Techie claims Trump Mobile website was leaking thousands of people's data
Customers' info potentially handed to anyone who could send an HTTP request
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Irish Rail writes down €50M after train IT project goes off the rails
State-owned operator loses confidence in delayed traffic management system as politicians compare Ireland’s latest public-sector IT fiasco to 'Groundhog Day'
BOFH: Vibe-coded solutions arrive for problems nobody has
The Boss gives common sense an AI wrapper
‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested
The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions. The post ‘First VPN’ Cybercrime Service Disrupted, Administrator Arre…
Burnham backlash: UK Digital ID plans in peril if Manchester mayor succeeds Starmer
He'll have to beat Nigel Farage in a Brexit-backing constituency first, though
US and Canada arrest and charge suspected Kimwolf botnet admin
U.S. and Canadian authorities arrested and charged a Canadian man with operating the KimWolf distributed denial-of-service (DDoS) botnet, which infected nearly two million devices …
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
The U.S. Department of Justice (DoJ) on Thursday announced the arrest of a Canadian man in connection with allegedly operating a distributed denial-of-service (DDoS) botnet known a…
xAI-Anthropic deal signals the rise of AI compute as a standalone business
New SpaceX IPO filings suggest frontier AI firms are beginning to treat compute infrastructure as a standalone commercial business, with Elon Musk’s xAI agreeing to provide large-s…
UK nuclear investors get 'high' returns for lower risk than consumers, who also foot the bill
Sizewell C could add £19 to yearly bills, spending watchdog says, but private investor may fail to keep costs down
TrendAI Patches Apex One Zero-Day Exploited in the Wild
CVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One. The post TrendAI Patches Apex One Zero-Day Exploited in the Wild appe…
Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack
Hackers accessed Grafana’s GitHub repositories after a token compromised in the TanStack attack was not rotated. The post Grafana Says Codebase and Other Data Stolen via TanStack S…
China's Webworm Uses Discord, Microsoft Graphs to Hack EU Governments
The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as a middleman between victim and attacker.
Marketing demanded IT add website feature that was already working
Techie regrets not taking credit for getting it done with amazing speed
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabili…
Cisco used AI to write security incident reports, with mixed results
You’ll need a lot of detailed prompts to get solid output - and even then it may have errors and typos
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data. Tracked …
Alibaba just admitted it’s struggling to keep up with rival chipmakers and AI shops
Reveals decent new homegrown accelerator and tiny production volumes
Dems slam Trump for making cybersecurity hold out the tin cup while splurging on ballroom and Jan. 6 'slush fund'
'Budgets are moral documents,' Rep. Delia Ramirez said
Critical vulnerability in Cisco Secure Workload rated at maximum severity
A critical vulnerability in the on-premises version of the Cisco Secure Workload security platform could allow a threat actor to obtain the privileges of a site admin, enabling the…
Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved million…
Google explains how it will infuse ads into AI answers
Just like in The Truman Show
How CISOs Should Prep for Agentic-Ready AI BOMs
Finding ways to document both component and execution attributes for AI bills of materials (AI BOMs).
Threat hunters find Google API keys still usable 23 minutes after deletion
Plenty of time for cyber crims to grab data or hit you with a giant bill
Google API Keys Remain Active After Deletion
A security researcher discovered the API keys can still be used for up to 23 minutes after deletion, even though the cloud provider claims deletion is immediate.
Npm registry sets stage for more secure package publishing
All the world's a stage, and all the packages are merely players
HackerOne takes an axe to its bug bounty rewards
Critical flaw payouts slashed by more than 75%
Cisco’s new certs are a wake-up call for AI-era network engineers
Cisco is reshaping its certification portfolio to reflect an AI-first world, with major updates to CCNA and CCIE that explicitly bake AI, automation, and “human skills” into the le…
Microsoft plans significant update to Windows Secure Boot
Microsoft is about to make a significant upgrade to its Secure Boot system, and if enterprise customers have not gotten started on the upgrade, they are already behind. Secure B…
Google accidentally exposed details of unfixed Chromium flaw
Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code exec…
Seattle Shield, an intelligence-sharing network operated by the Seattle police
Article URL: https://prismreports.org/2026/05/20/seattle-shield-private-companies-surveillance/ Comments URL: https://news.ycombinator.com/item?id=48226588 Points: 492 # Comments: …