2Shell bug, but it won’t get an emergency fixBad things (and software bugs?) come in threes
1127 - Search - ai and mlRed-team report found OpenAI utterly failed to monitor its agents during Hugging Face attackMonitoring was only partial and was easily bypassed
1128 - Search - AI models describe humans as a bunch of amoral sheepAsk LLMs for their most controversial take on humanity, and it turns out they have little nice to say about us, as one AI experiment found
1129 - Search - devopsMichigan prof creates Python-like Jac language for AI agentsStop burning $165K on AI rewrites; Jac is meant to “gobble up” your polyglot stack
1130 - Search - softwareArc browser on its way out as makers suggest an alternativeNo new accounts from now, and the end will come in December
1131 - Search - os platformsSparkyOS: Lightweight general-purpose Arch, on a pendriveInteresting new project from the minds behind SparkyLinux
1132 - Search - applicationsPubKeep picks up where Microsoft Publisher signs off$99 replacement opens old .pub files on Windows and macOS, without a subscription
1133 - Search - scienceMusk disputes NASA safety panel’s lunar launch estimatesWatchdog also warns retiring Falcon and Dragon could leave US access to orbit short of a backup
1134 - Search - columnistsTorvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patchesKernel maintainers stop asking who used AI, as long as the code is good
1135 - Search - bofhBOFH: I talked to Claude and he says you’re an idiotYou know what’s really sick? Getting to the pub on time on a Friday
1136 - Search - networksUK threatens subsea cable saboteurs with 14 years behind barsWhitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm
1137 - Search - offbeatBeware the claw: Do you want to win the bunny or reboot Android?Classic arcade game put to shame by judgemental Bugdroid
1138 - Search - cyber-crimePalo Alto’s firewall OS has been under attack from multiple ransomware groups since JuneUnit 42 investigates network compromises across numerous industries
1139 - Search - securitySwamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’From October 26, only high and critical cases stay private as project seeks help sharing the workload
1140 - Search - cyber-crime’Password1’ and a forgotten test account land Welsh outfits in hot waterICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
1141 - Search - securityBullhorn sees red after cyberattack knocks recruitment platform offlineStaffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
1142 - Search - public sectorWhitehall shuts the front door on digital ID but leaves the back openMinisters may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
1143 - Search - ai and mlUK finance watchdog wants firms to report AI failures and close callsFCA seeks clear accountability as financial services embrace increasingly autonomous agents
1144 - Search - networksICANN testing tech to let law enforcement access non-public WHOIS infoSingle sign-on to help address imminent threats to life, critical infrastructure, or kids
1145 - Search - securityDeepSeek deep-sixed at all US federal civilian agenciesOrder disallowing use of Chinese AI service is unhelpfully vague and broad
1146 - Search - Vendor-affiliated AI agent tech gets adopted by friendly, funded foundationFour projects for facilitating AI agents move under vendor-neutral governance
1147 - Search - personal techWindows said modem worked fine. That unmistakable scorched electronics smell suggested otherwiseCatching lightning in a tech support bottle
1148 - Search - securityPHP2Shell exploit bypasses protections designed to stop remote code execution“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
1149 - Search - scienceHuman receives AI-designed virus for the first timeNot to kill the human, of course – to kill the antibiotic-resistant bacteria causing their infection
1150 - Search - ai and mlBackdoored robot tries its hand at finger chopping and cat cookingNo actual digits or cats were harmed beyond the number crunching that went into this LLM poisoning experiment
1151 - Search - securityMax-severity GitLab bug allows remote code execution over 12 years of releasesVendor ‘strongly recommends’ upgrading to a fixed version ‘as soon as possible’
1152 - Search - securityDisgraced Indian cert issuer leaves the cert issuing businessWe didn’t want to issue SSL/TLS certs anyway, eMudhra suggests after one private key turns out to be the number 4
1153 - Search - securityPHP2Shell puts dozens of UK government services out of serviceMinisters report 32 unavailable and four partly disrupted, but no confirmed compromise
1154 - Search - applicationsApple App Store review process hits a traffic jamApple log jam? Apple fast lane pie-lup? We’re here all week, on stage… sweeping it
1155 - Search - securityWhen the attacker becomes the user: Rethinking account takeoverSPONSORED FEATURE: AI makes phishing easier than ever
1156 - Search - offbeatSingapore boffins weave a GUI into fabric, and it’s machine washable tooFor those who find taking a phone out of their pocket just so last century
1157 - Search - Nvidia’s Huang: Don’t mention the AI-pocalypse
1158 - Search - off-premUkrainian drone attack takes out Russian datacenterPutin this cloud region back into operation might not be possible, says Yandex
1159 - Search - off-premMicrosoft defines its Azure instance lifecycle, without any info about timingRedmond explains how VMs die, but not when you can expect that to happen
1160 - Search - off-premAWS turns its best practice framework into an agent that recommends cloudy reconfigsPossesses powers equivalent to an ’experienced architect’ and will happily make cost-saving suggestions
1161 - Search - systemsGoogle launches first datacenter satellite and research that finds orbiting bit barns can workIf SpaceX can launch 1,800 Starships, and researchers nail gnarly networking, design and formation flying problems…
1162 - Search - off-premAzure maintenance mess disrupted hybrid clouds, VPNs, cloudy VMware servicesMicrosoft broke its own cloud but isn’t sure how
1163 - Search - off-premCivo plots 40 edge datacenters to power Britain’s sovereign AIFirst site is due in Hertfordshire next March, with Nvidia’s Vera Rubin systems and a longer-term 1 GW ambition
1164 - Search - off-premAlibaba Cloud plans six-year stroll to 20GW of datacenters, reveals chip to power themUSA alone has 37GW under construction, but Alibaba doesn’t think the AI boom will run out of steam
