OVH Cloud warns of 87% price hikes to help it cover RAMpocalypse costs
Gaming servers get the steepest rises but sticker shock is also coming to conventional instances running on old and new boxes
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Mozilla Issues New Firefox GPG Key Following Exposure
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appe…
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform's plugins tea…
Japan kind-of completes its sovereign satnav constellation
H3 rocket gets the job done after losing a bird last year
Alibaba Cloud is using AI to help it use less AI
Solves tech support tickets faster and more accurately by keeping them away from LLMs
Anthropic pledges to embed watermarks to help discern AI slop in sop to EU
EU rules cited as reason for effort to trace AI output ancestry
Hackers breached a small Polish energy plant via private APN last year
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Tech…
'GhostJacking' Exposes Identity Governance Gaps in AI Agents
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
Multistate Water System Attacks Widen, Iran Suspected
Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.
Hey, big spender – OpenAI has a new SKU just for you
$125 a month? So, how good are those open-weight models getting, again?
BdThemes plugins supply-chain hack creates rogue WordPress admins
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' …
DEF CON hackers add new muscle to water utility protection
Franklin project adds new security providers, employs digital twins and AI
.jpg?width=720&quality=80&disable=upscale)
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
The future is for billionaires – the rest of us will get open weight AI models, maybe
Mark Zuckerberg muses about 'superintelligence' and 'arc of human civilization'
Zuck rekindles open weights Llama drama with Muse Glimmer
30-billion parameter LLM, Meta's first in more than a year, signals Meta's return to the open weights arena. Open version of Muse Spark to follow
OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation. [...]
Tor still runs on altruism, but cheap hosting is pulling it off course
Millions of people rely on a network of unpaid volunteers to stay anonymous online, and for 25 years that network has run on altruism rather than profit. Tor, short for The Onion R…
The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists
It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
New StormEncryptor ransomware used by former Medusa affiliate
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]
North Korean spies are running local LLMs to cause AI mischief
Kimsuky's phishing attacks get an AI boost
Out of band, out of mind: DEF CON research calls IPMI a ‘sanctioned backdoor’ into enterprise networks
Sitting inside almost every server is a potential backdoor that could put an enterprise network at risk. Baseboard management controllers, or BMCs, are the hardware embedded in …
Coruna, DarkSword iOS Exploits Proliferate Globally
Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.
Gym rat asks AI agent to book him a class, it hacks a waitlist API to bump him up the list
What wouldst thou ask of the monkey's paw?
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The …
Outdated Cybercrime Laws Put Security Researchers at Risk
A public policy expert mapped global cybercrime laws to develop a five-point framework for protecting ethical hackers and good-faith security research.
NB586: AI Angst Abounds; Arista Revs Up Q2 Revenue
Take a Network Break! Cisco takes center stage in our Red Alert after the network giant discovered a bunch of high-severity bugs in its Catalyst SD-WAN platform. It has rolled out …
LexisNexis pulls three services offline after suspicious server activity
Customers say issues began Wednesday and still not resolved
Sherlock Holmes Was the 'OG' Social Engineer
The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged. He has lessons for today's ethical- and unethical hackers…
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty muc…
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSR…