Hobbyist xenomorphs Raspberry Pi into Alien-themed DIY laptop
Everything you need to build the PS-85 is available from its designer's website, even if you can't get to space
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Hobbyist xenomorphs Raspberry Pi into Alien-themed DIY laptop
Everything you need to build the PS-85 is available from its designer's website, even if you can't get to space We've all been there: You're doing maintenance on a Weyland-Yutani h…
Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risks
The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access. The post Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risk…
Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools
An active phishing campaign has been observed targeting multiple vectors since at least April 2025 with legitimate Remote Monitoring and Management (RMM) software as a way to estab…
Securing a DoD contractor: Finding a multi-tenant authorization vulnerability
Article URL: https://www.strix.ai/blog/how-strix-found-zero-auth-vulnerability-dod-backed-startup Comments URL: https://news.ycombinator.com/item?id=48012162 Points: 221 # Comments…
Beyond the pitch: A look at Atlético Madrid’s connected stadium
In elite soccer, success isn’t measured solely on the field. The fan experience, operational efficiency, and the ability to anticipate decisions are also at stake. In this context,…
Trellix Source Code Repository Breached
The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process. The post Trellix Source Code Repository Breached appeared first…
Backdoored PyTorch Lightning package drops credential stealer
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and …
NB573: Cisco Open-Sources OpenClaw Protection; T-Mobile Taps Starlink for Broadband Redundancy
Take a Network Break! It’s a busy show this week. We start with follow-up on Anthropic’s Project Glasswing, router bans, and end-of-engineering/end-of-support date changes for Fort…
Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass
Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical bug that could result in an authentication bypass. MOVEit Automation…
Hands off my trademark! Notepad++ dev threatens legal action against macOS port
It's not the fork that's the problem, it's the attempt to make it look official, says original Notepad++ dev Don Ho Notepad++ remains a Windows-only app, at least under that name. …
Hands off my trademark! Notepad++ dev threatens legal action against macOS port
It's not the fork that's the problem, it's the attempt to make it look official, says original Notepad++ dev Don Ho
Trellix discloses data breach after source code repository hack
Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository. [...]
Inside Amazon Web Services' plan to make networking disappear
The Register gets a look inside AWS' networking lab in Cupertino FEATURE In an unassuming three-story office building in Cupertino, California, engineers from Amazon Web Services a…
Inside Amazon Web Services' plan to make networking disappear
The Register gets a look inside AWS' networking lab in Cupertino
Shadow IT has given way to shadow AI. Enter AI-BOMs
'If you don't have visibility, you can't understand what to protect' When it comes to securing enterprise supply chains, now heavily infused with AI applications and agents, a soft…
Shadow IT has given way to shadow AI. Enter AI-BOMs
'If you don't have visibility, you can't understand what to protect'
AI inference just plays by different rules
Why no cloud storage architecture was designed for what agentic AI is about to demand
Silver Fox Springs Tax-Themed Attacks on Orgs in India, Russia
More than 1,600 socially engineered messages from the China-backed advanced persistent threat (APT) group target various sectors to deliver the previously undocumented ABCDoor back…
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control panels into kill switches, kern…
StarlingX 12.0 is right on time for mixed-hardware edge deployments
Keeping time across a distributed network is harder than it sounds. The OpenInfra Foundation is now out with StarlingX 12.0, and precision timing support is one of its headline add…
They don’t hack, they borrow: How fraudsters target credit unions
Fraudsters aren't hacking credit unions, they are exploiting normal business processes. Flare reveals how structured loan fraud methods use stolen identities to pass verification a…
Cisco nerds out: May the Fourth be with your AI assistant
Your local Cisco AI Assistant just got a little Jedi training. Cisco is looking to make the most of the unofficial Star Wars Day with a May the Fourth Be With You release of wha…
Cybersecurity M&A Roundup: 33 Deals Announced in April 2026
Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket. The post Cybersecurity M&A Roundup: 33 Deals Announced in April …
DigiCert Revokes Certificates After Support Portal Hack
Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal. The post DigiCert Revokes Certificates After Support …
Progress warns of critical MOVEit Automation auth bypass flaw
Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file transfer (MFT) application. [...]
Webinar: Why MSPs must rethink security and backup strategies
Security breaches don't just test your defenses—they test your recovery. Join Kaseya in our upcoming webinar to learn how MSPs strengthen resilience with SaaS backups and BCDR to s…
Memory shortage and cost surge push enterprises toward the cloud
Enterprises grappling with surging memory prices and constrained supply are increasingly turning to cloud infrastructure over on-premises deployments. Amazon CEO Andy Jassy flagged…
2026: The Year of AI-Assisted Attacks
On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young man had run malicious code to extract the personal data of ove…
Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
The China-based cybercrime group known as Silver Fox (aka Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne) has been linked to a new campaign targeting o…