1165 - Search - AI boom could leave an e-waste trail that wraps 6 times around EarthReport says estimates focused on GPUs miss the mountains of power, cooling, and networking gear destined for scrap
1166 - Search - cyber-crimeHackers pile on PHP2Shell as AWS reveals attacks began before disclosureCloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
1167 - Search - Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenantsAI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours
1168 - Search - scienceVeteran ESA probe rolls out welcome mat for Japan’s Phobos missionMars Express could support MMX’s 2027 arrival as another ’last ever’ extension keeps old spacecraft in flight
1169 - Search - securityIT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewallMisaligned incentives led to an intractable argument
1170 - Search - public sectorUK government hasn’t the foggiest how much it’s spending on digital transformationYears of promises, but officials unable to put a figure on investment
1171 - Search - ai and mlWhy the immediate future of liquid cooling is hybridPARTNER CONTENT: AI is driving liquid cooling adoption, but hybrid architectures will help operators balance density, flexibility, and operational realities
1172 - Search - securityCertification authority eMudhra defends its laughably weak private keysSays it passed audits and made just a minor mystery error
1173 - Search - public sectorPhilippine government suspends top tech official for alleged misconductFounder of offshore software development firm investigated for possibly giving his former outfit government contracts
1174 - Search - ai and mlTo help world gorge on GPUs, Nvidia brings cash bucket to fatten wafer-thin supply chainSigns Samsung to build substrates, bolsters spend with other players
1175 - Search - PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk’Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg
1176 - Search - Engineer was so sick of office pranks, he ‘wiped’ his antagonist’s disk
1177 - Search - To save paper, mainframe tech ruined a week of work
1178 - Search - Buyer missed one option and got 1% of the cable they needed
1179 - Search - Techie assumed boss knew what they were talking about and killed Exchange by deleting data
1180 - Search - Boss bought cheap ‘printer’ from a catalog and was left without a leg to stand on
1181 - Search - Tech team stood and laughed at colleague who pressed the wrong off button
1182 - Search - Techie sent to fix Nobel Prize winner’s PC almost set it on fire
1183 - Search - Techie with three months’ experience was sent in as the Cisco expert and proceeded to blow everything up
1184 - Search - Batch file automated a clean-up job, then fouled itself by deleting the wrong directory
1185 - Search - Part didn’t fit so techie got out his screwdriver. Then something flew off the motherboard
1186 - Search - Demoralized developer’s desperate hack came back to haunt him on LinkedIn
1187 - Search - IT boss left root session open for bring-your-kid-to-work day
1188 - Search - Manager showed off his DOS prowess – with a command that wiped data
1189 - Search - Comment in code read ‘Dear future me, sorry I wrote this’
1190 - Search - User crippled a network while trying to learn Nmap
1191 - Search - Apprentice developer defied orders – then got a job supporting her weird code
1192 - Search - Sysadmin broke hardware worth more than he made in a month – and lied his way out of the mess
1193 - Search - How dare you stop data loss – that’s not your job!
1194 - Search - Chinese e-tailer claimed 14-inch box stretched the size of a 9-inch tablet
1195 - Search - Consultant mistakenly deleted a ton of data – but reported it as a bug
1196 - Search - Techie expensed a bag of oranges and then juiced up a stupid security incident
1197 - Search - Under-trained techie didn’t claim overtime for mistakenly failing to phone it in
1198 - Search - Backup script ingested an accidental asterisk and deleted everything
1199 - Search - Lab worker built a fake PC to nuke his lunch
1200 - Search - Hope your holiday was horrid: You botched the last thing you did before leaving
1201 - Search - PowerPoint punishment sent users into an infinite loop after lunch
1202 - Search - ‘Invisible mouse’ made a mess of PC rebuild
1203 - Search - IT manager approved downtime over lunch, but made a meal of it
1204 - Search - The developer who came in from the cold and melted a mainframe
1205 - Search - Security contractor blew the whistle on support crew’s viral indifference
1206 - Search - Junior disobeyed orders and tried untested feature during a live robot demo
1207 - Search - Brilliant backups that kept data alive for ages landed web developer in big trouble
1208 - Search - Bug that wiped customer data saved the day – and a contract
1209 - Search - Server crashes traced to one very literal knee-jerk reaction
1210 - Search - Work experience kids messed with manager’s PC to send him to Ctrl-Alt-Del hell
1211 - Search - Final step to put new website into production deleted it instead
1212 - Search - Tech support chap invented fake fix for non-problem and watched it spread across the office
1213 - Search - Techie’s one ring brought darkness by shorting a server
1214 - Search - Marketing ‘genius’ destroyed a printer by trying to fix a paper jam
1215 - Search - ATM maintenance tech broke the bank by forgetting to return a key
1216 - Search - Techie banned from client site for outage he didn’t cause
1217 - Search - Techie turned the tables on office bullies with remote access rumble
1218 - Search - New boss was bad, his attitude was ugly, so the tech team pranked him good
1219 - Search - Techie ‘forgot’ to tell boss their cost-saving idea meant a day of gaming
1220 - Search - Untrained techie broke the rules, made a mistake, and found a better way to work
1221 - Search - Web dev’s crawler took down major online bookstore by buying too many books
1222 - Search - Dev’s last-day-of-contract code helped to crash app used by 350,000 people
1223 - Search - Developer made one wrong click and sent his AWS bill into the stratosphere
1224 - Search - Techie ran up $40,000 bill trying to download a driver
1225 - Search - networksLondon’s mobile networks fall to bottom of Europe’s capital leagueRooftop rent cuts, planning refusals and congestion leave Ookla ranking the UK’s capital last for speed and latency
