Aggregated from vendor advisories, security research, and industry publications.
Arista Networks has taken the unusual step of warning customers that next week, it will release multiple security advisories affecting Arista EOS and VeloCloud. AI-driven changes to its vulnerability detection processes have resulted in a higher-than-usual volume of security updates, the company says, and the advance notification is aimed at helping its customers plan. “We’re pre-announcing th…
New research suggests the coming Vulnpocalypse may not be so overwhelming for enterprise security teams — if they have the right strategies.
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. [...]
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.
Former cybercriminal Brett Johnson provides a look inside the mind of a threat actor and discusses where AI provides the most value for attackers.
The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent is uncertain. The post OpenLeash Adds a Human Che…
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control of affec…
Mark Zuckerberg argues that broadly distributed personal AI, or a “superintelligence” in his parlance, can increase prosperity and counter the risks of AI being controlled by a han…
I received the two emails below earlier in the month. They’re vaguely coherent. I suppose I shouldn’t be surprised that the corpus that AIs are training on contain data suggesting …
Eric Chou welcomes guest co-host William Collins as well as Network Automation Forum founders Scott Robohn and Chris Grundemann to discuss how their community emerged from a simple…
Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new …
The "Spring Ring" operation aims to compromise users of the collaboration suite to remotely access their sessions, spread malware, and even take over infrastructure.
An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. "The campaign has targeted users looking t…
Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks 'almost certain'
News of Broadcom’s plans to acquire VMware triggered concerns among customers, partners, and industry watchers, many of whom recalled Broadcom’s track record with prior high-profil…
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]
Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks intensify. The post UK Move…
Predictive text remains available, but users will have to invite it into their workflow
Instruments reactivated for a final hurrah before reentry
Don't disable automatic updates if the pace is too much – that's what ESR is for
Cloud storage biz severs old integration and urges victims to reset credentials
Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on…
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments, from reducing exposure …
Exeunt zVault stage right; enter FreeCORE and BSDnas
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educ…
Matt Clifford plans to keep role as ARIA chair while leading the LLM maker's dealings with governments outside North America
Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtual…
Photonics startups like iPronics are raking in hundreds of millions in funding to make optical circuit switches faster, denser, and cheaper
The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products. The post Rockwell Automation Patches Over a Dozen Vu…
Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs. [...…