Unexpected item in the bagging area as Windows Activation error pops up at check-in
Bags weighed down by a Microsoft license key
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Ruby on Rails Patches Critical Vulnerability
The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerab…
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform det…
A deep dive into Nvidia's Vera CPU and the Olympus cores that power it
88 custom cores, 176 funky threads, 1.5 TB of laptop RAM, and 1.8 TB/s of NVLink connectivity — this isn't your typical datacenter chip
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result i…
Enterprise cloud infrastructure uptake shows no sign of slowing
Cloud revenue now north of $143 billion a quarter, and growth is accelerating
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystr…
Amgen says cloud data breach exposed patient health, proprietary info
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-part…
Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]
Online ad firm Adform’s script compromised to steal cryptocurrency
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to…
Friday Squid Blogging: Squid Helps Discover New Marine Species
The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid, which uses lasers to…
Dev who gave HashiCorp its name returns with a faster terminal multiplexer
Persistent sessions could be just the beginning
OpenAI says its new GPT 5.6 models are becoming more cost-efficient
OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna's API price by 80% and Terra's by 20% as it works to make its models more efficient. [...]
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Ky…
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
A couple dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
Hacker uses DeepSeek AI to autonomously attack vulnerable servers
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement…
TNO067: The Impact of AI on Internet Traffic
Scott Robohn sits down with guests Lenny Giuliano and Russ White to examine whether generative AI will affect internet traffic patterns. Together they explore the role of CDNs, the…
Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5…
Groundcover raises $100M as observability pivots from monitoring to AI infrastructure
Observability spent most of the past decade as a post-production discipline, catching outages and cutting the time engineers need to find a root cause. That focus is shifting as ag…
CISA warns of cyberattacks disrupting U.S. water utilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in…
HN836: Optimize AI Traffic on the WAN with Ciena’s Integrated IP Networking (Sponsored)
As more applications and services rely on AI inferencing, that means more traffic on the WAN. Yes, bandwidth can solve a lot of problems, it’s not unlimited and AI inference traffi…
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. Accordin…
The most famous brand in physical security got pwned by ShinyHunters
Hopefully the company secures houses better than it locks down SaaS systems
From dangling DNS records to reverse DNS gaps, attackers find new blind spots
DNS underlies nearly every action taken on a network. A website visit, an email, a call to an AI application—all of it starts with a DNS lookup. That dependency cuts both ways. Att…
Data center developer eyes disused newpaper printing plant
As newspapers move online, the buildings that once housed their printing presses need new occupants. The Minnesota Star Tribune has just sold its old printing plant on the edge …
In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research
Noteworthy stories that might have slipped under the radar: parcel delivery company OnTrac hacked, Adobe patches, UK Department for Education loses 607,000 records. The post In Oth…
US bank places trust in ransomware crew that promised to delete its data
History suggests this was not wise
Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers
Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out. The post Cyberattacks on Minnesota Water Systems Investigated as Offic…
Anthropic and OpenAI are competing to see whose agents can go rogue harder
Whoever wins, we lose
Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites r…