Aggregated from vendor advisories, security research, and industry publications.
RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation. The company demonstrated the race against
Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel. [...]
Who needs a working security badge when you know how to talk your way into the records room?
Portuguese businesses operate in the same native language as Brazilian hackers, making those businesses easy targets.
Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw t…
An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers. The post US Warns of Iranian Hackers Targeting Siemens…
And accuses Thailand hosting hardware that may have helped distillation attack
Yet the Chocolate Factory is also buying more third-party compute capacity to handle high demand for the G-Cloud
A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.
Ahead of Black Hat USA, researchers find exploitable flaws in how Microsoft handles passkeys that could allow attackers to impersonate privileged users.
Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused
The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]
Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.
It's Alphabet's fastest-growing business and now makes up more than a fifth of the juggernaut's revenue and operating profit
ScreenWall's creator tells El Reg he doesn't want those obsolete devices going to waste
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former …
As Trump dismantles the US-led world order, what the rest of the world really needs is sovereign apps and datacenters, argues 'enshittification' coiner
A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.
Because what could be more appealing to humans than sharing virtual space with AI?
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, w…
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access…
Oracle is expanding its Cloud@Customer on-premises portfolio with a managed database offering that it says will enable enterprises to run databases, applications, and AI agents in …
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers…
What if your MCP server shipped with its own manual? Angie Jones, VP of Developer Experience at the Agentic AI Foundation, joins William and Eyvonne to break down the Skills Over M…
Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports
Eric Chou welcomes Florian Lohden, a NetDevOps engineer and co-founder of the NetAuto Group, to discuss his community-building efforts and his latest adventures in network automati…
In this sponsored episode, Jonah Kowall from Spacelift joins the show to unpack the findings of the 2026 Infrastructure Automation Report. The discussion covers the “governance par…
.jpg?width=720&quality=80&disable=upscale)
Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.
Object orbits a brown dwarf, which circles another star, confusing the cosmic taxonomy
Nvidia has introduced its next-generation Spectrum-X Ethernet networking platform, positioning it as a key building block for the next wave of “gigascale” AI factories designed to …