1226 - Search - networksBroadcom Wi-Fi bug turns sweet 16, still lets strangers hijack your router
1227 - Search - networksICANN vows to work faster, improve transparency
1228 - Search - networksTime Lords kill leap seconds, before they become the new Y2K bug
1229 - Search - networksCisco, Nvidia team up to build fatter, faster pluggable
1230 - Search - Landline phones will switch off across Britland in 100 days, no extensions – Openreach
1231 - Search - Backbone of a beast – charting Nvidia’s rise to networking titan
1232 - Search - Nervous ISPs replace Chrome as strange consumers of DNS resources
1233 - Search - ai and mlOpenClaw creator says he spent $10 million in tokens last monthGood thing it’s somebody else’s money
1234 - Search - ai and mlReach new heights of laziness by burning tokens to let an AI tap your smartphone screen for youNothing will ruin your faith in humanity like an AI that operates your smartphone slowly, struggles with basic tasks, and can charge you for it
1235 - Search - ai and mlNvidia woos wary Europeans with more open weights modelsNew embedding, parsing, and reranking models promise smarter agentic RAG workflows
1236 - Search - securityLiteLLM supply chain attack hoovers up passwords and secretsPlus a RAT for good measure - get threat hunting now
1237 - Search - ai and mlAI will eat a fifth of tech budgets in 2027, but don’t expect it to pay for itselfForrester says only isolated wins are likely, while ‘good enough’ open-weight models soak up the tokens
1238 - Search - securitySignal bug could keep your mic - and camera - on after hangupCareful what you say after goodbye, or better yet, update your messaging app
1239 - Search - os platformsOpenBSD 8.0 beefs up virtual machines and gets a taste of WineProposed port brings 64-bit Windows apps within reach
1240 - Search - securityPHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatchedWebsites down as precaution as exploits have already been published
1241 - Search - ai and mlJensen Huang sends in the robot ducks to sell Nvidia’s AI-everywhere vision
1242 - Search - saasOneDrive gives Macs a million things to keep in syncOctober preview raises supported limit from 300,000 items, with general availability penciled in for June 2027
1243 - Search - ai and mlAI cuts coding time, but it’s also filling open source’s inbox with crapMaintainers reckon a quarter of incoming pull requests are slop, rising to 31% on larger projects
1244 - Search - securityAI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackersConsider this the wake-up call
1245 - Search - ai and mlNvidia picks OpenShell to tame AI gentsGive your agents freedom to do useful work by locking them down
1246 - Search - on-premNvidia’s grand plan for speeding up datacenter deployments: AI trailer parksGPUzilla boasts modular bit barns could speed up deployments from six months to just two weeks
1247 - Search - securityEU wants Booking.com to check out of its scam problemCommission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses ‘absolutely substandard’
1248 - Search - offbeatJava crashes the departure board at Tyne and Wear MetroTrain times remain on show as an elderly Windows dialog demands attention
1249 - Search - softwareThe spec is the new code, so brush up on your prose, says Kaseya CTODomain expertise and clear writing will matter more than syntax, and yes, that means documentation
1250 - Search - offbeatHappiness is the next AI KPI if Oxford boffins have their wayResearchers say public subsidies for AI should be repaid in wellbeing, not just economic growth
1251 - Search - Amazon makes vague commitment to unproven nuclear tech to power Indiana datacentersPartner X-energy has not built a single working reactor yet
1252 - Search - Uber dodges £340M cabbie lawsuit after drivers miss legal deadlineBlack cab drivers accused ride-hailing giant of misleading London’s transport regulator, but judge says they left it too late to sue
1253 - Search - In space, ‘We’ve gone from exploration to exploitation,’ says original Voyager team memberVoyager imaging team member Dr. Garry Hunt joins The Reg’s Kettle podcast to talk about his role in the mission as probe approaches one light day’s distance from Earth
1254 - Search - Museum exhibit reveals the intricate workings of a knackered DellWhen it should have been weaving tales of the Jacquard loom
1255 - Search - Oh no, what happened to my OOHPod? Windows command prompt puts in a surprise appearancePop quiz: somebody left a command shell logged in. What do you do?
1256 - Search - Give him a hand: Dev publishes 25-year-old Palm OS tools to GitHubAaron Ardiri opened his old development archive after discovering enthusiasts were still improving apps for the platform
1257 - Search - YouTuber built 30-frame-per-second grayscale Game Boy, then open sourced it for all e-paper displaysNot afraid of custom waveforms frying your e-paper? Download it from GitHub and give it a shot on your stock screen today
1258 - Search - Royal Navy goes fishing for suppliers to build its Type 93 robot submarinePreliminary notice seeks XLUUV builders, payload makers and AI developers, with Excalibur and Herne the obvious candidates
1259 - Search - Chaos ensues when AI interviewer meets AI intervieweeThings got weird, but there’s a lesson to be learned: Don’t trust a bot to negotiate for you
1260 - Search - Leap seconds face judgment day as time lords prepare to voteProposal would let UTC drift an hour from Earth’s rotation, sparing computer systems awkward adjustments for centuries
1261 - Search - Fire up that iPhone 1 emulation and party like it’s 2007Browser-based fun to remember a time before Apple’s annual cash grab became a thing
1262 - Search - Welcome to the lovely landlocked land of Luxembork, where the fares are free, and the terminals are technoTick, tick, tick, tick, ticket, ticket, tick tick
1263 - Search - Pigeon-powered internet packet goes under the hammer at Christie’s25 years after taking flight, a surviving packet from the world’s most impractical network has attracted a $4,000 bid
1264 - Search - US Navy bets another $150M on fighter drone that skips the runwayShield AI matches the funding as autonomous X-BAT heads toward flight testing later this year
1265 - Search - NASA taps DoE to help it build nuclear space reactorsSpace agency claims steady progress on lunar reactor plans, but offers little evidence to back it up
1266 - Search - Microsoft unveils ‘Surace’ Laptop UltraWhat the f?
