Japan’s PM orders cybersecurity review to stop Mythos going full CyberZilla
Fears exponential increase in attack scale and speed
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android
Apple on Monday officially released iOS 26.5 with support for end-to-end encryption (E2EE) to Rich Communication Services (RCS) in beta as part of a "cross-industry effort" to repl…
Veteran network architect proposes IPv8 – to improve IPv4, not leapfrog v6
Critics are not convinced this plan to add an ‘area code’ based on ASNs has much merit
GitLab promises a different kind of layoff as biz pivots toward AI
Code hosting biz is trimming its global footprint and flattening its management layer
Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched
Linux server admins may get the ability to turn off a vulnerable function in the OS kernel until a patch for a zero-day vulnerability is ready, if a proposal from a kernel develope…
Red Hat blasts RHEL 10.1 into orbit aboard Voyager's micro datacenter
Orbital compute platform, which launched on a mission to the ISS last year, gets an immutable upgrade alongside refreshed container images
Securing the Untrusted Agentic Development Layer
Join us to learn how to architect a development environment where your builders and their agents can move fast and securely.
Quit VMware and you’ll emerge with more complex and less capable infrastructure
Analyst says modernizing applications is probably a better use of your time than hypervisor migration
Double Canvas breach acknowledged as ShinyHunters sets new pay-or-leak deadline
UPDATED: Sorry, kids, everything's back up so get to work on your new assignment - An essay on the ethics of paying ransoms, because it looks like that's what happened here
GM agrees to $12.75M California settlement over sale of drivers’ data
California Attorney General Rob Bonta announced a proposed $12.75 million settlement agreement with General Motors (GM) over allegations that the company violated the California Co…
Official CheckMarx Jenkins package compromised with infostealer
Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace. [...]
New GhostLock tool abuses Windows API to block file access
A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be abused in attacks to block access to files sto…
Tech job postings hit three-year high as AI demand fuels hiring rebound
U.S. tech employment regained momentum in April, with job postings reaching a three-year high and tech hiring swinging back into positive territory, according to new data from Comp…
FCC Softens Ban on Foreign-Made Routers
The Federal Communications Commission eased some restrictions and pushed back deadlines for foreign router manufacturers, but the ban is still in place.
Rodent-obsessed developer creates Ratty to bring 3D graphics to the command line
Inspired by TempleOS, this terminal emulator is just about as bonkers
Microsoft researchers find AI models and agents can't handle long-running tasks
An intern who failed this much would be shown the door
Cookie thieves caught stealing dev secrets via fake Claude Code installers
New IElevator2 COM interface? No problem
Tech Can't Stop These Threats — Your People Can
Security controls can do only so much. Here are four attacks where your employees are usually your first, and only, line of cyber defense.
HPE memory server targets compute-heavy and agentic AI workloads
HPE has rolled out a new enterprise memory server built for complex business workloads, compute-heavy systems, and emerging agentic AI workloads. The HPE Compute Scale-up Server…
20 Leaders Who Built the CISO Era: 2 Decades of Change
As part of Dark Reading's 20th anniversary special coverage, we profile the CISOs, founders, researchers, criminals, and policymakers who rewrote the enterprise risk playbook.
PCI group begins work on new spec to support bandwidth-hungry apps like AI, HPC
The PCI-SIG consortium announced PCIe 7.0 nearly four years ago and no products supporting it have come to market yet, but the standards body is going forward with the first draft …
OpenAI can't have incompetent AI consultants ruining the market, so bought its own
By which we mean it bought someone else's with other people's money
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack
Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. "If you are using Checkmarx Jenkins AST plugin, you need to ensu…
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor
A threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environ…
NB574: Extreme’s New AI Agent Nudges You; Cloudflare Evaporates 20% of Employees
Take a Network Break! There’s a Red Alert for Apache Polaris with four CVEs that could enable unauthorized read/write access. On the news front, Lumen is spending $475 million in c…
Frame Security Emerges From Stealth With $50M for Awareness and Training Platform
Team8, Index Ventures, Picture Capital, Elad Gil, Cerca Partners, and Tesonet invested in Frame Security. The post Frame Security Emerges From Stealth With $50M for Awareness and T…
Debian 14 cracks down on unreproducible packages
Dull but important … so, a bit like Debian itself, really
Cisco: Latest news and insights
Cisco (Nasdaq:CSCO) is the dominant vendor in enterprise networking, and under CEO Chuck Robbins, it continues to shake things up. Cisco’s momentum is accelerating across multiple …
Anthropic’s bug-hunting Mythos was greatest marketing stunt ever, says cURL creator
After all that hype, AI scanner found one low-severity cURL flaw
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, markin…