UK school’s network left wide open for invasion, student found
And the admin password was right in the Active Directory description field
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Infosys boss says vibe coding is no threat because there’s more to writing software than writing software
Despite warnings of revenue deflation, chairman predicts AI will make more work, not less, for services orgs
Cisco SD-WAN Zero-Day Exploited Months Before Patching
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching. The post Cisco SD-WAN Zero-Day Exploited Months Befo…
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access
An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclose…
Nation-state actors cracked critical Australian infrastructure to ‘cripple it at a time of their choosing’
To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust
Micron locks in historically high memory prices for five years
Big buyers agree to deals that will deliver historically enormous margins and profits
Google releases new privacy controls for activity history, personalization
Google is rolling out new privacy controls for Search services and Google Play, giving you more control over saved history and personalized recommendations. [...]
Companies are not looking before they're leaping into the AI playpen
93% of organizations report infrastructure incidents attributable to AI
The hits keep on coming for Cisco vulnerabilities
CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought
DraftKings hacker 'Snoopy' sentenced to 18 months in prison
A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack. [...]
Qualcomm claims it's not too late for Dragonfly to land in datacenters
Oh, Snap(dragon): DC chief says the mobile-chip giant sees bit barns as its next growth market
Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access
New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targete…
Attackers Hit Cisco SD-WAN Flaw 2 Months Before Disclosure
Researchers believe rogue peering was used to connect to the victim's SD-WAN devices to gain admin privileges and root-level access.
Malicious Edge extension abuses Native Messaging as bridge to malware
A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. [...]
2026 FIFA World Cup Faces Surge in Cyber Threats
Persistent cybercrime, social engineering, and infrastructure threats continue to plague the FIFA 2026 World Cup across the US, Canada, and Mexico.
Qualcomm’s $3.9 billion purchase of Modular aims to change the data center dynamic
Qualcomm on Wednesday said that it will spend $3.9 billion to purchase AI-native software platform developer Modular Inc., a move that Qualcomm says will allow it to level the play…
Loop engineering, latest AI buzzword, still needs humans in the loop
Prompting less and automating more comes with a price
IBM, Red Hat, Palo Alto team to secure open-source software
IBM, its Red Hat subsidiary, and Palo Alto Networks are teaming up to help enterprises identify vulnerabilities in open-source software and deploy safeguards against threats, parti…
Do CISOs Need a Code of Ethics?
Dark Reading Confidential Episode 19: Kickbacks, no-show jobs, "dirty" VCs, and shelf ware — industry expert Robert "RSnake" Hansen explains why he thinks it's time for a CISO code…
OpenAI gets chippy with Broadcom
Jalapeño is the latest announcement that attempts to portray OpenAI as more than a race-to-the-bottom model maker
Break legacy lock-in: Strategic options for enterprises facing the vSphere 8 deadline
The acquisition of VMware by Broadcom has caused many enterprise IT leaders to reexamine their infrastructure strategies. For organizations running vSphere 8, the October 2027 end-…
D2DO305: Scaling Human Connection in Tech Communities
Kyler and Ned are joined by former AWS Community Program Manager Jason Dunn to discuss what it takes to build and maintain a thriving tech community. Jason shares his “benevolent d…
Microsoft uses AI to link two malware operations in racketeering suit
200+ C2 servers linked to StealC and Amadey shut down
When Information Becomes the Attack Surface – Understanding AI Agent Traps
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI. The post When Information Becomes the Attack S…
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, ur…
More Malicious OpenClaw Skills Threaten AI Supply Chain
OpenClaw removed five packages from its ClawHub skills marketplace that bypassed security checks even though they included infostealers and other threats.
Windows 11 turns five, leaving some important lessons for Microsoft
Maybe sometimes users know best
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered
A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of crimina…
Deno project is going to add cross-platform desktop apps in next major update
Feature is not yet stable, but will offer easy conversion of web applications
Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. The post Microsoft and Allies Smash Shared Infrastructure of A…