Aggregated from vendor advisories, security research, and industry publications.
OpenAI has disclosed that two of its employee devices in its corporate environment were impacted via the Mini Shai-Hulud supply chain attack on TanStack, but noted that no user data, production systems, or intellectual property were compromised or modified in an unauthorized manner. "Upon identification of the malicious activity, we worked quickly to investigate, contain, and take steps to
Comms watchdog says Musk's social media platform will now review reports of illegal hate and terror content within 24 hours... on average
Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories. The post OpenAI Hit by TanStack Supply Chain Attack appeared …
AI-integrated networks can cut costs, boost 5G efficiency, and help regional telcos shift beyond basic connectivity
Attackers stole a limited amount of internal credential material after malware hidden in poisoned packages reached two staff machines
3 things you need to know about digital twins > With AI training racks exceeding 30 kW and specialized systems spiking to 150 kW per rack, digital twins can help prevent thermal …
7,000 5G sites added in eight months, and now serve 73 million subscribers on Indonesia’s first blanket 5G network.
The hacking group is encouraging miscreants to use the code in supply chain attacks, promising monetary rewards. The post TeamPCP Ups the Game, Releases Shai-Hulud Worm’s Source Co…
72 Boxer-mounted RCH 155s due from 2028 as Britain fills the gap left by AS-90s sent to Ukraine
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site s…
Whitehall says the AI assistant will help citizens navigate public services faster; others may see it as a cheaper alternative to answering the phone
Parliamentary committee tells ministers online safety regime is failing children and warns 'no action is not an option'
The refresh resolves critical-severity use-after-free and other types of bugs in various browser components. The post Chrome 148 Update Patches Critical Vulnerabilities appeared fi…
Lazy weekend of Grand Prix fun turned into a terrifying all-nighter
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616. The post Cisco Patches Another SD-WAN Zero-D…
Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The vulnerability…
Manages to get its hands on some Mac Studio machines before the OpenClaw machine grabs them
The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited …
As a senior policymaker ponders whether all South Koreans should enjoy an ‘AI dividend’
A Taiwanese student experimenting with software-defined radio technology shut down three bullet trains for nearly an hour, leading to an anti-terrorism response.
Here's a look at the tech powering the first big IPO of 2026
The TeamPCP hacker group is threatening to leak source code from the Mistral AI project unless a buyer is found for the data. [...]
Other than Instructure execs - maybe?
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. [...]
_Futuristic_overlay_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale)
The acquisition looks to boost visibility into third-party ecosystems, which are becoming a bigger concern as vectors for supply chain attacks.
60% of evaluated AI Scribe systems mixed up prescribed drugs in patient notes, auditors say
This is the second time this year a threat actor has leveraged a CVSS 10.0 vulnerability in Cisco's network control system.
The House Committee on Homeland Security sent a letter about the Canvas cyberattack, the same day that the edtech company said it reached an "agreement" with the ShinyHunters cyber…
Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers…
Limits Claude subscriptions to interactive use