ClickFix Attacks Evolve to Better Hide Malicious Payloads
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot early attack stages.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Permanent daylight saving time could be a public health time bomb
Trump pushes the US to adopt pDST, but Canadian researchers say darker mornings come with costs for sleep, learning, and productivity
Critical Healthcare Systems Aren't Quantum-Ready
A study of 2.5 million devices across 50 healthcare organizations suggests the sector has a long way to go in getting ready for the post-quantum cryptography era.
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. [...]
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Googl…
Cisco readies new control plane for quantum networks
Cisco continues to fill out its portfolio of quantum network technology, this week adding a core control mechanism for distributed quantum networks. Cisco’s prototype Quantum Ne…
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend …
European AI flag bearer Mistral's new open weights model is 'Le Chonk'
Oh lawd it is coming ... to Hugging Face later this month
Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps
The situation illustrates a trend toward using AI and deterministic validation to identify flaws and exploitability, and provide a risk assessment.
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products,…
IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams
In this video interview, Nick Kakolowski, senior director for CISO research at IANS, talks AI: budgets, ROI, and changes inside security teams.
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
HW090: Inside eduroam
Keith Parsons talks with Mary Bull from Internet2 to discuss the history and widespread deployment of eduroam, a global Wi-Fi roaming service supporting research and education netw…
ASOS confirms data breach after “HACKED” in-app notifications
UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app while claiming to have stolen customer data from …
HS145: The Economics and Architecture of AI Factories (Sponsored)
What is an AI Factory, and why would an enterprise want to invest in one? Johna and John are joined by guests Thierry Pienaar of HPE and Kaushik Shirhatti of NVIDIA to discuss what…
Wikimedia Foundation comes forward as latest OpenAI agent assault victim
Millions of automated requests may have contributed to partial Wikidata outage in May
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes throug…
Microsoft extends the Outlook naughty step with two more file types
You didn't really want to be sending around .msix and .msixbundle files, did you?
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees. The post FBI Blames Contractor’s Missed Patch for…
Classic Outlook clings to stale search results as Microsoft works on a fix
Moved messages linger and throw errors when clicked, leaving Windows Desktop Search as the workaround
How to secure RMM software: 8 controls MSPs should test
RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk. Acronis outlines eight controls MSPs should test w…
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
Run the CLI in autopilot mode and take your chances
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026. The post FBI Arrests ‘Most Wanted’ Deve…
Google overhauls cloud modernization portfolio with new AI agents
Google is overhauling its cloud modernization portfolio by bringing its existing migration and modernization tools along with new agentic migration tools and a new Modernization Hu…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first,…
Asos app delivers a data leak threat instead of fast fashion
Rogue notification claims Snowflake instance compromised, but customer info theft remains unverified
Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls. The post Apple to Tighten Full Disk Access Controls in macOS Amid AI …
Denmark's ID register spills more people's details than the country has residents
Abuse of private firm's access exposed 8.8M records, including those of people who had died or moved abroad
Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage. [...]