Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
OpenAI explains how its naughty AI agents attacked Hugging Face
Biz describes its act of automated irresponsibility as 'a warning shot'
Critical Avada WordPress theme flaw enables zero-click RCE
A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. [...]
Dark Caracal Adds New Malware to Cyber Espionage Arsenal
GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims.
Meta's new MTIA 400 chip has a split personality: Training AI and serving ads
Faster than Blackwell, but still no replacement for AMD or Nvidia ... yet
Kubernetes cleans house, bins legacy kube-dns, IPVS, and cgroup v1
K8s 1.37 also unsticks a Metrics API that has been lodged in beta status for nine years
Flock shock rocks cop cam vendor as protests mount
Database from legal advocacy group details growing unease with warrantless panopticon
'HTTP Terminator' Hunts for Novel Desync Attacks
James Kettle of PortSwigger talks with the Dark Reading News Desk about his AI-powered open source tool, which found new HTTP request-smuggling techniques.
Intel unwraps three-pronged architecture strategy to go after agentic AI
Intel laid out a broad hardware strategy for the next phase of artificial intelligence at the Hot Chips 2026 show, arguing that the rise of agentic AI will require more than increa…
Red Flags That Expose Fake North Korean IT Workers
North Korean operatives posing as IT workers are improving their tactics, but researchers say there are still ways to spot them before they do damage.
More than 100 water systems were hit in July cyberattacks
'These are test runs for a larger-scale attack'
New GPUThor attack defeats NVIDIA ECC protection for root access
A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service (DoS) and root-level privilege escal…
GitHub Actions was down yet again
Another outage puts last week's promises to an early test
Android Malware Hijacks Update System for Car Head Units
Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections.
D2DO311: Code Review Is Dead – Long Live Peer Review
Traditional peer review processes are breaking down in the new AI era. Dylan Ratcliffe, founder and CEO of Overmind Technology, joins Ned and Kyler to discuss the importance of tre…
MNT follows up its open hardware portables with a desktop case
Upgrade the portable, give its old mainboard another job
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical in…
Meta agrees to $18 billion settlement over teen social media harms
Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals over allegations that Facebook and Instagram were …
Meta's proposed $18B settlement in teen harm case throws YouTube and TikTok under the bus, too
Zuckercorp ties $5.3B of its payout to rivals playing along
Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
On September 2, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Ba…
Memory crunch: Cloud operators may be pushed to splurge 68% of capex on DRAM and NAND
Rising costs of new kit due to soaring memory prices likely to feed into cloud service bills
Boston Scientific discloses 'global disruption' in ongoing cyberattack
No timeline to restore IT systems as probe remains ongoing
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group a…
AI Speeds Up Malware Development, Not Its Success Rate: Analysis
Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints. The post AI Speeds Up Malware Development, Not Its Success Rate: A…
Boston Scientific says cyberattack disrupted operations globally
Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing operational disruptions globally. [...]
Carhartt data breach affects 12.9M, half of what ShinyHunters claimed
One AI and two trained eyes delved into the heavily padded leaks
CIOs are on notice – vSphere 8 times out in October 2027
SPONSORED FEATURE: How do you plan for AI and virtualization when the clock is ticking this loudly?
Hackers target Microsoft SharePoint RCE chain with PoC exploit
Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code on unpatched servers, according to threat intelligence…
Microsoft sketches out a Whiteboard extension
Users have a little more time to migrate from Azure storage to OneDrive
FBI disrupts proxy network enabling Chinese espionage operations
The FBI has disrupted infrastructure associated with a technical "quartermaster" that provided reconnaissance, proxy management, and operational routing capabilities for Chinese cy…