Five Eyes spooks warn AI means infosec incidents can become ‘major operational and financial crises’
Bosses told to step up and get cybersecurity right
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
India and China are home to 2.9 billion people – and together they bought just 13 million PCs in Q1
PLUS: Indian telco ponders broadband satellites; Samsung goes all-in on OpenAI; Vietnam centrally plans ten tech giants; and more!
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws
OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the Daybreak initiative the artificial intelligence (AI) company…
Sniff out stale AI override advice with this open source CLI
Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out
OpenAI: Yoo-hoo, look over here, we do that security stuff too!
A plethora of pwn-prevention, including a 'Patch The Planet' pledge
WhatsApp phishing attack uses fake business docs to hack PCs
An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, leading to remote system access. [...]
JaredFromSubway MEV bot hacked in $15 million crypto theft
The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $15 million loss after an attacker manipulated the opportunity-detection logic by creating fake cryptocu…
DifyTap Bugs Let Attackers 'Wiretap' AI Chat Histories
Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access and exfiltrate sensitive data.
FFmpeg fixes PixelSmash flaw in widely used video decoder
A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions, and can also trigger a denial-of-servic…
Dell launches AI server based on Nvidia Vera Rubin GPUs
Dell’s new high-end Nvidia-based server is a centerpiece for its integrated AI platform aimed at enterprise customers with major AI infrastructure plans. The Dell PowerEdge XE88…
Nvidia unveils Vera Rubin platform targeting AI, HPC infrastructure
Nvidia has formally launched the Vera Rubin platform, a combination CPU and GPU platform billed as a major step forward in the convergence of artificial intelligence and high-perfo…
Texas lassoes massive Microsoft datacenter - and 20 years of gas turbine emissions
The air turns brown when bit barns come to town … deep in the heart of Texas
What Bundesliga’s Captain tells us about AI-powered CX
The Bundesliga has long talked about turning “data into devotion,” and now it has an agentic AI companion in its official app that lets fans chat in natural language, access live s…
Cloudflare teams up with big browsers to help websites tell welcome from unwelcome visitors
Makers of Chrome, Edge, Firefox back bot-fraud defense called Private Access Control Tokens
FortiBleed campaign used custom FortiGate sniffer to steal credentials
Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets from compromised firewal…
Security shops among the 'hundreds' of Klue hack victims
As yet another extortion crew Icarus exploits Salesforce-linked integrations
Nvidia gets all agentic about supercomputing for scientific research
Tireless AI agents could help scientists do research humans alone can't, says GPU giant
ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and push bac…
The database that refused to die: How Postgres survived its own creators
From academic toss-aside to cloud substrate
Microsoft says Windows 11 26H2 is coming soon, details upgrade process
Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running Windows 11 24H2 and 25H2 will be able to upgrade using a small enablem…
NB580: Project Glasswing on Hold – or Not; Why You Should Hold In-Person Background Checks
Take a Network Break! Our Red Alert covers critical vulnerabilities found in OpenClaw, the open-source AI assistant. On the news front, we discuss the status of Anthropic’s Project…
Microsoft fixes AutoGen Studio flaw that enabled code execution
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on…
Ukraine puts its Russian war trophies online for allies to pick apart
TrophyLab bad for Vlad as battlefield losses spill the secrets they had
Inspired by musical greeting cards, DARPA demands tiny, cheap, self-modifying systems
One can't help but see a very clear instance of the triple constraint problem in action here
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow att…
Crypto Heist Fueled by Elaborate Fake Reputation-Boosting Campaign
Attackers are using multiple online channels — including GitHub, YouTube, and VirusTotal — to build an illusion of trust to spread a cross-platform clipboard hijacker.
The memory crisis is getting so bad that even retro RAM prices are going to the Moon
Some hardware firms redesigning products to use older DDR2 and DDR3 components
The new database world according to Google: Inexact queries and AI in everything
'Humans are not going to be using data platforms in the next three to five years,' product exec tells us
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send tr…
Canadian utility fesses up to data breach, but key details remain off-grid
London Hydro says names, addresses, account details may have been exposed, but much about the intrusion is unknown