GOV.UK founder warns AI gold rush could leave Britain locked in
Mike Bracken says the dash to adopt sovereign AI risks giving more control to a handful of tech suppliers
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities…
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a p…
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script coul…
Alibaba Cloud plans six-year stroll to 20GW of datacenters, reveals chip to power them
USA alone has 37GW under construction, but Alibaba doesn't think the AI boom will run out of steam
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabi…
Gartner predicts 55% of enterprise VMware users will be investigating an exit by 2029
Chasing pack has its problems too, with maturity, cost, and complex licenses
Communities are blocking data centers before they’re even proposed
Communities across the US are furious about data centers, and they’re taking proactive, even preemptive, measures to keep them out of their backyards. According to the Data Cent…
California joins US states clamping down on data center gold rush
The state of California has joined the growing number of governments and communities at all levels across the US taking proactive, even preemptive, measures to keep data center dev…
US Proposes AI Incident Alert System in Talks With China, Bessent Says
Trump has resisted calls to slow down AI development, saying that would help China catch up to U.S. companies. The post US Proposes AI Incident Alert System in Talks With China, Be…
California tightens datacenter rules on water and power
Public pushback puts bit barn resource use under the microscope
Anthropic-linked CVEs pile up, attackers mostly shrug
Of 225 flaws found by Glasswing and tracked by VulnCheck researcher, just one has confirmed exploitation in the wild
How AI Agents Can Trigger Runaway Costs for Enterprises
Unbounded consumption is an issue that OWASP currently ranks sixth in its Top 10 for LLM Applications, and it could be an extremely costly one.
BigCommerce alerts merchants of data breach linked to Ribon apps
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject ma…
Perpetual underdog AMD nips at Nvidia's heels as it joins the $1T club
Fueled by the AI boom, the House of Zen's rise isn't just Instinct - Lisa Su is riding high on some Epyc design chops too
Skip the upgrade? iPhone 18 Pro aperture about as unrepairable as it gets, iFixit finds
Repairability improvements can't lift last year's score as camera complexity and screen-frame concerns remain
CISA alerts of active exploitation of three Linux kernel flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. [...]
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?
ShinyHunters defaced Cl0p's Dark Web site and claims to have stolen victim data, potentially exposing organizations that paid ransoms to renewed extortion attempts.
Meta Muse AI app flaw lets local malware redirect dictation traffic
Ad biz promises users control while bug could expose voice prompts
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
Victims have been identified in Africa, including in Kenya and Uganda.
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
'Humans are responsible, not the AI,' argues Scott Bessent as he calls out OpenAI agents' hack of Hugging Face
Google smacks forehead, realizes $899+ thin-and-lights were what it was missing
'A new category,' insists the Chocolate Factory, not a premium Chromebook - yet some of the family resemblance remains
WordPress Click2Shell flaw lets hackers execute PHP on the server
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platf…
Tech Bytes: Why Beaver Excavating Tapped Firezone for WireGuard-Powered VPN (Sponsored)
Today on the Tech Bytes podcast we talk VPNs. Our sponsor is Firezone, which offers a secure remote access solution built on Wireguard. But instead of just hearing from Firezone, w…
Microsoft to retire Microsoft 365 Companion apps in December
Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. [...]
NB592: AWS Recommends UAE Migration; FCC Wants More Spectrum for Satellite Broadband
Take a Network Break! We start with listener follow-up on Arista’s vulnerability reporting, and Cisco ISE takes center stage for our Red Alert. Then we dive into EVA Networks, a st…
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a …
Google Hit With $463 Million Fine for EU Location Data Rule Breach
Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data. The post Google Hit With …
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds or account cr…
London neocloud Nscale takes its $1B loss to Wall Street
Rent-a-GPU firm reportedly seeks a valuation of up to $35B in New York IPO