1267 - Search - It’s a bird, it’s a plane…well, more of a spinning parachute, but really it’s a droppable robot boatThe ALBATROSS has landed
1268 - Search - Starlink’s plan to avoid orbital near-misses: Ephemeris sharingHang on. How about not chucking tens of thousands more satellites into space?
1269 - Search - Permanent daylight saving time could be a public health time bombTrump pushes the US to adopt pDST, but Canadian researchers say darker mornings come with costs for sleep, learning, and productivity
1270 - Search - Only the finest Swedish Bork will do for Stockholm stationNo, this is not GRUB of the meatball variety
1271 - Search - Security researcher claims they found KVM guest-host escape flawFirecracker MicroVMs, which started at AWS, seem to be the problem
1272 - Search - Musk follows Trump’s lead, swaps AI for SI in SpaceX rebrandActual intelligence in worryingly short supply
1273 - Search - Spies, prime ministers, and balls: The BBC Domesday project @ 40The Centre for Computing History gathers the minds behind the project and the ones keeping it alive today
1274 - Search - Clever database, but can it run Doom?Reg hack learns the meaning of ‘Be careful what you wish for’
1275 - Search - Flight delayed? So are these codec updatesA slice of Bolivian bork at Alcantarí International Airport
1276 - Search - Erase social media tomorrow? Brits say yesSo why are more and more people snorting their daily fix of cat videos, men fighting and political propaganda
1277 - Search - YouTube lunatic designed and 3D printed a working mechanical calculatorIf you can’t afford a Curta, we still don’t recommend trying this: It’ll eat up months of your life and all the filament you have
1278 - Search - Drunk Van Halen fan called Microsoft support and demanded to speak to GatesA broken Java applet had one FrontPage user ready for an Eruption
1279 - Search - Airbus gets a new freighter – and its giant door – into the air for the first timeThe A350F is apparently good for carrying servers
1280 - Search - Boeing’s Calamity Capsule gets another shot at the ISS taxi businessStarliner-1 could fly by January, with astronauts to follow by 2028 if all goes well
1281 - Search - Starship finally makes orbit but engine trouble cuts the victory lap shortSpaceX deployed 26 Starlink V3 satellites before bringing its planned ten-hour flight home after three
1282 - Search - What eldritch horror lurks behind Heathrow’s information screens?A triptych of airport bork awaits the unwary passenger
1283 - Search - Space Jam: UK debuts space squadron to protect satellitesNumber III Space Effects Squadron likely to use electronic warfare rather than lobbing missiles at hostile orbiting threats
1284 - Search - Judge uses electronic tag on Pokémon card tracker. It’s super effective!Ohio man planted a device on a delivery van to follow scarce trading card stock and caught a year of probation
1285 - Search - iPhone 18 Pro benchmark boosted by giving it a cold drink3x the vapor-chamber surface area can only do so much; luckily the fridge helped with sustained performance
1286 - Search - Discordians now subject to whims of new age verification technologyDiscord users asked to prove they’re adults get less intrusive options
1287 - Search - scienceHPE to launch AI straight to the MoonMystery silicon and mirrored SSDs set to touch down before year’s end
1288 - Search - scienceGet in the bin! UK Space Agency wants public to name its debris removal missionClearSpace UK aims to be operational in 2029 with public’s suggestion etched on the side of the spacecraft
1289 - Search - scienceRocket Lab pushes back first Neutron launch to 2027Carbon composite woes cause another delay for Peter Beck’s Hungry Hippo
1290 - Search - scienceResearchers work out how to control 2D semiconductor growth for future chipsKorean boffins use oxygen to stop crystals forming in the wrong places, aiming to get tech to commercial sector by 2030
1291 - Search - scienceScientists get a new clue to the origin of solar wind ‘switchbacks’Understanding why our nearest star does what it does
1292 - Search - scienceArgonne scientists create chatty X-ray microscope that zooms in where you tell it toTalking to an X-ray nanoprobe beamline is far better than talking to a toaster, we assume
1293 - Search - scienceScientists find planet made on new matter recipe, and it formed after a Red Giant ate a solar systemDeath of a star may not be game over for the inner solar system after all
1294 - Search - BOFH: Smells like team spiritIn which BOFH and PFY meet 1990s heroes who know how to deal with Bosses
1295 - Search - BOFH: The Helldesk opens its third eye and ascends to a higher plane of troubleshootingPutting the ‘om’ in computing
1296 - Search - BOFH: Oh no! The CMS ate 500 pages of corporate documentationHow could such a terrible tragedy have occurred?
1297 - Search - BOFH: Schrödinger’s petty cash puts us in a very awkward superpositionWhy oh why are the accountants stricter than the IRS and HMRC put together?
