Aggregated from vendor advisories, security research, and industry publications.
News of Broadcom’s plans to acquire VMware triggered concerns among customers, partners, and industry watchers, and the $60 billion Broadcom-VMware deal—finalized in late 2023—ultimately led to some layoffs, VMware licensing changes, production rationalizations, shifts to the partner program, and multiple lawsuits. Broadcom has made moves to placate enterprises that are unhappy with its VMware …
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]
Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks intensify. The post UK Move…
Predictive text remains available, but users will have to invite it into their workflow
Instruments reactivated for a final hurrah before reentry
Don't disable automatic updates if the pace is too much – that's what ESR is for
Cloud storage biz severs old integration and urges victims to reset credentials
Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on…
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments, from reducing exposure …
Exeunt zVault stage right; enter FreeCORE and BSDnas
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educ…
Matt Clifford plans to keep role as ARIA chair while leading the LLM maker's dealings with governments outside North America
Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtual…
Photonics startups like iPronics are raking in hundreds of millions in funding to make optical circuit switches faster, denser, and cheaper
The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products. The post Rockwell Automation Patches Over a Dozen Vu…
Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs. [...…
Installing an AI gaming package offers relief while custom cursors suffer a separate reset
Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-speaking users through a fake television-streaming ca…
The security defect allows remote attackers to bypass authentication through argument bearer manipulation. The post Exploit Published for Fresh Cleo Harmony Vulnerability appeared …
The budget was minimal, FedEx was the bottleneck, and DNS was of course the source of trouble
Anthropic introduced Enterprise Frontier Safeguards (EFS), a system that combines zero data retention with automated monitoring for misuse. The post Anthropic Details Response to S…
Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The post Malicious Virtualizor Update Served via BGP H…
The debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across every function while meeting board-level pressure to …
Mobile signal below ground beats the citywide average, Ookla says
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attac…
Startups invited to tackle NHS, defense, compute, and agent security challenges while Whitehall's own adoption remains patchy
The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems. The post OpenAI’s Astra Crosses ‘Critical’ Cyber…
Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate Google search links. [...]
Comcast has added motion detection as a feature to its wireless routers: The feature sends push notifications to users when motion is detected near a connected device, such as a TV…
Japanese supplier remains in place despite scrutiny over its Horizon role