_Pattara_Alamy.jpg?width=720&quality=80&disable=upscale)
AI Agents Are a New Kind of Identity — and Most Organizations Aren't Ready
If you're handling AI agents like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the …
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, …
AI tool scours the web for job openings, preps your resume and cover letter
Searching for work sucks; AI combs the internet and sucks it all up. Combine the two and let 'er rip with this Python project
OpenMandriva claims disgruntled admin trashed repos after community bust-up
Linux distro accuses former contributor of deleting years of work and pushing a package that could have broken installs
New Helix vishing group emerges in SharePoint data theft attacks
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to ste…
Microsoft expects more Windows security updates from AI-discovered flaws
Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its c…
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-…
SAP makes it easier for customers to shop for legacy product support, ending EU antitrust probe
Vendor drops reinstatement fees and caps back-maintenance charges ahead of the ECC support cliff
Outlook for Mac bug makes font choice a purely decorative feature
Monospaced code snippets among the reported casualties
EU 'Chat Control' snoopfest returns after vote to kill it falls short
Opponents won the count but missed the 360-seat threshold needed to stop the interim CSAM-scanning rule
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it. This week is …
QIZ Security Raises $17 Million for Cryptographic Governance Platform
The Israeli company has developed a cryptographic posture and post-quantum cryptography management platform. The post QIZ Security Raises $17 Million for Cryptographic Governance P…
KDE Plasma users face a dire omen of change: 6.6.6 arrives
6.7 is now current, and in 6.8 you're getting Wayland whether you like it or not
Canonical Managed Kubeflow lands on Azure
PARTNER CONTENT: Why platform teams are swapping DIY Kubeflow for Canonical's managed service
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with AI-…
As Global Conflicts Go Digital, Businesses Need Wartime Game Plans
The fate of a Ukrainian tax software company shows how modern cyber warfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to prote…
Brown says AI make student brain no work good, teacher should help use it better
Take-home midterm row sharpens fears that the tools are dulling minds and easing cheating
UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge
Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK. The post UK Government Rolls Out Agentic AI Defen…
The Hidden Security Risks of Reduced Summer IT Coverage
Security operations don't slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-driven automation can help organizations maintain consistent s…
UK.gov withholds £10M payment from Capita over pensions project fiasco, as dispute continues
After CEO promised 'flagship use-case' for AI, retired scheme members still struggling to make ends meet, MPs hear
Palo Alto Networks Patches 13 Vulnerabilities
Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software. The post Palo Alto Networks Patches 13 …
Microsoft closes book on Nightmare Eclipse's RoguePlanet zero-day
Weeks after the exploit code dropped, Redmond has finally ships a fix for the Defender zero-day
AI tie-in accelerates quantum usefulness, early adopters say
Quantum computers are still two to five years away from full-scale production, but early users like the Cleveland Clinic and Mitsubishi Chemical are already seeing benefits, partic…
Speedier type checks in TypeScript 7.0 as first stable Go release ships
10X faster build times could force Slack developers back to their keyboards
AI Gateways Offer Attackers the Keys to the Kingdom
A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) data.
Britain's cloud habit has become a billion-pound risk
24-hour outage in key AWS region could leave UK firms nursing massive losses, researchers claim
AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands…
12 Million Impacted by Data Breach at Japanese Telco KDDI
Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appear…
Microsoft to switch off OWA Light after nearly two decades
Nobody needs a simple web client for Exchange, do they?