Stanford prof is beating the drum for a new protocol to replace TCP
Homa is a rethink of networks for the AI age
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware devel…
Cloudflare launches Data Platform with bland 'Basin' branding, promise of fewer fees
Serverless data management without egress fees, sort of
Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right. The post Zero Trust Creator Says Model H…
EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
RUSI wants procurement rethink that could put US suppliers under scrutiny too
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains
Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul Lands $10 Million to Spot Hostile Intent Across Cybe…
N4N065: Well Actually 4: Multicast, MPLS, and More
Thank you for sending in even more follow ups! On today’s show, Holly and Ethan respond to listener comments and corrections on Multicast, MPLS, NAC, Twisted Pair Cabling, and more…
CoreWeave brings Nvidia Vera Rubin, AI tools to its cloud services
CoreWeave has made a series of announcements starting with Nvidia’s new Vera Rubin NVL72 rack-scale AI platform available in its cloud. At its CoreWeave’s Fully Connected confer…
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threateni…
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than peopl…
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
Your invite to a fake AI policy advisory committee has strings attached
AWS offers local, open source leash for agent harnesses
Dogwood Local Engine checks AI tool calls against user-defined temporal rules before they run
Microsoft makes Windows settings backup the default in 26H2
Annual update installed. You're up to date, so nothing seems to have changed. Wait a minute...
Nvidia built the AI factory. Now it’s building the locks for the doors
Nvidia has led the industry through much of the AI revolution, building the most important computing platform of this era. Yet no one has considered Nvidia a security company. T…
IPB209: SREs Are Breaking IPv6 — And They Don’t Know It Yet
Ed and Nick explore why developers and SREs often become the bottleneck when transitioning to IPv6-only environments. They share practical strategies for bridging the communication…
Build the right AI factory for your needs: partner for success
SPONSORED FEATURE: HPE and NVIDIA help organizations apply accelerated computing, software, enterprise infrastructure, networking, control plane, and services to the workloads and …
Microsoft catches hackers exploiting Zimbra bug before disclosure
Attackers were probing the mail server flaw weeks before it had a CVE to its name
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning …
Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures. The post Enterpris…
Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass
Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. The post Hacker Conversations: Rob Juncker, a Knock at the Door and a…
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and servers, led to three arrests, and identified a 16-…
Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader
Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. The post Police Shut Down KillSec Ransomware, Identify Alleged Teen Leade…
Memory squeeze set to tighten through 2028, Micron says
The global memory shortage that has driven up the cost of servers, storage and PCs through 2026 will get worse in 2027 and 2028, according to memory maker Micron Technology. “We…
MI5 warns UK academics their research may have helped Chinese spies
Institutions told to trace who is really financing their work or risk falling foul of national security law
The Day-One Hole in Zero Trust Architecture
Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust before strong authentication exists. Specops explai…
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (E…
Cisco SD-WAN Manager hit by zero-day admin access attack
Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says it has now fixed the …
CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch
Replacing letters with symbols still doesn’t make it good.
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. The post A…
Warlock Ransomware Hits Large Spanish, Portuguese Orgs
A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.