Ex-FTC boss Khan urges Uncle Sam to break out the handcuffs for AI CEOs, citing 1934 precedent
There are plenty of laws on the books to hold companies, and potentially their execs, accountable
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's …
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-f…
Ubuntu Noble's likely last point release lands, then loses its desktop download
Installer bug crashes extended setups while Stonking Stingray circles ahead of October debut
Anthropic CEO: Time to Shift From Improving to Controlling AI
Dario Amodei says it's time to slow the pace of frontier AI improvements so that security and risk prevention efforts can catch up. What does this mean for enterprises?
Arm expands AI chip push with Neoverse CSS N4 and AGI CPU
Arm is expanding its push into AI data center infrastructure, introducing its most configurable Neoverse Compute Subsystem to date while highlighting growing industry adoption of i…
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte…
Cisco Secure Email Gateway SQL Injection Vulnerability
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with roo…
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. [...]
Using AI for Weapons Development
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this: We identified a cell …
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it f…
Cyberattack sends International Meteor Organization crashing back to Earth
Attack dealt a 'critical blow' to aging infrastructure, with several weeks of disruption expected
NB591: Altera Adds PQC to FPGAs; Europe Spend Billions to Boost Satellite Broadband
Take a Network Break! Ivanti takes center stage with a red alert on four critical CVEs in its Neuron platform, and MikroTik also gets a mention for an actively exploited flaw in it…
Rocket Lab calls foul on Blue Origin's $700M Mars comms contract
Bezos' biz gets familiar paperwork from unfamiliar quarters as rival challenges NASA award
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own.…
Perfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together on AI. The post Beijing Hits Back at Anthropic CEO’…
Why Patch Automation Needs Brakes, Not Just an Accelerator
Patch automation can help IT teams keep pace with growing update volumes, but deploying faster also means bad updates can spread faster. Action1 explains how update rings, predefin…
Teravolt looks to cannibalize older industries to meet AI power demand
Bitcoin farms, aluminum smelters, and other old infra is more lucrative to repurpose as a datacenter
New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate
Concerns over the potential risks of the technology are rising as new AI models become more powerful, heightening both the potential for misuse by people with criminal aims. The po…
Personal, Financial Info Exposed in Revolut Data Breach
The company unintentionally disclosed users’ information to a third party impersonating a government agency. The post Personal, Financial Info Exposed in Revolut Data Breach appear…
Microsoft patches Windows and Excel – breaks audio, remote access, and paste
Redmond's quality drive takes another detour through the known issues list
The Race to Control AI and Protect What Makes Us Human
As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that defines our humanity. The post The Race to Contro…
OpenAI bots knew about the RubyGems caching vulnerability
Article URL: https://tenderlovemaking.com/2026/09/11/what-a-time-to-be-alive/ Comments URL: https://news.ycombinator.com/item?id=49695876 Points: 512 # Comments: 424
Huawei pitches near-packaged optics as co-packaged costs bite
7.2 Tbps module arrives ahead of standards, with promises of fewer repair headaches
Webinar: How malicious OAuth apps can lead to Google Workspace breaches
Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines…
MPs and peers tell UK to stop winging it on AI regulation
Rights committee demands watchdog with teeth as patchwork safeguards leave victims hunting for remedies
AI Changed the Exposure Problem. Validation Needs to Change With It.
There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and h…
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hackers Exploit Critical Tencent Software Flaw for One…
Revolut falls for fake government requests, hands over customer data
Passports, selfies, transaction histories exposed as self-proclaimed culprits demand 10,000 Bitcoin