Ryanair adds Google to its dual-cloud flight plan
Gemini gets to juggle crews, forecasts, and maintenance while AWS keeps its seat
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud
A previously unseen Android near field communication (NFC) relay malware family dubbed WindRelay is being deployed in conjunction with a known remote access trojan (RAT) called Spy…
WhatsApp rolls out new feature that flags potential scam messages
WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn users when scammers are targeting them. [...]
North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring
Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT workers flip that model. They apply for jobs, pass interviews, receive legitimate c…
Venture Firm Team8 Secures Additional $365 Million
The Israeli company has nearly $2 billion in total assets under management since 2014. The post Venture Firm Team8 Secures Additional $365 Million appeared first on SecurityWeek.
AWS key exposed in JavaScript may have lit way to Beacon's charity data
CRM provider confirms customer database was copied and probably downloaded in readable form
Separating AI’s Technological Problems from Its Capitalism Problems
This essay was written with Nathan E. Sanders, and originally appeared in Tech Policy Press. AI represents the first time we humans can do cognitive work outside of our bodies at s…
Fortinet Patches Authentication Flaws in FortiWeb and FortiManager
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance. The post Fortinet Patches Authentication Flaws in Fo…
Twitch feeds your streams to Amazon's AI unless you tell it to stop
Bot training switch is on by default, because apparently asking first wasn't going to work
'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.
White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs
Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements. The post White House Mobilizes Security Firms for Opera…
Everything is better with pickles... except Windows
Operating system indigestion pops up over chicken sandwich ad
Critical VMware vCenter Vulnerability in Attackers’ Crosshairs
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code. The post Critical VMware vCenter Vulnerability in Attackers’ Crosshairs ap…
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’
Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges. The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’ appeared firs…
Belgium's eID Authentication Opens Citizen Accounts to RCE
The trust framework underlying Belgium's electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions…
Passwords stored in public Google Doc then showed up in search results
Developer spotted hostname and credential string lurking in autocomplete
Cisco thinks Mythos means instant death for unsupported networking kit
CEO says buyers are moving fast and shuffling budgets to replace old boxen
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is C…
Tencent says it could make instant profits on $53B hardware splurge by renting it for AI workloads
Plans to build models instead because it thinks selling tokens will prove more lucrative in the long term
Chinese Loongson processors have leaky caches, researchers find
Attackers could extract data, even working from inside a guest VM
OpenAI ad service can bill customers for up to one day after they pause campaigns
ChatGPT Ads, I wish I knew how to quit you
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...]
Rent-a-GPU outfit Nebius promises rapid 1 GW powerup plan isn't nebulous
And it'll jump through every financial hoop it can to get there
Android malware combo takes out loans and relays victims' credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.…
'Near-autonomous' AI agents attack Taiwan's nuclear safety agency
Some say the world will end in fire, some say an agentic swarm
Deeply buried 16-year-old SQLite bug caused last year's Tailscale outages
Think your bugs are a pain to track? WAL-Reset took six months of hunting and development of a new logging tool to identify
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack cust…
Node.js creator liberates Durable Objects from Cloudflare
Same stateful trick, now with your own infrastructure
Spectre rears its ugly head again as researchers show some RISC-V chips are susceptible
Eight years on, we're still paying to hide the future glimpsed during speculative execution