Apple takes over Swift Package Index, vows to remove GitHub dependency
SPI co-creator Dave Verwer joins Apple, says 'We will be moving away from that model completely'
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Amazon pours another $13B into India's AI and cloud infrastructure
Mumbai and Hyderabad datacenter expansion forms part of broader $48B five-year investment pledge
Runlayer Raises $30 Million in Series A Funding
The startup’s platform functions as a secure control layer, aiming to secure AI tools across enterprises. The post Runlayer Raises $30 Million in Series A Funding appeared first on…
European Commission lines up Amazon and Microsoft for cloud gatekeeper status
Preliminary position calls for designation under the Digital Markets Act
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old creds still working, trusted apps doing sketchy c…
Webinar: Why account takeovers remain one of the hardest threats to stop
Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trusted services. This webinar explores how behavioral…
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala. The post Cal Water Says No OT Systems Breached in Iranian Han…
Collabora releases CODE 26.04 as rivalry between FOSS cloudy office suites heats up
Now with Markdown support and smarter formula error handling – plus integrated AI, though it's off by default
Interesting Paper Exploring Prompt Injection
This is a fascinating explotation of how LLMs fall for prompt injection attacks. It turns out that they learn to recognize the style of text in different role/instruction blocks, a…
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project. The post Lantronix Serial-to-IP Converter Flaw Ex…
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR
Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions during incident investigation: What happened? What…
GitLab Patches Code Execution, Information Disclosure Vulnerabilities
The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects. The post GitLab Patches Code Execution, Information Disclosure Vulnerabilities ap…
ZTE builds a TCO-optimal AI factory to fuel token economy
PARTNER CONTENT: Leveraging OEX architecture SuperPODs and multi-dimensional co-design to maximize tokens per second and lower total cost of ownership for scaled inference
Elastic stretches workforce 7% thinner as AI does more of the heavy lifting
CEO says automation is enabling leaner teams as engineering is split into three core areas
ZTE CDO Cui Li at MWC Shanghai 2026: unlocking value and embracing uncertainty in the AI era
PARTNER CONTENT: Embracing uncertainty with flexible architecture, ZTE drives full-stack AI value across telecom, enterprises, and smart homes at MWC Shanghai 2026
ZTE showcases full-stack AI capabilities at MWC Shanghai 2026, empowering new era of token operations
PARTNER CONTENT: Driving end-to-end synergy across AI factories, next-gen AIOS, and 6G-ready networks to maximize token efficiency and lower operational costs
IBM stacks up a sub-nanometer chip future
Big Blue shows off process node it claims can scale down to 1 Angstrom
Europe Evolves Into Ransomware's Favorite Region
After a global lull, ransomware gangs are setting sights on a rich new arena: attacking EU organizations and their suppliers.
25-Year-Old Vulnerability Patched in Curl
The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities. The post 25-Year-Old Vulnerability Patched in Curl appeared first on S…
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to trick a malware analyst's artificial intel…
Digital ID brain trust will meet behind closed doors as minister ducks cost questions
Minutes will not be published, and MPs still have no answer on the group's budget or how its members were chosen
SecurityWeek ICS Cybersecurity Conference Heads to Nashville for Special 25-Year Anniversary Edition
The 2026 Industrial Control Systems (ICS) Cybersecurity Conference takes place October 6-8, 2026, at the W Nashville. The post SecurityWeek ICS Cybersecurity Conference Heads to Na…
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
A new, stealthy backdoor named Mistic has been deployed as part of suspected financially motivated attacks aimed at multiple organizations spanning insurance, education, IT, and pr…
NIST Opens Updated IoT Security Guidance to Public Review
The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks. The post NIST Opens Updated IoT Security Guidance to P…
Salyut 5 at 50: The Soviet space station that sickened one crew and nearly drowned another
The last inhabited Almaz outpost was short-lived, secretive, and remarkably accident-prone
The CPU's growing role in agentic AI infrastructure
PARTNER CONTENT: As agentic AI systems scale across cloud and datacenter environments, CPUs remain the control plane coordinating performance and efficiency.
Chrome 149 Update Resolves 18 Severe Vulnerabilities
More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution. The post Chrome 149 Update Resolves 18 Severe Vulnerabilities appeared f…
UK school’s network left wide open for invasion, student found
And the admin password was right in the Active Directory description field
Infosys boss says vibe coding is no threat because there’s more to writing software than writing software
Despite warnings of revenue deflation, chairman predicts AI will make more work, not less, for services orgs
Cisco SD-WAN Zero-Day Exploited Months Before Patching
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching. The post Cisco SD-WAN Zero-Day Exploited Months Befo…