Attackers are cashing in on fresh 'CopyFail' Linux flaw
Researchers dropped a reliable root exploit and it didn’t sit idle for long
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Attackers are cashing in on fresh 'CopyFail' Linux flaw
Researchers dropped a reliable root exploit and it didn’t sit idle for long CISA is warning that a newly-disclosed Linux kernel bug dubbed "CopyFail" is already being exploited, ju…
Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk
A proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the issue to steal passwords, and thus use them to engage in further malicious activity.
Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations
The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM. The post Microsoft Warns of Sophisticated Phishing Camp…
FTC to ban data broker Kochava from selling Americans’ location data
The FTC will ban data broker Kochava and its subsidiary, Collective Data Solutions (CDS), from selling location data without consumers' explicit consent to settle charges alleging …
More missions, less money, higher risk: NASA's back to the '90s playbook
Faster, better, cheaper is back and history suggests you can't get all three at the same time OPINION NASA's budget and its new administrator's statements are evoking a ghost from …
More missions, less money, higher risk: NASA's back to the '90s playbook
Faster, better, cheaper is back and history suggests you can't get all three at the same time
China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions
A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government entities in South America since at least late 2024 and govern…
Bun posts Rust porting guide, says rewrite is still half-baked
Zig's no-AI policy is at odds with view that most open source code will be AI-written in future Bun creator Jarred Sumner has posted a Zig-to-Rust porting guide, igniting speculati…
Bun posts Rust porting guide, says rewrite is still half-baked
Zig's no-AI policy is at odds with view that most open source code will be AI-written in future
The EOL Blind Spot in Your CVE Feed: What SCA Tools Don't Check.
Critical vulnerabilities can exist in open source software your scanners don't check. HeroDevs reveals how EOL software creates blind spots in CVE feeds and SCA tools, and how you …
The EOL Blind Spot in Your CVE Feed: What SCA Tools Miss
Critical vulnerabilities can exist in open source software your scanners don't check. HeroDevs reveals how EOL software creates blind spots in CVE feeds and SCA tools, and how you …
Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking
Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats Real estate giant Cushman & Wakefield has confirmed a data breach after…
Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking
Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats
Hacker Conversations: Joey Melo on Hacking AI
AI red team specialist details his methods for manipulating AI guardrails through jailbreaking and data poisoning, helping developers harden machine learning models. The post Hacke…
SAP dives deeper into Iceberg with Dremio acquisition
ERP giant previously leaned on Databricks for integration SAP has snapped up Dremio, a data integration and analytics provider, to extend the reach of its data analytics and AI age…
SAP dives deeper into Iceberg with Dremio acquisition
ERP giant previously leaned on Databricks for integration
Broadcom bets big on VMware Cloud Foundation 9.1
Broadcom on Tuesday launched VMware Cloud Foundation (VCF) 9.1, which it described as an AI- and Kubernetes-native private cloud platform with integrated security and mixed compute…
Vimeo data breach exposes personal information of 119,000 people
The ShinyHunters extortion gang stole personal information belonging to over 119,000 people after hacking the Vimeo online video platform in April, according to data breach notific…
VMware claims Cloud Foundation on track for world domination
Delivers update aimed at reducing hardware bill shock VMware has announced an update to its flagship Cloud Foundation (VCF) private cloud suite and tried to make it fit the times b…
VMware claims Cloud Foundation on track for world domination
Delivers update aimed at reducing hardware bill shock
Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft
Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication. The post Critical Bug Could Expose 300,000 Ollama Deployments to Informa…
ShinyHunters claims dump puts 119K Vimeo emails in the wild
Vimeo points finger at analytics supplier Anodot, says no logins or card data were touched More than 119,000 Vimeo users's email addresses were extracted in a breach traced to a th…
ShinyHunters claims dump puts 119K Vimeo emails in the wild
Vimeo points finger at analytics supplier Anodot, says no logins or card data were touched
Brit mathematician lets AI agent loose with credit card – cue password leaks, CAPTCHA chaos and more
Professor Fry's AI experiment shows light and dark sides of agentic tech British mathematician Professor Hannah Fry has shared a cautionary experiment involving an AI agent, a set …
Brit mathematician lets AI agent loose with credit card – cue password leaks, CAPTCHA chaos and more
Professor Fry's AI experiment shows light and dark sides of agentic tech
Critical Remote Code Execution Vulnerability Patched in Android
CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. The post Critical Remote Code Execution Vulnerability Patched in Android app…
The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed
Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a persistent OAuth token with no expiratio…
How the Story of a USB Penetration Test Went Viral
Two decades ago Dark Reading posted its first blockbuster — a story from a pen tester who sprinkled rigged thumb drives around a credit union parking lot and let curious employees …
How the Story of a USB Penetration Test Went Viral
Two decades ago, pen tester Steve Stasiukonis caused a sensation by sprinkling rigged thumb drives around a credit union parking lot and following what curious employees did next. …