MPs tell Brit government: Sort out your tech sovereignty or get left out in the cold
Committee says Anthropic's brief US export ban shows UK can't even trust its allies to keep the AI lights on
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems
The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host. The post Linux Ker…
Microsoft to enable Windows settings backup by default for orgs
Microsoft says the Windows settings backup and restore tool will be enabled by default on Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems after upgrading…
Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security
The investment will accelerate Keyfactor's machine identity, PKI, and cryptographic security platform as enterprises prepare for AI-driven and post-quantum threats. The post Keyfac…
Northern Ireland tries (again) to expel Capita from schools IT contract
New procurement could be worth £851M after previous Fujitsu award was scrapped
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian univ…
UK guts planning red tape so datacenters can bypass the neighbors faster
Overhaul of process could give NIMBYs one year less to complain
BeyondTrust warns of critical flaws in remote access software
BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authen…
Brussels shows how to remove friction from collaboration
SPONSORED FEATURE: Flemish Government explores the radical notion that meeting rooms should just work
Microsoft testing new Cloud Rebuild Windows 11 recovery feature
Microsoft has begun testing the Cloud Rebuild recovery feature in the latest Windows 11 Insider Preview builds released for users in the Experimental channel. [...]
Broadcom and Apple extend custom silicon pact to 2031
Probably an extension of long-running iThing innards arrangement, not a new custom AI accelerator deal
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative acce…
Samsung’s profits jump 19x in a year and you don’t need AI to figure out why
Share price down sharply, apparently amid fears the bubble is getting bigger
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, c…
IBM teases new rackable mainframes that ‘complete’ the z17 family
UPDATED: Big Blue happy for users to BYO rack and slot Z machines alongside other tech
AI startup that’s never turned a profit say's it'll totally be around in 2047 to close its $19B lease
Model dev and AGI fearmonger Anthropic signs 20-year lease with TeraWulf
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
CitrixBleed-ing Again? NetScaler Vulnerability Under Attack
Attackers wasted little time targeting the latest memory disclosure flaw in Citrix's NetScaler products, after researchers published a proof-of-concept exploit (PoC).
Phishing poses as big-brand job interview to steal Google accounts
A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials fro…
Fake IT support calls on Microsoft Teams push EtherRAT malware
Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installing the EtherRAT malware, giving attackers initial …
Boffins bet on quantum computers, AI supers to solve fusion fuel dilemma
Department of Energy, Cleveland Clinic, and IBM simulate a soup of molten salts and techno babble in pursuit of tritium
Software engineers can still rake in big bucks by working for fast-growing companies
AI's impact on tech business is complicated
Madlad builds homebrew GPU using 8,192 RISC-V chips
The next version will have 32,000 MCUs
Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks
Securonix says the sophisticated framework abuses compromised websites, Blogspot, PowerShell, and fileless techniques to evade detection and deploy the PureLog information stealer.…
GitHub cuts short offer to burn repos on CD after mockery ensues
A purported jab of Sony's physical media phase-out blows up on GitHub itself
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework …
Vietnam arrests suspects behind HiAnime anime piracy service
Vietnamese authorities have arrested and are prosecuting seven suspects believed to have run HiAnime, the largest anime piracy streaming service before its shutdown in June. [...]
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' a…
Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
Article URL: https://github.com/V4bel/Januscape Comments URL: https://news.ycombinator.com/item?id=48807908 Points: 143 # Comments: 61
EU urged to act after Pegasus infects phone of spyware inquiry MEP
Campaigners demand investigation and long-delayed action on PEGA Committee recommendations