Cybercrims go beyond stealing data to attack physical building systems
'Hold my beer, have fun getting into your offices'
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 te…
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...…
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgd…
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Cl…
Amazon wants you to Bee-lieve wearable AI can recall it all for you
Would you like personalized shopping recommendations based on that conversation you just had?
Get in the bin! UK Space Agency wants public to name its debris removal mission
ClearSpace UK aims to be operational in 2029 with public's suggestion etched on the side of the spacecraft
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to…
Open-weight models win hearts, minds, and wallets
They handle 71.5% of Vercel gateway tokens and nearly a quarter of estimated spending
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the se…
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Benchmarked: Nvidia's RTX Spark notebook delivers serious local AI compute, at a price
El Reg digs its claws into HP's N1X-powered OmniBook Ultra 16
Node.js creator ditches Deno to work on open source Cloudflare Workers
You're building servers 'wrong,' says Ryan Dahl as Cloudflare gobbles his Deno startup
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbit…
Meta grants itself right to scrape content from business customers for model training
The future is private, the present is plunder
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
AI Takes Control of Robotic Arm in 16 Minutes Flat
Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
TNO077: From “Is It the Network?” to Continuous Assurance with NetBeez (Sponsored)
In this sponsored episode Scott is joined by Stefano Gridelli, cofounder and CEO of NetBeez, to discuss continuous network experience assurance and moving beyond reactive troublesh…
HN846: How Meter Built a Topology Design Tool to Speed Deployments from Hours to Seconds (Sponsored)
In this sponsored episode, Alex La Fazia and Daniel Kaczmarczyk of Meter explain how they built an internal tool to automate network topology creation, drastically reducing design …
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's K…
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the…
/dev/null: social network for developers
Article URL: https://dev-null.sh Comments URL: https://news.ycombinator.com/item?id=50121004 Points: 173 # Comments: 164
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so …
Ubuntu Stonking Stingray swims into spotlight with pre-release kernel
26.10 is here, with not-quite-ready kernel 7.3 and speech-to-text recognition
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organi…
New online tool will check lawyers' sloppy AI-written briefs since they can't seem to be bothered
Bogus AI-generated citations keep turning up in court documents, but lawyers could at least run those docs through this legal citation checker
AI datacenter capex will far exceed forecast revenue through 2030
Investors are pouring more into AI data center infrastructure than they can hope to recoup by 2030, according to Gartner. “Enterprise and consumer AI revenue will be insufficien…
Networking problems after the October 2026 Windows update? NTLM might be to blame
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going