Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
Officers unlawfully uploaded 179 people's details to Auror without required privacy checks or corporate approval
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artifi…
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for …
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurre…
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gate…
Jev and other decision models can still be tricked with prompt injection
Never making type errors does not mean never making errors
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026…
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Both Switchzilla and CISA sound the alarm
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on…
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Chaos ensues when AI interviewer meets AI interviewee
Things got weird, but there's a lesson to be learned: Don't trust a bot to negotiate for you
Linux kernel devs drop obligatory confession of AI tool usage
Torvalds says contributors must understand their code, whatever tools they use
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens…
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops …
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt
TCG086: Why Training AI to Have a Self Makes Governance Harder
John Capobianco returns to the show to discuss the latest developments in Model Context Protocol (MCP) and agentic infrastructure. John and host William Collins weigh in on the ong…
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory o…
NAN133: Beyond the Hype: The Realities of AI Infrastructure
Eric Chou speaks with Leo Fleskes on the pressing infrastructure challenges surrounding AI resource consumption, including data centers’ massive water and power demands. Together t…
Ultra Ethernet 1.1 extends the specification to scale-up networks and adds programmable congestion control
The Ultra Ethernet Consortium (UEC) is pushing forward to meet evolving networking needs with the release of UEC 1.1 on October 12. The UEC got its start in 2023 to help improv…
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove p…
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue …
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Vendor promises fix for separate privilege-escalation flaw in the coming weeks
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and…
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers and KVM devices as part of its ongoing efforts to disrupt North Korea's fraudulent …
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the under…
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software rele…
Leap seconds face judgment day as time lords prepare to vote
Proposal would let UTC drift an hour from Earth's rotation, sparing computer systems awkward adjustments for centuries