1298 - Search - BOFH: How our Covid ransomware protocol’s Y2K blockchain lowered uptimeDiary of an excuse hound: Pie charts make us hungry for pizza
1299 - Search - BOFH: This printer engineer knows every trick in the bookBut so does this customer
1300 - Search - BOFH: Cross-department AI pitches are easier to swallow with a pint in handSome ideas need workshopping, others need a warning light
1301 - Search - BOFH: Amnesty means never having to say you’re sorryThere’s no I in team, but there is one in insurance fraud
1302 - Search - BOFH: For one ambitious security type, chaos is a ladderMission Control sends its regards
1303 - Search - public sectorMPs urge UK government to play venture capitalist with taxpayer-funded techWatchdog says Whitehall is too timid about taking stakes in British startups, leaving taxpayers at risk of missing out when they strike gold
1304 - Search - securityIndian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’Massive clean-up job under way because this mess makes it possible to impersonate any website or service
1305 - Search - cyber-crimeAuto tech startup claims it traced hack attempt back to rival’s IP addressIQ.Lvbs implies that rival Comma.ai isn’t playing fair
1306 - Search - systemsTens of thousands of Nvidia GPUs sit in Meta’s Prometheus supercluster, waiting for a failureAnd other fun facts about how Zuckercorp aims to keep a million GPUs running long enough to train a model
1307 - Search - Do not share my personal information
1308 - Search - Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offlineSecond security snafu in two years
1309 - Search - Security patches need patches now that attackers have AITerra finds sharp rise in GitHub security fixes reported broken within 90 days
1310 - Search - ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFUHuntress alleges takeover of M365 accounts
1311 - Search - Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
1312 - Search - Cybercrims go beyond stealing data to attack physical building systems’Hold my beer, have fun getting into your offices’
1313 - Search - Networking problems after the October 2026 Windows update? NTLM might be to blameLegacy protocol is going to be axed, and enforcement by default will highlight how migration is going
1314 - Search - Uncle Scam Wants You … to cough up your cash and personal data, FBI warns ahead of midtermsThe inevitable election-themed cyberattacks are whirring again, as the feds issue PSA about the ones to watch out for
1315 - Search - Attack on BAE-managed system disrupts US bankruptcy courtsLegal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
##
Security Affairs
View Articles
1316 - Search - FBI Blames North Korea for $6 Billion Binance Crypto Theft
1317 - Search - SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6
1318 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121
1319 - Search - Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION
1320 - Search - SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
1321 - Search - U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
1322 - Search - Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539
1323 - Search - Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
1324 - Search - U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
1325 - Search - $6.3 Billion Stolen from Binance in Attack Attributed to North Korea
1326 - Search - How to prioritize remediation after a pentest: a practitioner workflow
1327 - Search - Hacker leaks data on more than 40,000 Homeland Security employees
1328 - Search - Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion
1329 - Search - US Probes Suspected Hack Behind Military Base Freezer Failures
1330 - Search - 484,142 Exposed Cloud Buckets Contain 18 Billion Files
1331 - Search - U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog
1332 - Search - Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
1333 - Search - Election Website Security: 42% of US County Sites Still Lack .gov Domains
1334 - Search - ENGIE Data Breach Exposes Customer Details and Energy Contracts
1335 - Search - Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
1336 - Search - Hackers access Booking.com user data, company secures systems
1337 - Search - Inside ZionSiphon: politically driven malware aims at Israeli water systems
1338 - Search - RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
1339 - Search - Checkmarx supply chain attack impacts Bitwarden npm distribution path
1340 - Search - Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
##
The Hacker News
View Articles
1341 - Search - CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyNov 01, 2026Vulnerability / Cloud SecurityA critical flaw in Canonical’s LXD and MicroCloud let an attacker log in as a trusted client without holding that client’s private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client’s public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is privileged, the attacker could gain “root access to the host machine,” Canonical said. The flaw, tracked as CVE-2026-112816 , carries a maximum CVSS score of 10.0, and Canonical has released fixed versions of both products. How the Flaw Works LXD and MicroCloud let remote clients access their APIs over mutual TLS, a setup in which the client presents a certificate to prove who it is. A client is trusted when its certificate is in the server’s trust store, the list of identities the server will accept. The flaw was in how the server checked that certificate. It compa…
1342 - Search - Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptNov 01, 2026Cryptocurrency / Web SecurityMalicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about $2.7 million to 726 affected wallets. Blockchain records show crypto worth about $2.64 million reached the hackers’ wallet in under an hour. The replaced script came from DebugBear, whose real user monitoring (RUM) tool measures how fast web pages load for real visitors. Researchers at Hudson Rock downloaded the malicious file on October 29 from the address Polymarket’s site used to load the DebugBear script. They also found a change in Polymarket’s site code that removed the DebugBear script. DebugBear’s DNS records were compromised through its domain registrar, the company said on X. Its early findings indicate the attack targeted one customer’s website. It has seen no sign…
1343 - Search - FBI Links North Korea’s TraderTraitor to Record $6.43 Billion Binance Crypto HeistNov 01, 2026Cyber Crime / CryptocurrencyThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor , a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, along with the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation (IRS-CI), said it observed the threat actor converting stolen assets primarily into Ethereum (ETH). “It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages,” the FBI said in a statement. The agency has also provided a list of wallet addresses that the attackers are said to be using to launder the stolen assets. The development comes as Binance said it has resumed phase one of withdrawals starting today between 6 and 9 a.m. UTC after they were paused in the wake of the incident. “S…
