Cisco searched for IOS XR bugs and found so many it rolled them into an update release
Three critical vulns demand your attention, one a make-me-root mess in Nexus 9000 Series Switches that you can mitigate, not fix
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
HPE’s record Q3: AI infrastructure, networking demands drive growth, but supply constraints tap the brakes
Demand for AI, networking, and servers drove HPE to a record quarter, the company reported during its third-quarter earnings call with financial analysts. “AI has become a multi…
OpenAI commits $1B in AI credits to frontline cyber defenders
Daybreak program brings subsidized models, training, and support to under-resourced teams
OpenAI throws Astra into the top-tier model ring
OpenAI slow-walks debut of delayed GPT-6, with Trusted Access Program participants getting first shot
Hugging Face is too important to fall into Nvidia's hands
$12.9 billion deal will inevitably cement Nvidia's market dominance and harm competition in the process. Regulators should take note
French hospital fined €500,000 after breach exposes data of 727,000
France's data protection authority (CNIL) has fined Hôpital privé de la Loire €500,000 ($580,000) for failing to adequately protect patients' and their relatives' data. [...]
Large Enterprises Targeted in Fake Merger & Acquisition Scams
Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers.
VMware Cloud Foundation 9.1 adds transit gateway flexibility, segmentation, and native EVPN VXLAN support
Software-defined networking (SDN) and virtual networking have long been part of VMware’s portfolio, notably with the NSX technology that’s a foundational part of VMware Cloud Found…
Coder's registry infrastructure compromised to push malicious modules
Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code. [...…
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the latest antics of ShinyHunters to new research about the preval…
HPE patches critical ArubaOS-CX remote code execution flaw
Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution. [...]
True AI-pocalypse as ChatGPT, Claude, and Grok all go down at once
All three are recovering from overlapping availability issues
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
A shared security 'Nightmare'
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” Why break in when someone might open the door? Th…
CERN moves thousands of accelerator control computers to Debian
Prompted by CentOS 8's premature demise, it's a very visible loss for the Red Hat ecosystem
IPB207: Flying Blind: Monitoring Might Not See IPv6
Is your current network monitoring infrastructure capable of seeing IPv6 traffic or are you flying blind in a dual-stack environment? Today Ed, Nick, and Tom explore the critical c…
N4N063: Link Layer Discovery Protocol
Ethan and Holly tackle the Link Layer Discovery Protocol (LLDP). They explain how this protocol helps network engineers map network topologies and validate wiring. They also discus…
Hugging Face CEO says 'planets aligned' for Nvidia deal, aims to reach 100M users
When the moon is in the seventh house...
What the AI Warning Letter Completely Missed
The recent open letter is right about the "window," but it omits naming who is coming through it or, critically, who will close it.
Audacity audio-editing app no longer looks like it's from the early 2000s
The FOSS tool for audio editing has a fresh coat of paint, and new features to boot
NASA wires up Dragonfly and names the landing area
Titan-bound rotorcraft set for launch in 2028
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute co…
Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed admin keys. The post Manchester Airpor…
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an underground marketplace commercializing acc…
Microsoft: KB5120998 mouse reset bug affects only non-English PCs
Microsoft says a known issue that reverts mouse settings after installing the KB5120998 August 2026 preview update affects only non-English Windows 11 systems. [...]
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
New models, trained using NVIDIA Nemotron 3 Ultra, aim to catch rogue agent behavior before it executes, without the latency of large-model review. The post Capsule Security Launch…
OpenAI confirms ChatGPT is down ahead of 'Astra' model launch
ChatGPT and Codex are experiencing a major outage, with users reporting errors across nearly every major ChatGPT feature. [...]
Anthropic confirms Claude is down, multiple models affected
Claude is experiencing an outage, with users encountering elevated errors when sending requests to multiple Anthropic AI models. [...]
Drowning in CVEs and thirsty for answers? Try CTEM
SPONSORED FEATURE: Boards want to know if they're less exposed than last quarter. Patching metrics aren't the solution
Critical Elementor Pro flaw exploited to take over WordPress sites
A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbit…