Telegram shortlinks knocked offline over sanctioned VPN connection
t.me borked for a day until platform proved it had no ties to service favored by cybercriminals
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
New Spirals ransomware encrypts victim network in under 24 hours
A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in less than 24 hours. [...]
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide
Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, d…
F5 Patches Multiple NGINX, BIG-IP Vulnerabilities
Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and execute code. The post F5 Patches Multiple NG…
China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans
Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures. The post China’s Top Cybersecurity Firms Hit by Mounti…
OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol
OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt injection vulnerability discovery with an aim to fix issues before the tools are…
How to teach an old Intel Mac new tricks with OpenCore Legacy Patcher
Why to do it, and what to watch out for
Old UEFI Shims Expose Systems to Secure Boot Bypass
Signed by Microsoft, the vulnerable UEFI shim bootloaders could be abused on any system, regardless of the OS. The post Old UEFI Shims Expose Systems to Secure Boot Bypass appeared…
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026…
Law firm insisted on one password to rule them all
Using the admin password, you could be anyone and see anything
Police Disrupt a €140M Cyber Fraud Ring in Spain
Iberian hackers carried out a variety of cyberattacks and laundered the winnings through complex financial networks.
Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day
The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability. The post Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day a…
Tech support scam caused massive data breach at Australian airline Qantas
It’s possible to leak PII describing 5.7 million people without breaching privacy rules
Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities
The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products. The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulner…
Even HP resellers thought the price of toner and ink was too high – so HP India facilitated an illegal cartel
Regulator fines PC and printer giant for rigged tender bids and collusion
Cyberattack threatens utterly critical infrastructure in Japan: KFC
The Colonel stops taking online orders and may close stores after logistics partner’s systems go down
Former OpenAI CTO does what Altman won't, releases a frontier AI model that's actually open
Thinking Machines' first open weights model is a 975 billion parameter alternative to Chinese LLMs
Cadence's AuraStack agent melds AI with HPC to speed PCB, advanced packaging design
One-two punch offers a glimpse of how low-precision AI can complement high-precision simulations
Dutch police bust investment fraud ring stealing over €100 million
The Dutch Police announced the arrest of multiple individuals suspected of being part of an international investment fraud scheme estimated to have tens of thousands of victims. [.…
Forgotten Bootloaders Expose Secure Boot Blind Spot
Nearly a dozen vulnerable and now revoked UEFI shim bootloaders remained trusted for years, giving attackers a path to bypass Secure Boot.
Amazon Web Services' most vocal customer now runs EC2
Retail foundation leader Dave Treadwell takes over as senior leader and 19-year vet Dave Brown departs for pastures unknown
Prominent Haskell defector pilloried by anti-AI purists
Haskell adherents revisit the language's tongue-in-cheek 'avoid success at all costs' mantra
Identity Attacks Overtake Exploits as Top Ransomware Cause
Email attacks overtook exploits as the top ransomware root cause last year. Multifactor authentication (MFA) was deployed in 97% of credential-based attacks but failed to prevent c…
Zoom warns of critical account takeover vulnerability
Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be exploited by an unauthenticated party to hijack accounts. […
ZTE's AI new calling builds an open and intelligent telecom ecosystem, transforming from basic voice call to an AI-powered service hub
PARTNER CONTENT: How "Calling as a Service" eliminates app downloads and unlocks new revenue for operators
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed…
Google Gemini CLI abused as a hacking agent, malware botnet operator
A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. [...]
IBM targets AI edge with Power server, software upgrades
IBM has bolstered its Power server portfolio with a new edge S1112 server and announced IBM Power Autonomous Operations, an AI agent that helps customers monitor Power systems and …
Guten Tag, Bonjour, Hola to Our European Cyber Defenders!
We're thrilled to unveil the latest evolution of Dark Reading's DR Global section — your go-to source for region-specific cybersecurity intelligence beyond North America.
D2DO307: Why AI Can’t Replace DevOps Fundamentals
Ned and Kyler welcome Andrew Brown, co-founder of ExamPro, to discuss how AI is reshaping the IT education and training landscape. They discuss why foundational technical knowledge…