Companies are not looking before they're leaping into the AI playpen
93% of organizations report infrastructure incidents attributable to AI
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
The hits keep on coming for Cisco vulnerabilities
CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought
DraftKings hacker 'Snoopy' sentenced to 18 months in prison
A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack. [...]
Qualcomm claims it's not too late for Dragonfly to land in datacenters
Oh, Snap(dragon): DC chief says the mobile-chip giant sees bit barns as its next growth market
Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access
New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targete…
Attackers Hit Cisco SD-WAN Flaw 2 Months Before Disclosure
Researchers believe rogue peering was used to connect to the victim's SD-WAN devices to gain admin privileges and root-level access.
Malicious Edge extension abuses Native Messaging as bridge to malware
A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. [...]
2026 FIFA World Cup Faces Surge in Cyber Threats
Persistent cybercrime, social engineering, and infrastructure threats continue to plague the FIFA 2026 World Cup across the US, Canada, and Mexico.
Qualcomm’s $3.9 billion purchase of Modular aims to change the data center dynamic
Qualcomm on Wednesday said that it will spend $3.9 billion to purchase AI-native software platform developer Modular Inc., a move that Qualcomm says will allow it to level the play…
Loop engineering, latest AI buzzword, still needs humans in the loop
Prompting less and automating more comes with a price
IBM, Red Hat, Palo Alto team to secure open-source software
IBM, its Red Hat subsidiary, and Palo Alto Networks are teaming up to help enterprises identify vulnerabilities in open-source software and deploy safeguards against threats, parti…
Do CISOs Need a Code of Ethics?
Dark Reading Confidential Episode 19: Kickbacks, no-show jobs, "dirty" VCs, and shelf ware — industry expert Robert "RSnake" Hansen explains why he thinks it's time for a CISO code…
OpenAI gets chippy with Broadcom
Jalapeño is the latest announcement that attempts to portray OpenAI as more than a race-to-the-bottom model maker
Break legacy lock-in: Strategic options for enterprises facing the vSphere 8 deadline
The acquisition of VMware by Broadcom has caused many enterprise IT leaders to reexamine their infrastructure strategies. For organizations running vSphere 8, the October 2027 end-…
D2DO305: Scaling Human Connection in Tech Communities
Kyler and Ned are joined by former AWS Community Program Manager Jason Dunn to discuss what it takes to build and maintain a thriving tech community. Jason shares his “benevolent d…
Microsoft uses AI to link two malware operations in racketeering suit
200+ C2 servers linked to StealC and Amadey shut down
When Information Becomes the Attack Surface – Understanding AI Agent Traps
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI. The post When Information Becomes the Attack S…
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, ur…
More Malicious OpenClaw Skills Threaten AI Supply Chain
OpenClaw removed five packages from its ClawHub skills marketplace that bypassed security checks even though they included infostealers and other threats.
Windows 11 turns five, leaving some important lessons for Microsoft
Maybe sometimes users know best
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered
A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of crimina…
Deno project is going to add cross-platform desktop apps in next major update
Feature is not yet stable, but will offer easy conversion of web applications
Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. The post Microsoft and Allies Smash Shared Infrastructure of A…
Boffin claims Microsoft's supposed quantum leap does not compute due to 'basic Python errors'
Nature paper argues researchers cherry-picked data. Redmond insists its work is sound
Medical diagnosis AIs can be tricked into telling whose data trained them
Did you read all the documents you signed last time you had a medical test?
CISA warns of max severity Ubiquiti flaws exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers. [...…
Amadey, StealC malware operations disrupted in Operation Endgame action
Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercrimi…
British Home Office seeks techie to herd nearly 1,000 engineers looking after 600 systems
£120k ... but you must take ultimate responsibility for functionality of e-gates, passports and more
Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk
The new framework seeks to help security teams identify which software supply chain vulnerabilities pose the greatest operational, safety, and business risks in AI-driven environme…
Securing the service desk: Why social engineering attacks keep succeeding
Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. Specops Software breaks down how service desk socia…