AI Agent Breaches Spanish Organization, Modifies Personal Data
AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Microsoft fixes broken copy and paste for Excel 2016 users
Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5002914 security update. [...]
MIND Secures $72 Million for AI-Powered DLP
The company will use the funding to accelerate platform development and expand its presence in key enterprise markets. The post MIND Secures $72 Million for AI-Powered DLP appeared…
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky,…
Techie fixed Wi-Fi dead zone with a drill
When wires and wireless mix, the combination can be electric
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based threat actors and features an artificial intelligence (AI)-…
AI risks make some insurers wary of corporate liability
RAND wants better data to price machine-made mishaps, apocalypse not included
AWS confesses its console causes cloudy confusion for new users
Improved signup experience for ‘AI builders’ hides complexity and includes spending cap
USA’s Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech
Think tank points out that companies banned by Washington will help run the regime that Uncle Sam now controls
The amount of e-waste caused by AI is underestimated: we can’t only include the servers
When enterprise IT calculates the likely environmental and ROI impact from replacing data center systems, it fails to account for much of it, and also tends to discard hardware far…
Marvell pushes GlobalFoundries to light up wafer production
It might be the next trillion-dollar company, but it'll need some help on the supply side to do it
AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom
Plugin4Shell attack affects all the major coding agents, researchers say
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices. [...]
CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
The move is consistent with the agency's advice on the need for organizations to prioritize the vulnerabilities that actually matter.
Cisco patches max-severity ISE flaw, the second critical zero-day this week
Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is used for enterprise network acce…
Huawei's next-gen Ascend NPUs could become China's best option
960DT is set to arrive early, boasting performance far exceeding anything the West could offer the Middle Kingdom
DoE seeking fault-tolerant quantum computer ... by 2028
Entrants get $250K upfront to deliver a demo within a year, which sounds totally feasible given quantum computing's track record
Researchers find way to listen in on headphones from afar
Eve's dropping in on Alice and Bob
.jpg?width=720&quality=80&disable=upscale)
China's FamousSparrow APT Spies on US Politics in Latin America
Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.
OpenAI details more cases of AI agents taking unauthorized actions
OpenAI has presented new examples of what they call "AI model misalignment" from the past six months, including unauthorized file uploads, following self-generated instructions, hi…
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the networ…
IPB208: IPv6 Address Management Is Broken
Traditional IPAM and DDI tools struggle to handle IPv6 at scale because they were originally designed around IPv4. Today Ed and Tom examine the visibility challenges posed by SLAAC…
China's Salt Typhoon backdoors Latin American orgs with new snooping malware
Beware the SparroWocky, my son! The backdoor that bites…
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak login…
Brevo supply-chain attack injected ClickFix scripts on customer sites
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to dist…
Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran. The post Cyberattacks on Two Oil Tankers Prompt Coas…
Scientific papers become agentic chatbots with new tool
Why go through the hassle of reading a study for yourself when you can turn it into an AI agent and tell it to reproduce the analysis for you?
N4N064: A Gentle Introduction to Border Gateway Protocol (BGP)
Border Gateway Protocol (BGP), the routing protocol of the global internet, is finding uses in all sorts of places in 2026 beyond internet routing. It’s a huge topic. Large books …
OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training
OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior. The post OpenAI Says Its Models Searched GitHub for Leaked API…