Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal s…
Musk fumbles the timetable for first Starship catch
Billionaire walks back earnings call optimism as orbital test approaches
Nvidia scales back financing guarantee for OpenAI data center
Nvidia is scaling back a proposed financial guarantee tied to a massive OpenAI data center project in Ohio, reducing its initial commitment from as much as $250 billion to less tha…
Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. [...]
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and regist…
SickKids children’s hospital bandages up careers website after intruder breaks in
Toronto org says it wasn’t the only one to be affected by the third-party software vulnerability
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which di…
HN838: Meet Mr. Packets – Building Your Own Agentic AI Team Member
What does it take to build your own AI agent that could help with day-to-day network tasks? Hank Preston, a Distinguished Architect at Cisco, asked himself that question. He develo…
In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug
Other noteworthy stories that might have slipped under the radar: Threema DDoS attack, Evooo1Bot Linux botnet, Crypto4A secures top-tier NIST certification. The post In Other News:…
Hackers poison popular Rust crates to steal developers' credentials
Malicious updates turned routine builds into a delivery system for infostealer malware
Microsoft blames Windows gaming issues on RGB lighting devices
Microsoft says ongoing issues causing games to crash or fail to launch after installing the August 2026 Windows updates may be caused by peripherals with RGB lighting. [...]
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment. The post Encryp…
New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets
Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked. The post New Phis…
AMD grabs more CPU share while pricier PCs punish desktop demand
Mercury Research blames costly memory and scarce GPUs for 20% processor shipment slide
Is Online Privacy Possible? How Digital Identities Can Help
Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs explains how separa…
Calling on Cyber Pros to Help Defend City Hall
Government agencies with smaller budgets need support — and here's how you can help.
Calling on Cyber Pros to Help Defend City Hall
Government agencies with smaller budgets need support — and here's how you can help.
Microsoft rolls out Classic Outlook theme for New Outlook users
Microsoft has started rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows. [...]
TNO069: Network to Code Gets Enterprise Open-Core Right with Nautobot (Sponsored)
Network to Code’s Jason Edelman, Founder and CTO; and Jeff Bradbury, VP of Marketing of Network, join host Scott Robohn for this sponsored episode to discuss open-core done right —…
OpenAI Adds Controls That Should've Been There Already
The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions should have been in place prior to the frontier models escaping…
'We let you down': GitHub pledges to scale up before developers give up
CTO promises architectural overhaul following second outage of the month
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near
The coming threat of super-powerful computers capable of cracking today's algorithms requires upgrading encryption now. Tech companies have begun building defenses.
Critical Isolated-vm Vulnerability Leads to RCE on Host
The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. The post Critical Isolated-vm Vulnerability Leads to RCE on Host appeared first…
CISA orders feds to patch actively exploited TrueConf Server flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server …
$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts
Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication
Palo Alto Networks and NTT Data target $1B in joint AI security sales with new managed offerings
Palo Alto Networks and NTT Data have teamed up to deliver what the vendors say could amount to $1 billion in joint AI-focused enterprise security services deals by the end of 2029.…
Network architecture pay climbs amid AI shift
Network architecture expertise is earning premium pay as enterprises grapple with complex infrastructure environments and AI puts new demands on corporate networks. Network arch…
Wazuh and AI For Enhanced SOC Workflows
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on A…
Microsoft lets you swap New Outlook's looks with the face of Outlook Classic
Functionality not all there yet, but at least Redmond's latest and greatest appears a bit more like its predecessor