Tricky 'SynkLoader' Multitool May Herald Ransomware
An advanced, multilingual malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with a slew of novel features.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
ReliaQuest confirms failed data-theft attack after ShinyHunters breach
Cybersecurity company ReliaQuest has confirmed that one of its employees was targeted in a social engineering attack after hackers impersonated a member of the security team. [...]
Tesla to recall almost three million vehicles over hidden door handles
At least it looks cool, right Elon? China demands changes ahead of ban on new models in 2027
What Nvidia's first Groq 3 LPU benchmarks tell us about its $20B gamble
Gemma 4 31B performance tests offer a best-case scenario for next-gen dataflow accelerators
AI agents are reshaping the threat landscape, shifting IT skills requirements
Some 78% of cybersecurity jobs now require AI skills—an indicator that AI literacy is quickly becoming a baseline expectation for hiring, according to the AI Workforce Consortium. …
ToxicPanda Banking Trojan Matures Into Enterprise Threat
The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk.
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old w…
Oracle Exadata Database@AWS offers advantages, but trade-offs remain
Cloud giant allows customers to get more from Oracle hardware, but will try to gain more workloads on the side
ShinyHunters and ReliaQuest trade blows over claimed breach
Attackers took a look at an employee's identity dashboard, but security firm says that's as far as they got
Microsoft Teams now lets admins block external bots from meetings
Microsoft is rolling out a new Teams meeting protection policy that allows administrators to automatically block all identified external bots from joining Teams meetings. [...]
South Korean startup platform breach exposes key management failures
A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included in an API. Penta Security explains why encryption …
Hired for One Job, Judged on Another: The CISO’s Real Problem
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job. The post Hired for One Job…
The Vulnerability Gap: Why Discovery Is Outrunning Repair
The combination of AI both discovering more vulnerabilities at a faster pace and the tightening regulatory environment is making this an all-hands-on-deck moment for the cybersecur…
Chipmakers laughing all the way to the vault as memory prices go stratospheric
Gartner reckons $1.6 trillion year is just the start, and don't expect a bust anytime soon
I picked Task Manager 'to see how ready AI is for primetime… or if it would just degrade to slop' – OG dev talks to The Reg
Original author of legendary 1996 system utility tries to answer the question: 'How would I do it today?'
Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts
Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation. The post Uber Fined Nearly $1 Bil…
Microsoft: August updates break printing, PDF export in WPF apps
Microsoft has confirmed that .NET Framework updates released as part of the August 2026 Patch Tuesday are breaking printing and PDF export in WPF applications. [...]
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomwar…
AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones
Sawtooth waves you can't hear still mess with your Bluetooth. Firefox and Brave say they've got you covered
US datacenters tripled their water footprint in 10 years
... and those are figures from the start of the AI boom. It can only be worse now. Silo-ed reporting isn't helping
91 Vulnerabilities Patched in Spring Application Framework
More than 200 vulnerabilities have been patched to date this year, compared to only 16 in 2025 and 22 in 2024. The post 91 Vulnerabilities Patched in Spring Application Framework …
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is wh…
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthentica…
Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
Cybersecurity researchers have flagged a cyber espionage campaign targeting Myanmar that uses graduation ceremony invitation lures to deliver a Go backdoor called QUICAgent. The c…
The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk
Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using ChatGPT and Claude for quick drafting tasks, a mor…
$1T investment giant Apollo breached after social engineering attack
Hackers spent four days inside the org's cloud platforms after apparently talking their way in
Venezuelan Gets Record Federal Prison Term for ATM Jackpotting
Juan Manuel Gouveia-Aguilera has been sentenced to 8 years in prison for his role in an ATM jackpotting scheme that caused millions in losses. The post Venezuelan Gets Record Feder…
AI vendors are turning to custom hardware as Microsoft winds back the clock on Windows
Vendors are moving way beyond Nvidia’s GPUs in the datacenter
CISA orders urgent patching of actively exploited Zimbra flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) wi…
Criminal Deception in Silicon Valley
Interesting paper: Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception, employing deceptive means to defraud audie…