AI girlfriend review site's secrets were exposed to the world for three weeks
Even testing and staging sites need protection from prying eyes
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Google forces Android apps to use memory more wisely as RAMpocalypse rages
No one can afford RAM anymore, so we're requiring devs to mind memory usage
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of …
LIU021: Justin Ryburn – The Road More Traveled with a Field CTO
Kevin and Alexis welcome Justin Ryburn, VP of Global Solution Engineering and Field CTO at Kentik, to discuss the realities of traveling for technical work. Justin explains the nua…
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026
This installment of the Reporters' Notebook video series discusses the topics that dominated the cybersecurity conference, such as AI's effects on vulnerability reporting and secur…
Omarchy distro gains serious backing
Polarizing opinions while tech heavyweights put up $10M
PaperCut warns of NG, MF flaw exploited in zero-day attacks
PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. [...]
Hugging Face offers $399 robot duck to help you quack the AI code
Microduck from Pollen Robotics runs on open source software, is just 25cm tall, and is ready to play out of the box
Manchester Airports Group says hackers stole travelers' data
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airpo…
ATF responds to 'major' cybersecurity incident after ransomware gang's claims
US Justice Department investigating the breach
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execut…
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets str…
On-device translation: Why smaller, specialized AI models win
The obsession with “bigger is better” AI has led many consumers to assume that more parameters mean better performance. This isn’t always true, particularly for specific use cases.…
Schrödinger's backup: not actually recovered until you try to restore IT
SPONSORED FEATURE: Verify and survive: your backup isn't real 'til you test it
Nitter might be no more, but Twitter is back (sort of)
Twitter.now aims to fill the bird-shaped hole left by X. For a fee
Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns. The post Trump Order Aims to Block Foreign Backdoors in US P…
Kyndryl, Broadcom expand partnership to push private clouds for AI work
Kyndryl and Broadcom on Thursday rolled out new consulting services for VMware Cloud Foundation (VCF), tweaking the initiative to be an AI program and pledging to invest in the ski…
How Threat Research and MDR Help SMBs Build a Defensive Edge
Threat research gives security teams insight into how attackers operate, while MDR turns that intelligence into faster detection and response. ESET explains how combining threat in…
Android 17 adds ECH support to make web browsing harder to track
Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users' home netw…
Salesforce boasts: 50% of bookings were from 'customers refilling the tank... they consume Flex Credits, they want more'
As SaaS giant gets a boost from Claudeforce, users might want to know how their AI use will be monetized
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that …
Australia arrests alleged TeamPCP hackers behind supply-chain attacks
Australian authorities have arrested and charged two young men accused of being part of the TeamPCP hacking group linked to a string of far-reaching developer supply chain attacks.…
Cybercrooks jet off with Manchester Airports Group customer data
UK’s largest airport operator believes 8.7 million customers affected
Australia Arrests 2 Alleged TeamPCP Hackers
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison. The post Australia Arrests 2 Alleged TeamPCP Hackers ap…
HP has a solution to expensive AI tokens: Buy a more expensive PC
Rising cloud AI costs are pushing workloads onto pricier PCs – which just happen to be better for PC maker's margins
Microsoft rolls out fix for Windows 11 crashes, gaming issues
Microsoft has started rolling out a permanent fix for a known issue that causes system crashes and gaming issues on Windows 11 devices. [...]
Webinar: How Google Workspace breaches happen and what to do next
Google Workspace breaches can begin with social engineering or forgotten third-party integrations rather than sophisticated exploits. This webinar examines real-world breaches, wha…
Kubernetes 1.37 advances workload-aware scheduling and cluster networking
When the open-source Kubernetes cloud-native project got started more than a decade ago, AI was not a major concern. Times have changed. Kubernetes 1.37 is now out, extending it…
OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack
New training environments will teach AI models to distrust instructions arriving from other agents outside sanctioned channels. The post OpenAI Agents Coordinated via Makeshift Mes…
Learn How to Build Security Operations Ready for AI-Powered Attacks
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attacker…