Instructure Breach Exposes Schools' Vendor Dependence
ShinyHunters' attack on Instructure, which owns the widely used Canvas learning management system (LMS), carries big questions about the trust educational institutions put into their vendors.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Lumen advances cloud networking vision with $475M Alkira buy
Lumen Technologies has agreed to acquire Alkira, a cloud-native network-as-a-service (NaaS) platform, for $475 million in cash. The deal targets a coverage gap that has defined…
Young evil genius forces hamster to run on wheel to power his gadgets
Okay, the rodent was a willing participant - after all, who turns down treats for a spin that charges a phone?
Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist…
Claude hitches ride on SpaceX's datacenter capacity
Compute from Colossus leads to relaxed limits
HPE bolsters autonomous network operations for Mist, Aruba Central
HPE is adding autonomous networking capabilities to its Mist and Aruba Central packages to enable those systems to detect, diagnose, and resolve issues in real time without human i…
Musk has never built a wafer fab, but he wants to burn $119B on one anyway
Initial phases of SpaceX's Terafab project in rural Texas are expected to cost about 1.25 Twitters
Critical vm2 sandbox bug lets attackers execute code on hosts
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system. [...]
Arctic Wolf kicks 250 employees out of the pack to save money for AI
Cuts appear to hit sales, product, and marketing, accounting for under 10% of staff
New Cisco DoS flaw requires manual reboot to revive devices
Cisco patched a Crosswork Network Controller and Network Services Orchestrator denial-of-service vulnerability that requires manually rebooting targeted systems for recovery. [...]
1 in 8 employees totally cool with selling work credentials
13% say they’ve sold logins or know someone who has, survey suggests
Netskope launches AI agents for SOC and NOC automation
Netskope this week introduced an AI-driven platform layer to ease the operational burden on security and network operations, as enterprises struggle to manage alert volumes and inf…
Mars rover hits rocky snag with power tool
All driller, no filler
NAN121: Simplifying Network Automation with NetGru
Eric Chou talks with Adrian Iliesiu aka NetGru, a seasoned CCIE veteran and community leader known for his work to simplify network automation and make it accessible to network eng…
Intel, behind in AI chips, bets on quantum and neuromorphic processors
Intel for years chopped critical products including CPUs, GPUs and networking gear to cut corporate fat and get back into shape. Many cuts pre-date the appointment last year of …
TCG075: Say the Thing: How the Network Automation Conference Circuit Shaped One SP Operator’s Voice
Eyvonne and William sit down with Joseph Nicholson, a Network Operations Engineer with NTT DATA, to share how public speaking transformed his career and technical experience. Josep…
We've only gone and done it: Changed what you're used to
A new coat of paint
DRAM drought to dog AMD's chips this year
Commercial PC demand expected to cushion broader slowdown
DAEMON Tools devs confirm breach, release malware-free version
Disc Soft Limited, the maker of DAEMON Tools Lite, confirmed that the software had been trojanized in a supply chain attack and released a new, malware-free version. [...]
Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affec…
Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability
A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this v…
Cisco Identity Services Engine Authentication Bypass Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to bypass authorization mechanisms or examine error messages to gain access to sensit…
Cisco Prime Infrastructure Information Disclosure Vulnerability
A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. …
Cisco Slido Insecure Direct Object Reference Vulnerability
A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results…
Cisco IoT Field Network Director Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco IoT Field Network Director Software could allow an authenticated, remote attacker to access files, execute c…
Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory
Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator (…
Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switches (SG350X) fi…
Iran cybersnoops still LARPing as ransomware crooks in espionage ops
MOIS-linked cyber outfit puts on a ransomware show to disguise the wide-open backdoor behind the scenes
AI layoffs backfire as cutting staff doesn't cut it, firms warned
Replacing meatbags with failure prone agents isn't the gold mine some CEOs hoped for
Autonomous Offensive Security Firm XBOW Raises $35 Million
The company raised another $35 million as an extension to its previously announced Series C funding round. The post Autonomous Offensive Security Firm XBOW Raises $35 Million appea…