India’s outsourced software industry grows 9.5 percent to reach $239 billion
Software product development industry shrinks a little, but if AI has dented prospects, it’s not in these numbers
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
OpenAI's Astra model went for a drive and no one died
First LLM to pass test did it in a parking lot at snail's pace, at considerable expense, but it still counts for something
OpenAI agents ‘infiltrated Australian government website’
Canberra is fuming after AI lab sent the news to a generic unattended email address
Placeholder domain used in dev docs now serves ClickFix attacks
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Win…
SASE Converges Network & Security Into One Cloud Solution
Enterprise computing is moving to the edge. Keeping it secure requires tactics far beyond putting up firewalls. (Second in a three-part series.)
New RemControl Android banking malware targets users in Europe and Canada
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]
EDR Evasion Stack Helps Process Injection Slip Past Defenses
A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.
F5 fixes actively exploited zero-day flaw in BIG-IP APM
Technology company F5 fixed a critical remote code execution vulnerability in its BIG-IP Access Policy Manager (APM) platform on Tuesday. The flaw impacts deployments configured as…
Mop the slop from your LinkedIn feed with a new open-source Chrome extension
Jev-powered Slop Mop demonstrates another great use case for probabilistic, non-chatty AI model
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handlin…
IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU Decoder
IonQ’s new single processor quantum error decoder minimizes the classical computing overhead in quantum error correction. The post IonQ Targets Quantum Error-Correction Bottleneck …
Europe's fastest supercomputer is finally getting its domestic silicon infusion
Bull, the system builder behind JUPITER, takes delivery of SiPearl's long-awaited Rhea1 CPUs
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]
Someone's attacking a critical 0-day RCE in F5 BIG-IP APM
Good news: there's a patch. Bad news: both CISA and F5 warn that it's under active exploitation
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized…
Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios
The idea that AI could break away and work toward its own agenda is looking increasingly plausible to researchers and experts. The post Worries About an AI Internet Takeover Gain N…
Discordians now subject to whims of new age verification technology
Discord users asked to prove they’re adults get less intrusive options
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can …
Robot dog ran a marathon on one charge and lived to publish the paper
Two years later, creators explain how lightweight hardware and reinforcement learning helped it go the distance
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. [...]
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed auth…
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks
The United Arab Emirates and Kingdom of Saudi Arabia together absorbed 50% of all cyberattacks recorded across the Gulf region in the first half of 2026.
An Epyc trip to Venice: Everything we do and don't know about AMD's 256-core monster chip
16 channels of DDR5, 5 GHz clock speeds, and support for CXL 3.1 memory god boxes? What's not to like?
D2DO314: Backups SaaS – Safety as a Service
Ned and Kyler talk with Jim Jones about data protection, backups, and security in the age of hybrid cloud and AI. They explore the operational challenges of integrating automated A…
Radicle: Disclosure of Vulnerability in the Network Protocol
Article URL: https://radicle.dev/2026/09/23/disclosure-of-vulnerability-in-network-protocol Comments URL: https://news.ycombinator.com/item?id=49817524 Points: 154 # Comments: 58
Thoughts return to forbidden RAM upgrades as Raspberry Pi OS gets fresh lick of paint
New dock and app launcher arrive while soaring memory prices revive scrutiny of a two-year-old firmware restriction
Academic publisher Elsevier hit by LAPSUS$ redirect attack
Customers got crime crew's calling card instead of access to journals
Closing the observability gap for the AI-ready enterprise
SPONSORED FEATURE: Why AI-driven operations need a data-rich view of the network
Selector brings Git-based workflows and incident replay to network AI agents
Network operations teams are being asked to hand real decisions to AI agents. Trusting an agent enough to let it act in production is a different problem than building one. Soft…