Clingy Virgin Media fined £28M for refusing to take the hint
Ofcom: Telco encouraged staff to drop calls and put customers on hold for no reason when they wanted to cancel
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agenci…
Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection
Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. The post Cri…
Another German state heads down the open source sovereignty road
Mecklenburg-Vorpommern ditches SharePoint while Bavaria also mulls Microsoft alternatives
CISA orders feds to prioritize patching Langflow auth bypass flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively exploited vulnerability in the Langflow visual framework fo…
Home Office's glitchy eVisa rollout lands UK privacy regulator in campaigners' crosshairs
Coalition says ICO failed to act despite hundreds of complaints about bug-plagued digital immigration status scheme
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking de…
NHS told to show its working on Palantir platform benefits
Campaigners say ministers repeated claims about FDP despite an admission that the data does not prove cause and effect
Ubiquiti warns of new max severity UniFi OS vulnerability
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks. [.…
State IDs for AI Agents: Will Estonia Set a Precedent?
The world's digital testing ground plans to help people use AI agents for government purposes.
AI's biggest challenge is not compute - it's data storage
SPONSORED FEATURE: As AI evolves from novelty to autonomy, the real bottleneck isn't processing power—it's where to put all that data.
CISA orders feds to patch max severity ColdFusion flaw by Friday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commer…
AI is becoming a bargain hunter's market, with a few luxury models on top
Inference is become a commodity except for frontier models
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has …
Media Over QUIC can scale real-time streaming and carry the world's vids
With the low latency of WebRTC and the scalability of DASH
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of activ…
Microsoft intros tech that rebuilds dead PCs without requiring local copies of Windows
No USB stick required if your Win 11 box has a pulse and a network driver
SpaceXAI wants to compete on AI infrastructure, not just AI models
SpaceX is best known for its outer space and rocket projects, while xAI has largely been focused on its flagship AI assistant, Grok. These are two very different paths, but now …
Accenture confirms breach after hacker offers stolen data for sale
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
Big Brand Jobs Scam Targets Marketing Pros' Google Accounts
The phishing campaign uses several tactics, including nested redirects, to evade detection and steal credentials from unsuspecting targets.
Windows is watching: Anti-piracy tool fingers Scattered Spider suspect
Along with other telemetry, Windows GDID makes online activity more traceable
Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft
Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.
Avoid AI atrophy – new tool promises to reverse vibe coding skills decay
Want big muscles? Keep working out. Want big coding skillsets? Flex your dev skills with the Atrophy CLI app before they wither away
Gartner: Data center electricity consumption to grow 26% in 2026
Power consumption worldwide for data centers is projected to grow to 565 terawatt hours (TWh) in 2026, up 26% from 447 TWh in 2025, with AI-oriented data centers taking up an incre…
GitHub AI agent leaks private repos when asked nicely
Per usual, there's no fix – or even any documentation – for GitLost
Chinese hackers develop LONGLEASH malware to expand ORB network
Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, pr…
South Korean chip startup FuriosaAI invades European datacenters
RNGD accelerators land in Equinix's Lisbon DCs
County Government Reportedly Paid $1 Million to Cyber Extortion Group
The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data. The post County Government Repor…
Hidden backdoor in Tenda router firmware grants admin access
A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device's web manag…
Critical Gitea Flaw Under Active Exploitation, Researchers Warn
Attackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets. The post…