Self-hosted email is in steep decline, Microsoft and Google are taking over
Oh great, Big Tech is now in prime position to decide which messages get through
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
CISA Warns of Exploited Gitea Vulnerability
CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1. The post CISA Warns of Exploited Gitea Vulnerab…
Now Perplexity is trying to get into the local AI action
Amid talk of an Nvidia deal, the AI search biz is looking beyond the cloud
Intel's 256-core Xeon 7 CPUs are a Diamond in the rough
Delayed, flawed, yet still beautiful
Cisco bulks up its AI infrastructure portfolio with Supermicro’s liquid-cooled servers
Cisco is partnering with Supermicro to bring the server vendor’s liquid- and air-cooled systems into Cisco’s AI infrastructure portfolio. Specifically, Cisco will begin offering hi…
LACMA data breach last year exposed social security and medical data
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]
Hackers abuse npm mirrors to host phishing redirect pages
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]
Hidden Prompts Trick AI Into False Email Summaries
With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.
When str.lower() is a security vulnerability in Python
Article URL: https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability Comments URL: https://news.ycombinator.com/item?id=49440410 Points: 178 # Comments: 75
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock fe…
Apple defies memory shortage with new Mac minis
The cost of memory makes this an expensive ML meal
Claude and Cowork now share what they know about you
Shared memory is live, with no option to separate it between services, Anthropic tells us; Claude Code stays apart for now
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
Attackers can exploit a security bug in Nvidia's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corrup…
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" again…
McKinsey says enterprise AI is finally 'on the road to ROI'
Fasten your seatbelt and empty that bladder: AI investment is rising, but reported enterprise earnings impact remains stubbornly flat
PP123: Using Gridctl to Keep MCP Configs From Leaking Secrets
If you’ve been spinning up AI tools — Claude Desktop, Cursor, Copilot, and so on — there’s a decent chance that API keys, credentials, and access tokens are sitting in plaintext on…
EPA to drop requirement for public notice of polluting datacenters
State and local regulators would decide whether the public gets a say on minor-source permits
Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation. The post Linux Foundation to Govern TRACE, an Open Standard for AI Runtime At…
HW086: High Density Wi-Fi Part 2
By popular demand, Keith is joined once again by Ferney Muñoz and Tom Hildebrand to answer listener questions and to dive deeper into designing high-density Wi-Fi for large-scale e…
You could've applied all 1,449 Oracle patches and still been hit by this attack
Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert
Microsoft warns that transitioning Excel workbooks to new Exchange connectors might not be smooth sailing
Current Exchange connector is retiring - and new ones won't work if you don't upgrade
Massive DDoS attack disrupts Norway’s government digital services
A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. [...…
Slop factory bans Russians for using slop factory to create slop
OpenAI wants you to thank it for keeping a permanent record of all your discussions with its bots
Is Cyber Facing an Affordability Crisis?
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
Hospital operator Nutex Health says data stolen in cyberattack
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]
US convicts ex-Philips engineer for exposing X-ray secrets to competitor
Dutch electronics giant saw right through ex-engineer’s plot, albeit over a year after it all unravelled
Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails
The company, previously known as ActiveFence, has raised a total of $280 million from investors. The post Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails a…
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI age…
From Fake Workers to Account Recovery: The Growing Identity Verification Risk
Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification…
OpenAI's upcoming Jalapeño chip looks like it'll be an inference beast
128 chips, 1.7 exaFLOPS, and 27 TB of HBM give Altman and crew a leg up over Blackwell, and maybe even Rubin