Big Tech demanding deals that smooth out memory prices, says SK Hynix
Don't worry about an AI bust, monster profits and huge margins are here to stay
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
ShinyHunters Claims Ernst & Young Hack
Ernst & Young previously confirmed that personal and financial information was stolen from a third-party management platform. The post ShinyHunters Claims Ernst & Young Hack appear…
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER malware family. Th…
America bans imported robots due to supply chain and security risks
Docs point to China’s Unitree as prime example of the foreign clanker threat
Measuring LLMs’ Ability to Perform Cryptanalysis
There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new attacks. The benchmark: “CryptanalysisBench: Can L…
A 13-year-old flaw is exposing tens of thousands of data center management systems
The ‘no man’s land’ beneath the OS on enterprise servers is becoming the malicious actors’ next target. Attackers are gaining a foothold into broader data center environments by…
Arista patches maximum severity vulnerability that is already being exploited
Arista has patched a VeloCloud Orchestrator (VCO) security hole that has been actively leveraged in the wild, one that the vendor says “may allow a remote attacker to access privil…
A requiem for Optane, Intel's KV cache killer that could have eased the RAM price crunch
With microscopic latencies and otherworldly write endurance, it was perfect for today's AI workloads – but gone before they arrived
Fortinet’s new FortiGate platform converges firewall, SASE technologies
Fortinet has expanded its firewall family with new high-speed boxes that, when combined with the vendor’s FortiSASE Outpost software, extend cloud-based SASE (secure access service…
MCP gets an enterprise makeover
Now happier running in a conventional K8s environment, with `an easier-to-live-with lifecycle
JFrog's 0-days let OpenAI's models hack Hugging Face
OpenAI confirms the link
Ghost Credentials Expose Cloud Systems to Hidden Identity Risks
Dormant nonhuman identities can create security blind spots, says security researcher Aleksandr Krasnov, who plans to release an open source tool next week at Black Hat USA 2026 th…
Perplexity's tokenmaxxing Model Council gives you multiple bot perspectives
Up to 8 AI models running in the cloud weighing in on ambiguous business issues? Sounds affordable
CubePilot drone software dev hit by DNS hijacking to intercept traffic
CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS hijacking attack. [...]
Thousands of Data Center Controllers Open to Takeover
A host of Internet-exposed remote hardware management processors are subject to offline password-cracking attacks — and adversaries have taken note.
OpenAI models used Artifactory zero-days to escape to the internet
JFrog has confirmed that OpenAI models exploited zero-day vulnerabilities in self-hosted Artifactory servers to help escape an isolated testing environment and gain access to the i…
When AI Agents Escape Sandboxes, Old Security Rules Apply
OpenAI's recent AI agent sandbox escape proves traditional security principles matter more than ever: limit access, isolate execution, log everything.
Stronger AI Safety Requires Peeking Inside the 'Black Box'
Researchers propose focusing on identification of certain cognitive elements in LLMs that indicate when AI systems may take an unwanted action.
War machines can run amok with AI in control
Tour of the AI kill chain maps the risks of ubiquitous surveillance and flawed algorithms
Microsoft and Wiz mind-meld agents catch more than 90% of bugs
Secret to their success: Using the right model for the right security job
Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK…
CISA shares advice on isolating vital systems during cyberattacks
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event …
PP119: Automating Firewall Ops To Stay Ahead of AI Threats (Sponsored)
There’s always been a gap between the discovery of a security issue and the time it takes to remediate. Now AI models can autonomously find weak points and chain together actions t…
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. [...]
HW084: Spatial Reuse in Wi-Fi
Jake Snyder joins Keith Parsons to explain the mechanics of spatial reuse in Wi-Fi. They discuss practical implementation, the trade-offs involved in increasing signal detection th…
AI is storage's biggest opportunity – and biggest threat
Faster access and more secure recoveries are driving business, but mishaps and attacks can endanger data
'Certighost' Flaw Haunts Microsoft Active Directory Certificates
Microsoft patched a high-severity vulnerability earlier this month that allows a threat actor to escalate privileges and compromise an AD environment.
DEF CON bans Meta-style 'pervert glasses'
More organizers prohibit camera-equipped specs, even with prescription lenses
Britain hopes £7.3M will help electric and hydrogen aircraft take off
Government finds some loose change down to chuck at emission-free flight research