Someone's attacking a critical 0-day RCE in F5 BIG-IP APM
Good news: there's a patch. Bad news: both CISA and F5 warn that it's under active exploitation
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized…
Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios
The idea that AI could break away and work toward its own agenda is looking increasingly plausible to researchers and experts. The post Worries About an AI Internet Takeover Gain N…
Discordians now subject to whims of new age verification technology
Discord users asked to prove they’re adults get less intrusive options
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can …
Robot dog ran a marathon on one charge and lived to publish the paper
Two years later, creators explain how lightweight hardware and reinforcement learning helped it go the distance
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. [...]
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed auth…
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks
The United Arab Emirates and Kingdom of Saudi Arabia together absorbed 50% of all cyberattacks recorded across the Gulf region in the first half of 2026.
An Epyc trip to Venice: Everything we do and don't know about AMD's 256-core monster chip
16 channels of DDR5, 5 GHz clock speeds, and support for CXL 3.1 memory god boxes? What's not to like?
D2DO314: Backups SaaS – Safety as a Service
Ned and Kyler talk with Jim Jones about data protection, backups, and security in the age of hybrid cloud and AI. They explore the operational challenges of integrating automated A…
Radicle: Disclosure of Vulnerability in the Network Protocol
Article URL: https://radicle.dev/2026/09/23/disclosure-of-vulnerability-in-network-protocol Comments URL: https://news.ycombinator.com/item?id=49817524 Points: 154 # Comments: 58
Thoughts return to forbidden RAM upgrades as Raspberry Pi OS gets fresh lick of paint
New dock and app launcher arrive while soaring memory prices revive scrutiny of a two-year-old firmware restriction
Academic publisher Elsevier hit by LAPSUS$ redirect attack
Customers got crime crew's calling card instead of access to journals
Closing the observability gap for the AI-ready enterprise
SPONSORED FEATURE: Why AI-driven operations need a data-rich view of the network
Selector brings Git-based workflows and incident replay to network AI agents
Network operations teams are being asked to hand real decisions to AI agents. Trusting an agent enough to let it act in production is a different problem than building one. Soft…
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign
Threat actors are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.
InfraTrust report warns network management systems under attack
Attackers are increasingly targeting the management systems used to control enterprise infrastructure, with several critical vulnerabilities actively exploited before or shortly af…
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can…
How One Kubernetes YAML Can Hand Over a GCP Organization
A Kubernetes user with limited permissions can potentially gain control of an entire Google Cloud organization by exploiting the authority granted to Google Kubernetes Config Conne…
The more Americans hear about datacenters, the less they like them
Pew finds growing concern over their effects on energy bills, the environment, and nearby communities
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based …
80% of network pros are OK with giving AI an autonomous role in network operations
Network professionals are pinning their hopes on artificial intelligence to deliver them relief from an uptick in network complexity that is only getting worse, in no small part du…
A 1980s PDP-11 is still running Unix – and now you can watch
Yeah, you'd like that, wouldn't you?
Inside Buffalo’s Highmark Stadium: How the Bills and Cisco built one network to run an entire venue, and what IT leaders can learn from it
When the Buffalo Bills opened their new home, Highmark Stadium, for their first regular-season game against the Detroit Lions, most fans noticed the new seats, sightlines, and soun…
Arista patches actively exploited VeloCloud Orchestrator zero-day
Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare
Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature. The post Honeywell: OT Security Teams Embrace AI, but Autonomy…
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22. A…
British regulator takes a hard look at Pornhub's Apple-powered age checks
Regulator wants to know whether parent Aylo did its homework before reopening the door to UK iPhone users