US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide
Infecting devices from 2021 until the FBI stepped in
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Nvidia found $1B under the couch to help secure American scientific computing dominance
Commitment comes as GPUzilla prepares to fortify Uncle Sam's arsenal with at least seven AI-optimized supers
FBI disrupts Chinese hacking tools used to breach critical infrastructure
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached cr…
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
Tool sprawl, AI complicate enterprise network operations
Enterprise organizations typically use six to eight observability tools, creating integration, staffing, and visibility challenges as network operations teams adopt AI to help mana…
There can be only one: Google Cloud casts Gemini as your enterprise AI hero
The Chocolate Factory proposes a single universal agent for work
NASA taps DoE to help it build nuclear space reactors
Space agency claims steady progress on lunar reactor plans, but offers little evidence to back it up
Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data c…
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to …
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
Nvidia-backed Upscale takes on AI networking silos with Token Fabric
AI clusters depend on two types of networking. Scale-up networking connects accelerators inside a rack. Scale-out networking connects racks across the data center. A single AI job …
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asi…
High-severity Nvidia bug could crash GPU monitoring on exposed servers
The GPU giant released a fix for the flaw, tracked as CVE-2026-47483
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and…
TSMC taps GlobalFoundries to bolster US silicon interposer production in $2B deal
Advanced packaging tech is essential to the domestic production of high-performance semiconductors used in AI datacenters
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. [...…
Gremlin now uses AI to break distributed systems faster
If there's one thing AI can do well, it's failing more quickly than the average SRE
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
Credential-stealing malware detected within minutes of npm release, but impact remains unknown
LIU024: Dennis Thankachan: Lightyear and Beyond
Lightyear CEO and co-founder Dennis Thankachan shares his transition from investment banking to entrepreneurship and the lessons learned from his early startup failure. He also dis…
Money trail backs leaked chats from extortion crew that walks into US law firms
Researchers corroborate parts of Silent Ransom Group dump detailing crypto payouts, cash brokers, and recruitment
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCER…
Too many quantum startups, too little money to keep them alive
Gartner predicts more than half will fold by 2030, even as businesses begin testing the technology's usefulness
Cisco Patches a Dozen Critical Vulnerabilities
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vul…
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to …
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privi…
Fighting GenAI with GenAI: The New Email Security Landscape
SPONSORED FEATURE: Old attack, new protections
Margaret Hamilton, software pioneer who helped put humans on the Moon, dies at 90
Her team's code kept Apollo 11's landing on course when the guidance computer became overloaded
Security Awareness Training Isn’t Dead, but It Needs a Rethink
All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable. The post Security Awareness Training Isn’t Dead, but I…
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool nam…