1344 - Search - NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET InjectionNov 01, 2026Windows Security / Cyber EspionageCybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET assembly-loading framework codenamed NetamLoader . The attack has not been attributed to any known threat actor or group. Nor is it clear if the intrusion compromised more than one system and allowed the hackers to steal any sensitive information. The Russian cybersecurity company said the artifact was detected in the first half of 2026, packaged inside a Windows cabinet archive (CAB) file placed in a directory that stores Windows operating system update packages. It’s suspected the operation involved a supply chain attack , in which bad actors compromised a trusted third-party vendor to gain access to downstrea…
1345 - Search - Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataOct 31, 2026Data Security / Cyber AttackAmerican blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. “This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools,” Chainalysis said Friday. “Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users.” The company said it’s patching vulnerabilities and hardening its systems in response to the incident. The mention of “offensive agentic techniques” indicates that an artificial intelligence (AI)-powered tool was used …
1346 - Search - Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessOct 31, 2026Vulnerability / Cyber AttackThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities ( KEV ) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. CVE-2026-118527 (CVSS score: 4.3) - A generation of predictable numbers or identifiers vulnerability that could allow a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. It’s worth noting that the security bugs are part of an exploit chain that was first documented by Volexity earlier this month as weaponized in conjunction with an authentication bypass flaw (CVE-2026-104935, CVSS score: 8.6) by a previously undocumented threat actor dubbed UTA0576. CVE-2026-10493…
1347 - Search - A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsOct 31, 2026Vulnerability / Web SecurityA malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI’s bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category. The trap was an ordinary ChatGPT conversation shared via its public link. It could be sent the same way as any real shared chat: by email, as a chat message, as a support ticket, or as a social post. The victim did not have to install anything, join a workspace, or sign in through the attacker. In the most reliable version of the attack, they opened the link and clicked ChatGPT’s Preview button once. In a later version, Parameter set the page to open Preview on its own, so opening the link was the only step. What the Attacker Could Do Once the link opened, the attacker’s code ran ins…
1348 - Search - Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%Oct 31, 2026Threat Intelligence / Network SecurityThreat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44 seconds. In comparison, a total of 13.2 million and 10.0 million L3 DDoS attacks were recorded in Q2 and Q1 2026, respectively. The increase has been linked to DDoS-for-hire booter or stresser services that are responsible for hundreds of thousands of attacks. “Short-burst, low-bandwidth attacks lasting under 10 minutes and 1 Gbps surged by 208%,” the Cloudforce One threat intelligence team said in its quarterly DDoS Threat Report shared with The Hacker News. An interesting trend is the decline of hyper-volumetric attacks exceeding 1 Tbps by 69% from the previous quarter – going …
1349 - Search - Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideOct 30, 2026Cyber Espionage / Artificial IntelligenceChinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based “targeted intrusion adversary” it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in February 2021, the hacking group overlaps with a threat cluster detailed by Trend Micro as Earth Estries . “Agentic tooling like ARTEX enables this scale of expansion at speed, allowing a small team to pursue a wider target set than manual operations would support, rather than a wholesale shift away from the adversary’s established access-development mission,” CrowdStrike said in a Thursday analysis. Starting October 17, 2026, Vapor Panda is said to have used the AI tool against more than 200 distinct organizations across the world, including foreign ministries in …
1350 - Search - TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemOct 30, 2026Vulnerability / Endpoint SecurityTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host can exploit the flaw to crash the viewer’s TeamViewer and, depending on the platform, may also run code on the viewer’s computer. This works only after the user starts a remote-control session to that host. The fix is in TeamViewer version 15.83. The flaw is tracked as CVE-2026-111585 and scored 8.8 out of 10, in the high range. It affects the TeamViewer Full Client on Windows, Linux, and macOS, the Windows Portable edition, and the Android Remote Control app, in all versions before 15.83. For this flaw, TeamViewer’s bulletin lists the Full Client, Portable, and Android app, but not the Host. The same 15.83 update fixes two other flaws in that bulletin that do affect…
1351 - Search - WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursOct 30, 2026Vulnerability / Web SecurityThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability , which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring system. Patches for the flaw were released on October 28, 2026. “This is due to predictable, web-accessible staging paths used during full-package core upgrades,” Wordfence said . “This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.” The WordPress security company noted that successful exploitation requires an “attacker to hit a very narrow window while WordPress is unpacking a complete Core update.” The issue boils down to the fact that affected versions unpack new files part of a full-package Core update into a predictable directory under “wp-c…
1352 - Search - Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisOct 30, 2026Hardware Security / CryptocurrencyA Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. Trezor said in a blog post on October 30 that the report came in two days earlier from a customer in Indonesia. He bought the wallet from CryptoBilis in August, through the marketplace Tokopedia. The board sits between the wallet’s main board and its screen, with a cellular module and an antenna, according to the report. It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in. Trezor has the customer’s photos and description and has interviewed him on a video call. It is arranging for the wallet to be sent to its lab. Trezor find…
