Aggregated from vendor advisories, security research, and industry publications.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2026-9082 (CVSS score: 6.5), an SQL injection vulnerability affecting all supported versions of Drupal Core. "Drupal Core
Release of spectrogram of cockpit recorder audio allows conversation recovery with 'emerging' decades-old tech
Text is the new attack
Hey, Gemini, how much can we earn from one pump-and-dump cycle?
The South Pacific Regional Fisheries Management Organization (SPRFMO) needs to regulate squid fishing in the South Pacific. As usual, you can also use this squid post to talk about…
Limping Llama model needs a crutch made of surveillance tools
Will Jason Statham save us?
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomw…
The US government has awarded IBM $1 billion to help establish the first purpose-built quantum chip fabrication unit in the US. The Trump administration’s investment is being match…
Financial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting company that enabled cyberattacks, interference operations, …
Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites. The post Drupal Vulnerabilit…
Wood Mackenzie analysts say bit barn operators are in a tough spot
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA …
Scott sits down with Avi Freedman, CEO and co-founder of Kentik, to discuss if AI has advanced enough to automate human-centric NetOps. Together they caution against vendor hype re…
The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151) has been observed using lures related to Prometheus, a Ukrainian online learning platform, to targe…
Selector is extending its AI-driven network observability capabilities into public clouds. On today’s sponsored episode, we dig into how Selector gathers and analyzes public cloud …
Switch to premium devices pays off as PC giant post record record, just don't ask about cheap laptops
When Akamai announced its LayerX acquisition, the company joined a growing list of vendors adding secure enterprise browsers to their product portfolios.
Two former executives of a call-tracking and analytics company pleaded guilty to concealing a years-long tech support fraud scheme that victimized individuals worldwide. [...]
Cox Media Group allegedly sold a bogus AI-powered snoopfest service
AI agents generate up to 450% more network traffic than humans can, and they’re beginning to reshape network traffic patterns in measurable ways. Enterprise network traffic wit…
Listening to your customers? Who are you, and what have you done with Microsoft?
Other noteworthy stories that might have slipped under the radar: CISA contractor exposes credentials, Mythos testing and new features, Huawei router flaw triggered telecom blackou…
Crazy story: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to s…
Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attacks targeting Windows systems. [...]
Telecoms giant files suit in Golden State so it doesn't have to maintain network it claims is hardly used
Ransomware and vendor breaches persist. The "2026 Data Breach Investigations Report" (DBIR) highlights how evolving social engineering tactics make the sector more vulnerable.
Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. [...]
Fraud losses don't stop at chargebacks. False declines, account takeovers, and abuse also damage revenue and trust. IPQS breaks down why fraud teams need broader visibility into ri…
CEO eyes margin gains by keeping headcount flat – bold for a company selling HR software to employers