Passwords stored in public Google Doc then showed up in search results
Developer spotted hostname and credential string lurking in autocomplete
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Cisco thinks Mythos means instant death for unsupported networking kit
CEO says buyers are moving fast and shuffling budgets to replace old boxen
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is C…
Tencent says it could make instant profits on $53B hardware splurge by renting it for AI workloads
Plans to build models instead because it thinks selling tokens will prove more lucrative in the long term
Chinese Loongson processors have leaky caches, researchers find
Attackers could extract data, even working from inside a guest VM
OpenAI ad service can bill customers for up to one day after they pause campaigns
ChatGPT Ads, I wish I knew how to quit you
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...]
Rent-a-GPU outfit Nebius promises rapid 1 GW powerup plan isn't nebulous
And it'll jump through every financial hoop it can to get there
Android malware combo takes out loans and relays victims' credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.…
'Near-autonomous' AI agents attack Taiwan's nuclear safety agency
Some say the world will end in fire, some say an agentic swarm
Deeply buried 16-year-old SQLite bug caused last year's Tailscale outages
Think your bugs are a pain to track? WAL-Reset took six months of hunting and development of a new logging tool to identify
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack cust…
Node.js creator liberates Durable Objects from Cloudflare
Same stateful trick, now with your own infrastructure
Spectre rears its ugly head again as researchers show some RISC-V chips are susceptible
Eight years on, we're still paying to hide the future glimpsed during speculative execution
Nvidia's latest solution to soaring enterprise AI costs is...a router?
NeMo Switchyard brings GPT-5-style model routing to the mainstream
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a …
Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows
Exploit Wednesday's back, baby
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a neve…
OpenWALDO aims to blow the doors off proprietary AI training models
Contributors wanted: 167B transparent tokens have a long way to go against AI giants' trillions
Cisco Advance Notification for Publication of August 19, 2026, Security Advisories
On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base…
Walmart Takes a 'Trusted Agent' Approach to Purple Teaming
Walmart colocates red and blue teams to build trust and improve security through collaborative purple teaming exercises
North American data center vacancy holds at just 1%
Despite significant public pushback, North America’s data center industry is engaging in unprecedented expansion, with more than 66 gigawatts (GW) of capacity under construction as…
CoreWeave revenue doubles as debt pile reaches $35.6B
Neocloud says AI compute demand is becoming continuous, but so is the spending
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor softwar…