1353 - Search - Why Urgent Security Fixes Aren’t Fixed. Observe, Prove, Act, Confirm Gets Them MovingOct 30, 2026Intrusion Prevention / Endpoint SecurityThe alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their concerns are practical. An IPS protection could block legitimate traffic. A configuration change could interrupt a service. An endpoint policy could affect an application the business depends on. Without evidence, the recommendation waits. Safe remediation answers that hesitation with evidence. It tests the proposed action against your environment, applies the approved change, and confirms the result. Security and operations teams decide together, with facts. The Cost of Leaving Protection in Detect Many organizations already own protection they don’t enforce. Signatures sit inactive or in Detect mode while teams weigh false positives, inspection capacity, and business continuity. Meanwhile, applications and traffic patterns change, excep…
1354 - Search - Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in PrisonOct 30, 2026Cyber Crime / Cyber EspionageAhmad Umar Agha , a Syrian Electronic Army hacker known online as " Th3Pr0 ,” has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets. The conspiracy was organized and led by members of former Syrian President Bashar al-Assad’s inner circle, including the commander of Syria’s General Intelligence Directorate, the U.S. Justice Department said on October 29. The pro-Assad Syrian Electronic Army began its attacks in 2011. Its members sent phishing emails to steal employees’ passwords, then used those passwords to deface websites, redirect web traffic, and hijack social media accounts, according to a 2014 FBI affidavit . On April 23, 2013, the group hijacked the Associated Press’s Twitter account and posted a false report that President Barack Obama had been injured in two explosions at the White House. Twitter’s message confirming a password reset for that account w…
1355 - Search - Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorOct 30, 2026Malware / Artificial IntelligenceCybersecurity researchers have disclosed that a trojanized version of Anthropic’s official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was distributed under the extension’s legitimate publisher identity, prompting Cursor to temporarily shut down its marketplace to remove the compromised package. The exact method attackers used to introduce the unauthorized update remains unclear. “We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users,” Cursor said . “This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor[.]com/marketplace, Grok Bot, Grok, or our other SpaceXSI product. However, Cursor’s statement that the…
1356 - Search - Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawOct 30, 2026Vulnerability / Web SecurityDrupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. “This module enables you to sell goods and services to customers through an included shopping cart and checkout form or through decoupled applications via APIs,” Drupal said in an advisory. “The module doesn’t sufficiently protect certain routes and entity fields, leading to an access bypass that may financially impact the vendor.” The open-source content-management framework acknowledged that the vulnerability is being “actively exploited in the wild,” but provided no specifics about the nature of the activity or the extent of the campaign. Users are being recommended to update to the latest version - Version 3.x - Upgrade to Commerc…
1357 - Search - Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
1358 - Search - Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
1359 - Search - ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
1360 - Search - Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
1361 - Search - Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
1362 - Search - China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
1363 - Search - Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
1364 - Search - PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
1365 - Search - Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
1366 - Search - Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
1367 - Search - CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
1368 - Search - GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
1369 - Search - Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
1370 - Search - PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
1371 - Search - Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
1372 - Search - Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
1373 - Search - Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
1374 - Search - The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
1375 - Search - Wazuh and AI for Enhanced SOC Workflows
1376 - Search - American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
1377 - Search - AI-Generated Fake Login Pages Are Making Account Takeovers Easier
1378 - Search - Your Backup Isn’t Ransomware-Proof Just Because It ExistsOctober 26, 2026Read ➝
1379 - Search - Why Root and Jailbreak Detection Alone Cannot Guarantee Mobile App SecurityOctober 26, 2026Read ➝
1380 - Search - The Least Trusted Author Sets the AI Agent’s PrivilegeOctober 19, 2026Read ➝
1381 - Search - Security Rests on Hard Math Problems. Quantum and AI Are Both Coming for ThemOctober 19, 2026Read ➝
##
ThreatPost
View Articles
1382 - Search - Student Loan Breach Exposes 2.5M Records
1383 - Search - Watering Hole Attacks Push ScanBox Keylogger
1384 - Search - Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
1385 - Search - Ransomware Attacks are on the Rise
1386 - Search - Inside the Hackers’ Toolkit – Podcast
1387 - Search - Being Prepared for Adversarial Attacks – Podcast
1388 - Search - The State of Secrets Sprawl – Podcast
1389 - Search - A Blockchain Primer and a Bored Ape Headscratcher – Podcast
1390 - Search - Security Innovation: Secure Systems Start with Foundational Hardware
1391 - Search - Securely Access Your Machines from Anywhere – Presented by Keeper Security
1392 - Search - Log4j Exploit: Lessons Learned and Risk Reduction Best Practices
1393 - Search - How to ID and Protect Sensitive Cloud Data: The Secret to Keeping Secrets
1394 - Search - Cloud Security: The Forecast for 2022
1395 - Search - 2021: The Evolution of Ransomware
1396 - Search - Healthcare Security Woes Balloon in a Covid-Era World
1397 - Search - 2020 in Security: Four Stories from the New Threat Landscape
1398 - Search - Cybercriminals Are Selling Access to Chinese Surveillance Cameras
1399 - Search - Twitter Whistleblower Complaint: The TL;DR Version
1400 - Search - Firewall Bug Under Active Attack Triggers CISA Warning
1401 - Search - Fake Reservation Links Prey on Weary Travelers
1402 - Search - iPhone Users Urged to Update to Patch 2 Zero-Days
1403 - Search - Is your Java up to date?
