Cisco Adds NHI to Security Stack With Astrix, WideField Acquisitions
Cisco joins a growing list of security platform providers that are betting that securing the agentic workforce means turning identity into the primary control plane.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Meta Is Testing Facial Recognition for Police and Military
We know that ICE wants to deploy eyeglasses with facial recognition that can identify people in real time. Turns out Meta is prototyping the feature with a Pentagon supplier. (Alte…
_Wavebreakmedia_Ltd_FUS1407_Alamy.jpg?width=720&quality=80&disable=upscale)
New Initiative Tackles Security for End-of-Life Open Source Software
The Open Source Sustainability Initiative's goal is to help enterprises manage and secure aging open source projects while maintaining regulatory compliance.
US auto regulators want to kill robotaxi brake pedals
Requiring driverless vehicles to keep human brake controls impedes innovation, the NHTSA says
Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical…
AI Won't Wipe Out Entry-Level Cybersecurity Jobs
Instead of eliminating jobs for early-career cyber pros, AI is creating new opportunities for candidates with strong human decision-making skills.
HN833: The State of Packet Pushers 2026
Ethan and Drew gather the rest of the Packet Pushers team to discuss the State of the Packet Pushers Network. Together they provide a behind the scenes look into current initiative…
Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Researchers warn many AI coding assistants now execute commands from project configurations
You can’t build sovereign infrastructure with Broadcom, says CISPE
Broadcom’s claims that it can support European cloud service providers building competitive sovereign solutions are exaggerated, according to the Cloud Infrastructure Service Provi…
Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact. The post Amazon Q Flaw Enabled Cloud Credential Theft via Maliciou…
More Klue Breach Victims Identified as Hackers Get Hacked
Roughly two dozen companies have notified their customers of the Klue-Salesforce incident impact. The post More Klue Breach Victims Identified as Hackers Get Hacked appeared first …
Oracle promises to open up MySQL governance, but the community wants guarantees
Open source advocates remain concerned over lack of binding commitments
In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs
Other noteworthy stories that might have slipped under the radar: Russia used Cellebrite to hack activist’s phone, Five Eyes issue urgent AI threat warning, macOS Gaslight backdoor…
Your First GRC Agent: A Red Teamer's Walkthrough
AI won't replace GRC analysts, but it can eliminate much of the repetitive work they do. Anecdotes walks through building an agent that continuously monitors controls, identifies e…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer opens the repo, trusts…
Presidential order addresses quantum computing gaps
The quantum computing industry has a supply-chain problem: The companies that could make the specialized lasers, cryogenics, and photonics it depends on don’t have enough of a mark…
One man, two kernels, and a lot of RISC-V
A homebrew PC and mini-mainframe were only the warm-up for Yuri Zaporozhets' latest operating system
Meeting Trump's 2030 Quantum Deadline Will be Expensive, Complex
Getting accurate visibility into IT and OT systems will be compounded by multivendor environments, misaligned update life cycles, and interoperability gaps.
Notion kills its Gmail client after AI agents keep humans from troubling inbox
More than half of users now let bots handle email, so service is headed for shutdown
New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries
A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems. CVE-2026-46331, nicknamed "pedit COW," is an out-of-bounds …
Thanks for Crushing the Submissions Inbox. We're Trying to Keep Up
It might be taking a bit longer than usual to respond to your submissions — here's why.
Incident CVE-2026-LGTM
Article URL: https://nesbitt.io/2026/06/26/incident-report-cve-2026-lgtm.html Comments URL: https://news.ycombinator.com/item?id=48686093 Points: 598 # Comments: 93
Nebulock Raises $25 Million for AI-Native Contextual Security
The cybersecurity startup provides threat hunting, proactive detection, and behavioral security analytics. The post Nebulock Raises $25 Million for AI-Native Contextual Security ap…
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical remote code execution vulnerability impacting PTC Windchill PDMlink and PTC FlexPLM en…
First AI-powered 10 Gbps all-optical campus network in Jiangsu province goes live at Southeast University in China
PARTNER CONTENT: The network delivers near-instant data transfer and zero-latency immersive interactivity, bridging the gap between researchers and computing power
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers
ZTE and Tianyi Digital Life jointly unveil flagship home AI router
PARTNER CONTENT: Collaborating to advance China Telecom's “Better Home” ecosystem, the joint launch introduces a 2000 Mbps Wi-Fi 7 hub driven by core AI connection, sensing, and co…
ZTE showcases practical path to Level-4 autonomous networks through agentic AI and cross-domain innovation at DTW Ignite 2026
PARTNER CONTENT: Highlighting Level-4 autonomous network solutions, TM Forum Excellence Award finalists, and joint operator trials powering cross-domain fault management and Dynami…
ZTE presents full-stack intelligent energy storage solutions at the Smarter E Europe 2026, powering Europe's energy transition
PARTNER CONTENT: ZTE introduces full-stack, AI-driven energy storage solutions in Munich to address the rising power demands of the digital infrastructure era
New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets
DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for the flaw on June 25, the first pu…