Who needs ghost train scares when Windows is such a fright?
Things that go bork in the night
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Cisco Releases Open Source Tool for AI Model Provenance
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response. The post Cisco Releases Open Source Tool for AI Mode…
Windows 11 KB5083631 update released with 34 changes and fixes
Microsoft has released the KB5083631 optional cumulative update for Windows 11, which includes 34 changes, such as a new Xbox mode for Windows PCs, enhanced security and performanc…
Who needs ghost train scares when Windows is such a fright?
Things that go bork in the night Bork!Bork!Bork! What frightens you? What, as an IT professional, would make you shriek like a small child? What tech horrors are lurking under your…
Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks
The U.S. Department of Justice (DoJ) on Thursday announced the sentencing of two cybersecurity professionals to four years each in prison for their role in facilitating BlackCat ra…
Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft
A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, GitHub Acti…
Passport to £££: Home Office adds £216M to travel doc contract before a single bid's been placed
Start date pushed back a year, annual cost up a third, and UK's now handing out eight million passports a year
Passport to £££: Home Office adds £216M to travel doc contract before a single bid's been placed
Start date pushed back a year, annual cost up a third, and UK's now handing out eight million passports a year The Home Office has increased the annual value and overall duration o…
Hugging Face, ClawHub Abused for Malware Distribution
Threat actors are relying on social engineering to lure users into downloading files containing malicious instructions. The post Hugging Face, ClawHub Abused for Malware Distributi…
DVLA's 14-week driving license fiasco – the tech, people and chatbot trying to clear it
Medical license applicants still waiting months while agency insists it's 'putting things right' The Driver and Vehicle Licensing Agency (DVLA) has introduced new tech to support d…
FBI Warns of Surge in Hacker-Enabled Cargo Theft
A new alert from the FBI says criminal enterprises are hacking both brokers and carriers to steal cargo for resale. The post FBI Warns of Surge in Hacker-Enabled Cargo Theft appear…
US ransomware negotiators get 4 years in prison over BlackCat attacks
Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV…
1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom
The compromised Lightning and Intercom packages have a combined monthly download count of nearly 10 million. The post 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Interco…
User found the perfect formula to make Excel misbehave
For once, Oracle ERP wasn’t the problem
User found the perfect formula to make Excel misbehave
For once, Oracle ERP wasn’t the problem On Call Fridays can be a drag, but The Register has a formula to inject a little fun by delivering a new instalment of On Call – the reader-…
Qualcomm teases ‘dedicated CPU for agentic experiences’ and ‘agentic smartphones’
Enters the custom AI silicon business with secret silicon for an un-named hyperscaler Qualcomm has quietly entered the market for custom hyperscale silicon, and datacenter CPUs…
Qualcomm teases ‘dedicated CPU for agentic experiences’ and ‘agentic smartphones’
Enters the custom AI silicon business with secret silicon for an un-named hyperscaler
Fujitsu confirms mainframe biz to die in 2035, in time for quantum AI supercomputers to take over
In talks with Japan, the UK, and Australia on defense tech that can ‘contribute to global stability’ Japanese tech giant Fujitsu has confirmed the demise of its mainframe business …
Fujitsu confirms mainframe biz to die in 2035, in time for quantum AI supercomputers to take over
In talks with Japan, the UK, and Australia on defense tech that can ‘contribute to global stability’
Your biggest vulnerability is your shitty compensation
Article URL: https://green.spacedino.net/your-biggest-vulnerability-is-your-shitty-compensation/ Comments URL: https://news.ycombinator.com/item?id=47971134 Points: 107 # Comments:…
When 170,000 people show up: Network refresh readies Churchill Downs for Kentucky Derby
Churchill Downs may be best known for the Kentucky Derby’s two-minute spectacle, but behind the scenes, the historic venue is undergoing a network transformation that offers lesson…
ICANN opens applications for new generic top-level domains for the first time since 2012
$227k gets you a hearing for your dot.vanity project, or strings in one of 27 scripts The Internet Corporation for Assigned Names and Numbers (ICANN) on Thursday kicked off a new a…
ICANN opens applications for new generic top-level domains for the first time since 2012
$227k gets you a hearing for your dot.vanity project, or strings in one of 27 scripts
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Inter…
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Mini Shai-Hulud caught spreading credential-stealing malware
CPanel and WHM Authentication Bypass – CVE-2026-41940
Article URL: https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/ Comments URL: https://news.ycombinat…
N4N054: Network Access Control (NAC) Basics
Today’s episode is part one of a three part series to break down Network Access Control (NAC). Ethan and Holly start simple by explaining what NAC is at a high level and all of the…
Govern your bots carefully or chaos could ensue
Stop the sprawl!
Govern your bots carefully or chaos could ensue
Stop the sprawl! With the average Global Fortune 500 enterprise expected to run more than 150,000 AI agents by 2028, up from fewer than 15 today, there’s plenty of room for chaos. …
TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack
Several npm packages for SAP's cloud application development ecosystem have been compromised as TeamPCP's supply chain attacks broaden.