CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw
Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Black Hat State of Security Vendors
Andy Ellis has a roundup of the security vendors at Black Hat this year. Key Takeaways: We have entered into an AI world. While nearly half of booths didn’t directly mention AI or…
Police arrests dozens of suspects in global cybercrime crackdown
Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups. [...]
Silent Patches Don’t Stop Attackers – They Blind Defenders
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. The post Silent Patches Don’t Stop Attackers – T…
Ukraine unveils native jet-powered drone interceptor
Fast and lightweight unmanned aircraft is designed for easy deployment and fits in a pickup truck
Crooks push Mac malware through fake OpenAI Codex ads
Sponsored search results lead developers straight into a ClickFix malware trap
Google adds AI-powered assessments to Migration Center to speed up cloud migration planning
Building a business case for moving enterprise workloads to the cloud or even switching cloud providers can itself be a lengthy exercise, requiring enterprises to first understand …
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attac…
HMRC dangles £500M carrot for National Insurance system revamp
Taxman wants to drag creaky NPS into agile era
Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff
AI infrastructure, including advanced semiconductors mostly made in Taiwan, has become a key point of competition between the U.S. and China. The post Taiwan Charges 9 Over Illegal…
What is virtualization modernization?
SPONSORED EXPLAINER: Why you should take a long-term approach to rethinking your virtualization portfolio
CISA Warns of Exploited Oracle WebLogic Vulnerability
The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. The post CISA Warns of Exploited Oracle WebLogic Vulnerab…
Australia’s record industry won’t chart tunes recorded in the key of AI
This is basically a riff on ‘You wouldn’t steal a car’ and means only the human league can have a hit
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Kno…
SpaceX claims it will put a Vera Rubin NVL72 rack-scale system into orbit next year
And fly ‘significant scale’ in 2028 – a claim that isn’t entirely bonkers, but needs a solid grain of salt
AI is turning the semiconductor market into a $1.6 trillion industry
The semiconductor industry is becoming a trillion-dollar growth engine as AI gobbles up more and more resources. Gartner has slightly increased its forecast for worldwide semico…
IBM announces chip that natively executes Arm and Z instructions concurrently
Cunning plan to expand the amount of software that runs on mainframes is also an admission ISVs are focusing their energies elsewhere
Microsoft AI watermarks in Paint and Photos are linked to user IDs, researcher finds
Privacy? Not if you use hosted AI services
Nvidia to hike prices by 15%, on top of an even larger increase in July
On top of July’s 30% price hikes across almost all of its product lines, Nvidia is reportedly preparing to raise prices of servers, including those powered by Vera Rubin and Grace …
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
CISA issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.
IBM unveils dual-architecture processor to run Arm-native apps on Z mainframes
IBM announced its first dual-architecture mainframe processor that’s designed to allow enterprises to run Arm-native Linux environments alongside z/OS and existing Linux applicatio…
You don't want this Sleepwalker backdoor on your Windows machine
Its own command language, 23 instructions - signs point to 'well-resourced operation rather than an opportunistic one'
Unpatched Calix flaw lets hackers bypass NAT to expose internal devices
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forward…
Browser fingerprint tool shows how easy you are to track using the latest sneaky tricks
Glassbox dev admits he had some help from Claude to build locally running tool
Foul Language: WordlistLoader Disguises Malware as Ordinary Text
ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.
Conjure cash with old Macs by linking them to AI inference Borg
Darkbloom distributed inference network promises to put underutilized Apple kit to work
Hackers target WordPress sites in miniOrange auth bypass attacks
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML r…
TikTok reaches $400M settlement with US over COPPA violations
The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privac…
Windows NT 4 went on sale 30 years ago today
The version that started to bring all Microsoft’s pieces together
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Minecraft clients. McAfe…