1404 - Search - Top 5 Tips to Avoid Viruses and Spyware
1405 - Search - U.S. needs to investigate cyberweapons
1406 - Search - Six months later, DNS still taking a hit
1407 - Search - Pwn2Own 2009: Browsers and smart phones are targets
1408 - Search - Telegram Fraudsters Ramp Up Forged COVID-19 Vaccine Card Sales
1409 - Search - How the Pandemic is Reshaping the Bug-Bounty Landscape
1410 - Search - A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return
1411 - Search - Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes
1412 - Search - Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills
1413 - Search - Cyber-Spike: Orgs Suffer 925 Attacks per Week, an All-Time High
1414 - Search - PYSA Emerges as Top Ransomware Actor in November
1415 - Search - Encrypted & Fileless Malware Sees Big Growth
1416 - Search - Innovative Proxy Phantom ATO Fraud Ring Haunts eCommerce Accounts
1417 - Search - Women, Minorities Are Hacked More Than Others
1418 - Search - Threatpost Podcast & Video Hub: Going Beyond the Headlines
1419 - Search - Wikileaks Alleges Years of CIA D-Link and Linksys Router Hacking Via ‘Cherry Blossom’ Program
1420 - Search - Bash Exploit Reported, First Round of Patches Incomplete
1421 - Search - Threatpost News Wrap, February 21, 2014
1422 - Search - Jeremiah Grossman on His New Role as CEO of WhiteHat Security
1423 - Search - Threatpost News Wrap, January 24, 2014
1424 - Search - Rich Mogull on the Target Data Breach
1425 - Search - Threatpost News Wrap, January 10, 2014
1426 - Search - 2013: The Security Year in Review
1427 - Search - Lyceum APT Returns, This Time Targeting Tunisian Firms
1428 - Search - National Surveillance Camera Rollout Roils Privacy Activists
1429 - Search - Malware Gangs Partner Up in Double-Punch Security Threat
1430 - Search - How Email Attacks are Evolving in 2021
1431 - Search - Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks
1432 - Search - Ransomware and IP Theft: Top COVID-19 Healthcare Security Scares
1433 - Search - Experts Weigh in on E-Commerce Security Amid Snowballing Threats
1434 - Search - Cybercriminals Step Up Their Game Ahead of U.S. Elections
1435 - Search - 2020 Cybersecurity Trends to Watch
1436 - Search - Top Mobile Security Stories of 2019
1437 - Search - Facebook Security Debacles: 2019 Year in Review
1438 - Search - Biggest Malware Threats of 2019
1439 - Search - Top 10 IoT Disasters of 2019
1440 - Search - 2019 Malware Trends to Watch
1441 - Search - Top 2018 Security and Privacy Stories
##
Security Week
View Articles
1444 - Search - Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
1445 - Search - Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
1446 - Search - PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
1447 - Search - In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
1448 - Search - Passkeys Are Better Than Passwords. But They Are Not Enough.
1449 - Search - Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
1450 - Search - Fresh WordPress Vulnerability in Attackers’ Crosshairs
1451 - Search - Drupal Commerce Core Vulnerability Exploited Against Online Stores
1452 - Search - $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
1453 - Search - Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
1454 - Search - TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
1455 - Search - $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
1456 - Search - When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
1457 - Search - Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
1458 - Search - This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
1459 - Search - The Key to AI Software Security Isn’t Speed, It’s Maturity
1460 - Search - Oracle Health Data Breach Tally Climbs to Nearly 20 Million
1461 - Search - Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
1462 - Search - Anthropic Acquires Confidential AI Startup Opaque Systems
1463 - Search - Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
1464 - Search - IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
1465 - Search - Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
1466 - Search - Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal
1467 - Search - Cyber Insights 2026: The Ongoing Fight to Secure Industrial Control Systems
1468 - Search - Cyber Insights 2026: Cyberwar and Rising Nation State Threats
1469 - Search - Cyber Insights 2026: Malware and Cyberattacks in the Age of AI
1470 - Search - Cyber Insights 2026: Zero Trust and Following the Path
1471 - Search - Cyber Insights 2026: Offensive Security; Where It Is and Where It’s Going
1472 - Search - Cyber Insights 2026: Quantum Computing and the Potential Synergy With Advanced AI
1473 - Search - Hacker Conversations: Corey Thuen and the Evil Bit
1474 - Search - Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass
1475 - Search - Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster
1476 - Search - Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption
1477 - Search - Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker
1478 - Search - CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
1479 - Search - CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast
1480 - Search - CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite
1481 - Search - CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW
1482 - Search - CISO Conversations: Russ Kirby – Passion Is the Antidote to Burnout
1483 - Search - Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
1484 - Search - How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI
1485 - Search - Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
1486 - Search - Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
1487 - Search - 500,000 Active Credentials Left Exposed on GitHub
1488 - Search - Malicious B-tree NPM Package Accumulates Millions of Downloads
1489 - Search - Virtual Event Today: Attack Surface Management Summit
1490 - Search - Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
1491 - Search - Microsoft Patches Exploited Entra ID Vulnerability
1492 - Search - Fortune 500 Companies Hit in Azure Data Theft Campaign
1493 - Search - Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer
1494 - Search - Long-Hidden Flaws Patched in EPICS Research Facility Control Software
1495 - Search - Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
1496 - Search - Industrial Vendors Check Products for PHP2Shell Vulnerabilities
1497 - Search - Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
##
CSO Online
View Articles
1498 - Search - blogCSO Security CouncilExpert insights and strategic guidance for CISOs on emerging threats, AI risks, zero trust and enterprise security leadership. This blog is part of the Foundry Expert Contributor Network. Want to join? Learn more here: https://www.csoonline.com/exper...252 articles
1499 - Search - blogBehind the Mic: Tech insights from IT events20 articles
##
Troy Hunt
##
Schneier on Security
View Articles
1501 - Search - Friday Squid Blogging: Bigfin Squid Off California Coast
1502 - Search - Bloatware in Aftermarket Auto Parts
1503 - Search - Studying Fraudulent North Korean IT Workers
1504 - Search - Hiding Capabilities in AI Models
1505 - Search - Posted on October 26, 2026 at 7:03 AM
1506 - Search - Friday Squid Blogging: Increasing Squid Populations
1507 - Search - Posted on October 23, 2026 at 7:04 AM
1508 - Search - New Serious PHP Vulnerabilities Released and Patched
1509 - Search - Workshop on Economics and Information Security (WEIS) Archive
1510 - Search - Possible new Cellebrite iPhone Radio Zero-Day
1511 - Search - Four Ways AI Is Being Used to Strengthen Democracies Worldwide
1512 - Search - The CrowdStrike Outage and Market-Driven Brittleness
1513 - Search - How Online Privacy Is Like Fishing
1514 - Search - How AI Will Change Democracy
1515 - Search - Seeing Like a Data Structure