Apple adds AI smarts to Voice Control, VoiceOver and Magnifier ahead of Accessibility Day
Natural language commands and better image descriptions but Mac users and dictation fans may still be waiting
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Socket Raises $60 Million at $1 Billion Valuation
The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion. The post Socket Raises $60 Million at $1 Billion Valuation appe…
Microsoft storms RAMPART, adds Clarity to agentic AI safety
Redmond open sources two tools for building and maintaining safer agents
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automatically. Standard AWS …
Think tank to UK government: You can't build the future on systems from the past
Legacy IT is getting worse, not better, and could trip up Whitehall's shiny digital plans, report warns
Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days
The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition. The post Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Da…
Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI
More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’. The post Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI …
UK.gov hikes health AI tender by 400% – and hundreds of millions – after a chat with suppliers
Maximum framework value sky-rockets from £150M to £600M after 'an extensive intelligence gathering exercise'
UK’s Education Committee: Social media ban a must to save children’s mental health
Committee says tech companies are failing children and cannot be trusted to self-regulate
Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility
New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is largely lacking. The post Supply Chain Security Crisis: To…
Shifting Budget Dynamics for Identity Security and AI Agents
AI agent projects are proliferating throughout the enterprise, and those AI agent identities require management, security, and governance. New Omdia research shows the AI agent ide…
Microsoft warns of new Defender zero-days exploited in attacks
On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that have been exploited in zero-day attacks. [...]
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros
Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained undetected for nine years. The vulnerability, tracked as CVE-2026-46333 (CVSS…
Zombie user account let hackers control the city’s water
Failing to disable a former employee’s account was a huge mistake
GitHub links repo breach to TanStack npm supply-chain attack
GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm …
Open Compute urges local government to bask in the warm glow of excess datacenter heat
Org that represents Meta, Google and Microsoft plans more heat reuse guidelines as debate over bit barn social license burns red hot
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned version of the Nx Co…
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
Drupal has released security updates for a "highly critical" security vulnerability in Drupal Core that could be exploited by attackers to achieve remote code execution, privilege …
SpaceX pitches itself as integrated interplanetary proto-monopolist in IPO filing
Aims for the stars while burning cash and blowing deadlines on Earth
GPU behemoth Nvidia on track to be world's leading CPU supplier too, says CFO
GPUzilla forecasts $20 billion in CPU revenues this year
AMD says its $4K Ryzen AI Halo workstation practically pays for itself
If you spend at least eight hours a day vibe coding that is
Intuit axes 3,000 – without blaming AI
'Margin expansion' and a 'faster, leaner' company are CEO Sasan Goodarzi's goals
AI code accelerates production failures and spending, study finds
CloudBees survey exposes verification gap
Ukraine identifies infostealer operator tied to 28,000 stolen accounts
The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targ…
Hackers bypass SonicWall VPN MFA due to incomplete patching
Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks. [...]
Cyber Pros Can't Decide If AI Is a Good or a Bad Thing
There is nothing cybersecurity professionals are more excited about, and nothing they fear more, than AI.
GitHub Confirms Breach, 4K Internal Repos Stolen
GitHub confirmed a data breach this week involving the theft of thousands of developer code repositories. One threat actor — TeamPCP — took credit.
NAN123: How ION Meets the Out-of-this-World Challenges of Deep-Space Networking
Eric Chou and guest host Drew Conry-Murray sit down with deep space networking specialist Scott Spicer. Following the Artemis 2 mission, they discuss the challenges of long-delay s…
TCG076: Packet Pushers Assemble! Bridging the Telemetry Divide
Today our Packet Pushers team assembles to discuss whether the grass is greener on the NetOps or DevOps side of the telemetry fence. William of The Cloud Gambit, Scott of Total Net…
Fake Android Apps Commit Carrier Billing Fraud for Premium Services
The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.