Italy probes AI-fueled price hikes in Microsoft 365
Regulator says subscribers may have been defaulted onto more expensive plans with Copilot features attached
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
ZTE CDO Cui Li at GTI Summit 2026: Co-creating an intelligent, ubiquitous 6G future and exploring new opportunities in the mobile AI era
PARTNER CONTENT: ZTE’s Chief Development Officer outlines the company's "2+4" framework for 6G convergence and industry-wide collaboration in the mobile AI era
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised a new s…
One Million Passports Leaked Online
A database of almost a million passports from around the world was leaked online. Note what happened. A high-value credential—a passport—was used in an ancillary low-value authenti…
ZTE AIR Core unleashes a new era of agent services beyond connectivity
PARTNER CONTENT: Shifting from legacy "connectivity pipes" to intent-driven intelligent services, the 6G-ready architecture introduces an Agent Service Network designed for the era…
Engineer accused of insider trading tied to Microsoft's reboot of Three Mile Island nuclear plant
SEC claims former Constellation employee made $1.4M trading options before the restart deal was announced
Space Shuttle Endeavour stacks up nicely for new California exhibit
Full launch configuration recreated ahead of Samuel Oschin Air and Space Center's November opening
$3 Million Reportedly Stolen in Polymarket Hack
The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor. The post $3 Million Reportedly Stolen in Polymarket Hack a…
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant
An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026, using photo-themed ZIP files to drop a Node.js imp…
Three FOSS projects for developers, procrastinators, and media wranglers
Prism tracks AI emissions, Super Productivity keeps tasks local, and TAMOSS brings the BBC's media API to Kubernetes
Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets
Turla has been using the backdoor against government and military organizations in Ukraine for espionage. The post Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Target…
Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff
Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three months after Cellebrite said…
BOFH: Amnesty means never having to say you're sorry
There's no I in team, but there is one in insurance fraud
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog. The post First-Ever Exploitation of PTC Windchill Vulnerability Discove…
New Enterprise-Ready MCP Specification Brings New Security Challenges
A major overhaul of the Model Context Protocol shifts critical security responsibilities from the protocol itself to developers and platform operators. The post New Enterprise-Read…
Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called STOCKSTAY that has been deployed against government an…
Security boss thought MFA would be too much security
One rule for the workers, another for execs
Microsoft extends extended updates for Windows 10 in the most muted way imaginable
Tiny tweak to support page reveals consumers can purchase another year of patch protection
Philip Martin Joins Uber as Chief Information Security Officer
Martin brings experience from Coinbase, Palantir, Amazon, and the U.S. Army to lead Uber's cybersecurity and enterprise security organization. The post Philip Martin Joins Uber as …
Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder
Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models
AI giants back non-profit to retrain workers left behind by AI
Sorry we spent your wages on datacenters, but call us when you're AI-ready
Anthropic is testing desktop-like Claude Cowork for mobile
Anthropic appears to be testing Claude Cowork support on mobile, allowing you to manage long-running Claude tasks from your phone. [...]
Robinhood Cuts Access Approval Time to Support High-Velocity Development
The fintech company's engineering-first application security team reengineered the process for granting system access, making it easier and more secure for developers working on th…
Poland busts SIM-swapping gang tied to millions in crypto theft
Authorities in Poland have arrested four members of an organized cybercrime group accused of breaching telecommunications partners and hijacking email accounts to carry out SIM-swa…
Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs
Spotted in intrusions targeting insurance, education, IT, and professional services sectors
In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw
The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.
They've read the scroll thing! AI helps decipher ancient document charred by Vesuvius
'Having certainly strained ourselves to the utmost through research and learning, we will no longer be inferior to them,' reads a scroll virtually unwrapped with the help of AI
Russian APT 'Gamaredon' Upgrades Its Arsenal, Requiring New Defenses
The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.
Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues
Former employee accuses company of prioritizing pending IPO over client security
EdTech Attackers Shift From Schools to Their Software Suppliers
Educational institutions, the edtech companies they rely on, and, more concerningly, the challenges they pose for schools are the focus of the latest Reporters' Notebook video seri…