'Zealot' Shows What AI's Capable of in Staged Cloud Attack
The proof of concept revealed AI-based attacks unfold too fast for human defenders to respond, and that AI evinced more autonomous behavior than expected.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
Mongolian governmental institutions have emerged as the target of a previously undocumented China-aligned advanced persistent threat (APT) group tracked as GopherWhisper. "The grou…
Vercel Finds More Compromised Accounts in Context.ai-Linked Breach
Vercel on Wednesday revealed that it has identified an additional set of customer accounts that were compromised as part of a security incident that enabled unauthorized access to …
Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages
Apple has rolled out a software fix for iOS and iPadOS to address a Notification Services flaw that stored notifications marked for deletion on the device. The vulnerability, track…
Africa Relinquishes Cyberattack Lead to Latin America — For Now
The volume of cyberattacks targeting Africa declined in the past year, with weekly attacks down 22%, as attackers seemingly shifted their focus to other regions.
Anthropic's super-scary bug hunting model Mythos is shaping up to be a nothingburger
Hackpocalypse deferred
'The Gentlemen' Rapidly Rises to Ransomware Prominence
Not nearly as polite as the name suggests, the ransomware gang has impressed researchers with its speed in scaling up operations — and its sophistication.
TCG074: From SOAR to Agents: Why Practical Automation Has to Survive Contact with Real Infrastructure
Eyvonne Sharp and William Collins speak with Sif Baksh, Principal Solutions Architect at Tines, to discuss the power of automation. Sif shares some personal stories of how he has b…
NAN120: How Network Engineers Can Thrive in an AI-Driven World
Eric Chou is joined by Ashwin Joshi, a Senior Solutions Engineer at Keysight Technologies, to discuss the rapidly increasing demands that AI places on modern networks. They break d…
DPRK Fake Job Scams Self-Propagate in 'Contagious Interview'
A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other malware.
Electricity Is a Growing Area of Cyber-Risk
IT has long been concerned with ensuring systems receive the right amount of electricity. Cyberattackers are realizing they can manipulate voltage fluctuations for their purposes, …
NASA reckons the Artemis II heat shield performed like a champ
Good news for future missions as initial findings agree with agency's design decision
ICE Uses Graphite Spyware
ICE has admitted that it uses spyware from the Israeli company Graphite.
Ransomware Negotiator Pleads Guilty to BlackCat Scheme
A cautionary tale illustrates why the person negotiating should never be involved with any part of the ransom payment process.
Exploits Turn Windows Defender Into Attacker Tool
Three proof-of-concept exploits are being used in active attacks against Microsoft's built-in security platform; two are unpatched.
PP106: Architecting for Wi-Fi 7, Zero Trust, PQC, and More
For decades, network and security professionals have adapted to technology change in a piecemeal fashion: a new rule here, an upgrade there, a new product deployment over yonder. O…
Phone-to-satellite use goes into orbit, growing 25% in 8 months
Still only a tiny slice of mobile activity overall
Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk
The critical remote code execution flaw (CVE-2026-1731) in the remote monitoring and management tool can be exploited to spread ransomware and compromise supply chains.
HS130: Wait, AI Doesn’t Secure Itself? Developing an AI Security Strategy
Your enterprise better have a cybersecurity strategy for AI. But where to start? Everywhere! Securing AI means securing all the AI layers and throughout the lifecycle: data, model,…
_NicoElNino_Alamy.png?width=1280&auto=webp&quality=80&disable=upscale)
Google Fixes Critical RCE Flaw in AI-Based 'Antigravity' Tool
The prompt-injection vulnerability in the agentic AI product for filesystem operations was a sanitization issue that allowed for sandbox escape and arbitrary code execution.
‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert …
FAA grounds Blue Origin's New Glenn as it probes missed satellite delivery 'mishap'
One of two second stage engines misbehaved, administration must sign off report before flights resume
Chinese APT Targets Indian Banks, Korean Policy Circles
China is spying on India's financial sector, for some reason, and it's not putting much effort into it, judging by some stale TTPs.
Mexican Surveillance Company
Grupo Seguritech is a Mexican surveillance company that is expanding into the US.
NASA Inspector fears new spacesuits won’t be ready for Moon landing
Dud contracts, proprietary designs, and zero-experience supplier make for quite the mess
Vercel Employee's AI Tool Access Led to Data Breach
Stolen OAuth tokens, which are at the root of these breaches, "are the new attack surface, the new lateral movement," a researcher notes.
Serial-to-IP Devices Hide Thousands of Old & New Bugs
The OT devices that translate machine talk into Internet-speak are riddled with vulnerabilities and more frequently targeted for attacks, researchers say.
NB571: Linux Loads 7.0 with Network Upgrades; NetGear Routes Around FCC Ban, But How?
Take a Network Break! Our Red Alert covers a trio of vulnerabilities in Cisco ISE. On the news front, Cloudflare announces a private network offering for AI agents and a partnershi…
Linux 7.1 will have an optional new NTFS driver
Good news for those working with Windows, bad news for Paragon Software
You too can build a nuclear battery from junk you have lying around the house
It won't provide much juice, but its creator calls it a 'nanowatt nuclear power plant'