Shut up and take our money: Amazon plows $1B+ into quashing datacenter dissent
Thou shalt love the datacenter! Verily, thou shalt rejoice in the house of the datacenter!
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
HN844: Multipath Reliable Connection (MRC)
Today’s show puts the “heavy” in Heavy Networking with a discussion about Multipath Reliable Connection (MRC). MRC is about getting an even distribution of RDMA traffic across equa…
Frontline Education breach exposes school district employee data
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and …
Warlock ransomware breach SharePoint in water, telecom operator attacks
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gai…
arXiv imposes rate limit on paper submissions to stem the AI slop tide
Two a month per submitter, starting now, and you can thank science slop for the change
Startup doxx.net hands the network controls to AI
It used to take a large team of engineers years to build a new networking startup. AI changes that game entirely. Barrett Lyon has founded (and sold) multiple networking vendors…
OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse
Mostly 'routine research tasks,' and 'some involved government websites, which our models often use,' AI giant tells The Reg
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. …
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government an…
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptibl…
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its…
TNO075: What Does Network Operations Look Like in 2030? (Sponsored)
What will network operations look like in 2030, and how can teams embrace agentic AI without losing operational control? In this sponsored episode, Rekha Shenoy and Irfahn Khimji o…
SWIFT Banking & Government Middleware Enables RCE
Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]
Is Your Organization Ready for 2027's AI Accountability Era?
Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance, security, and value challenges ahea…
Is It Fair to Blame 'Rogue' AI for Security Failures?
"Rogue AI" terminology anthropomorphizes LLMs and shifts risk responsibility from vendors. Defenders should treat agents as untrusted, nondeterministic software systems, not sentie…
US sanctions Tren de Aragua gang members in ATM hacks crackdown
The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks …
Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval
Prosecutors claim Greg Lui helped China procure advanced hardware to develop, ahem, 'super intelligence’
Unidentified Flock Cameras in Florida
St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the de…
The VMware exit is a protection upgrade
PARTNER CONTENT: VergeIO says an exit is also an opportunity
OpenAI's wandering AI agents earn it a California subpoena
Plus: Attorneys-general say investigators should have direct access to AI companies' records when things go wrong
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app fla…
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways att…
Vulnerability Backlogs Are an Ownership Problem
Organizations don't need better vulnerability scanners; they need to know who owns their assets, and who has the authority and capacity to actually fix them.
Power approval set to delay Oracle's Wisconsin AI datacenter
Grid connection awaits regulatory approval, putting planned 2027 customer delivery at risk
IBM’s Bob wants to move in: Agent available for on-prem deployment
Bob, IBM’s agentic software development platform is now available to run on premises and in private clouds, sovereign clouds, and air-gapped environments to give users more control…
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime. The post macOS Users Targeted by Fake Zoom Inst…
OpenAI shows three staff the door over alleged information misuse
Two safety researchers and a program manager dismissed, company denies retaliation for raising concerns
Nvidia debuts $4,999 DGX Spark with half the RAM and storage, amid memory crunch
Meanwhile 128 GB version jumps to $6,950, nearly 75% above its launch price
Malicious Linux Implants Mimic Asian Mail Security Products
A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.