Broadcom and Apple extend custom silicon pact to 2031
Probably an extension of long-running iThing innards arrangement, not a new custom AI accelerator deal
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Microsoft testing new Cloud Rebuild Windows 11 recovery feature
Microsoft has begun testing the Cloud Rebuild recovery feature in the latest Windows 11 Insider Preview builds released for users in the Experimental channel. [...]
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative acce…
Samsung’s profits jump 19x in a year and you don’t need AI to figure out why
Share price down sharply, apparently amid fears the bubble is getting bigger
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, c…
IBM teases new rackable mainframes that ‘complete’ the z17 family
UPDATED: Big Blue happy for users to BYO rack and slot Z machines alongside other tech
AI startup that’s never turned a profit say's it'll totally be around in 2047 to close its $19B lease
Model dev and AGI fearmonger Anthropic signs 20-year lease with TeraWulf
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
CitrixBleed-ing Again? NetScaler Vulnerability Under Attack
Attackers wasted little time targeting the latest memory disclosure flaw in Citrix's NetScaler products, after researchers published a proof-of-concept exploit (PoC).
Phishing poses as big-brand job interview to steal Google accounts
A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials fro…
Fake IT support calls on Microsoft Teams push EtherRAT malware
Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installing the EtherRAT malware, giving attackers initial …
Boffins bet on quantum computers, AI supers to solve fusion fuel dilemma
Department of Energy, Cleveland Clinic, and IBM simulate a soup of molten salts and techno babble in pursuit of tritium
Software engineers can still rake in big bucks by working for fast-growing companies
AI's impact on tech business is complicated
Madlad builds homebrew GPU using 8,192 RISC-V chips
The next version will have 32,000 MCUs
Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks
Securonix says the sophisticated framework abuses compromised websites, Blogspot, PowerShell, and fileless techniques to evade detection and deploy the PureLog information stealer.…
GitHub cuts short offer to burn repos on CD after mockery ensues
A purported jab of Sony's physical media phase-out blows up on GitHub itself
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework …
Vietnam arrests suspects behind HiAnime anime piracy service
Vietnamese authorities have arrested and are prosecuting seven suspects believed to have run HiAnime, the largest anime piracy streaming service before its shutdown in June. [...]
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' a…
Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
Article URL: https://github.com/V4bel/Januscape Comments URL: https://news.ycombinator.com/item?id=48807908 Points: 143 # Comments: 61
EU urged to act after Pegasus infects phone of spyware inquiry MEP
Campaigners demand investigation and long-delayed action on PEGA Committee recommendations
JadePuffer: The First Complete LLM-Driven Ransomware Attack
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.
Samsung floats 2028 launch for seaborne datacenter
Korean megacorp sets itself a target date to commercialize watery server farm concept
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is CVE-…
Microsoft says the world is changing faster than it can keep up as it guts commercial, Xbox teams
Xbox chief says company can't afford to mistake longevity for inevitability
The Shift Toward Business-Aligned Risk Management
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. The post The Shift Toward Busi…
Armored Likho APT Targeting Government, Electric Power Entities
The threat actor uses modular RATs and information stealers in financially motivated and cyber espionage campaigns. The post Armored Likho APT Targeting Government, Electric Power …
AMD’s Ryzen AI Halo makes local AI look easy, but at $4K, easy doesn't come cheap
128 GB of memory! In this economy?
Software Is Now Written at the Speed of Thought. Security Isn't.
Every evolution in software development has reduced the friction between an idea and a deployable application. AI may remove the final barrier, but it also removes many of the mome…
Europe's new import rules are coming for your bargains
Good news if you're an OEM printer maker, EU retail biz, or a customs official... but hobbyists and others less pleased