<span data-lab-italic_desktop="italic" class="italic m-italic">Reg</span> readers land on 'Binface' as name for UK space cleanup mission
Intergalactic Space Warrior, or a bin in orbit?
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Showing: ACTi
× Clear
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads t…
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrat…
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled …
Hyperscalers allow more scrutiny of controversial data center plans
Hyperscalers are getting decidedly twitchy about citizens’ reactions to their secretive data center construction plans, and are looking for ways to de-escalate some of the conflict…
Compromised TLS Certificates
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination…
UK threatens subsea cable saboteurs with 14 years behind bars
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm
N4N067: Level Up Your Home Network for Gaming
Thanks to a listener request, today’s episode talks about how to optimize your home network for gaming. Ethan and Holly discuss key factors such as latency, connection type, and ba…
Gartner forecasts 15% global IT spending growth, recaps top tech predictions
AI infrastructure and AI software will shape the next $1 trillion dollars in IT spending growth, according to Gartner. The research firm is anticipating a significant rise in AI-dr…
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, …
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation,…
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
D2DO316: Local AI Foundations
Ned Bellavance gets to be the guest on today’s show to discuss foundational AI knowledge, inference training, and running local models with Kyler Middleton. Together, they break do…
IT/OT convergence exposes skills gap. Cisco responds with new OT security certification
Cisco announced a new operational technology security certification designed to help network and security professionals develop the skills needed to secure industrial environments …
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive interna…
Cisco Expressway Series Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi…
Cisco Unified Communications Products Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie…
The Harness Is the Hard Part of Agentic Pentesting
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those a…
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, us…
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerab…
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm So…
Gartner’s top tech trends for 2027 expand—and constrain—AI capabilities
Gartner kicked off its IT Symposium/Xpo this week and unveiled its annual list of the top strategic technology trends that organizations need to explore in the coming year. AI s…
AI agents drive up telemetry costs, complicate network observability
AI agents are driving up telemetry costs and complicating network management as enterprises struggle to monitor the technology and control unexpected expenses, according to new res…
HW091: WLAN Pi – MCP & OS Updates
Keith Parsons and Nick Turner discuss the latest WLAN Pi OS updates including the integration of model context protocol (MCP) for AI agent interaction. They also discuss Wi-Fi 7 mu…
HS147: Architecting Infrastructure to Meet Your AI Ambitions (Sponsored)
Many a IT professional is having the AI football tossed to them, “We need to implement in house AI, go do it”. If this is you, what questions should you be asking of yourself and o…
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary c…
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity…
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
TNO077: From “Is It the Network?” to Continuous Assurance with NetBeez (Sponsored)
In this sponsored episode Scott is joined by Stefano Gridelli, cofounder and CEO of NetBeez, to discuss continuous network experience assurance and moving beyond reactive troublesh…
TCG086: Why Training AI to Have a Self Makes Governance Harder
John Capobianco returns to the show to discuss the latest developments in Model Context Protocol (MCP) and agentic infrastructure. John and host William Collins weigh in on the ong…