Agentic security is the billion-dollar challenge for some clever startup to solve
High time to stop kicking the security can down the road, investor tells The Reg
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
North Korean WaterPlum hackers infected 30,000 devices worldwide
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transfer…
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys fo…
AI boom could leave an e-waste trail that wraps 6 times around Earth
Report says estimates focused on GPUs miss the mountains of power, cooling, and networking gear destined for scrap
Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach…
Viral AI actress' hotline face-scans every caller, watches their mood
AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video call service face-scans every caller for an 18+ ag…
Calling viral AI actress Tilly Norwood? Agree to a face scan first
AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video call service face-scans every caller for an 18+ ag…
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then rea…
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote cod…
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score…
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The develop…
Firefox 156 arrives with a forest of forks in its wake
From Waterfox to LibreWolf and Pale Moon, there's a browser for almost every Mozilla dissenter
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French secu…
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalo…
Anthropic decides to support OpenAI's markdown instructions spec
Devs cheer relief from compatibility headache
Microsoft agentically ports Copilot runtime to Rust for $120K
The Rust compiler remains unperturbed by the antics of the LLM
Friday Squid Blogging: On Squid Egg Sacs
Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and s…
Virginia governor wakes up to fact datacenters have become political cancer
Executive order puts the kibosh on NDAs, limits permitting, and calls for stiffer environmental protections
Compsci grads facing recession-like job prospects thanks to AI
Slinging coffee and waiting tables ain't just for liberal arts grads any more, say Census Bureau economists
Cisco Zero-Day Highlights API Endpoint Authentication Issues
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
EY Survey Finds Autonomous AI Implementation Outpaces Oversight
A new survey of senior AI execs shows that while organizations are rapidly deploying AI and autonomous systems, their process and controls are not keeping pace.
Claude Code revamps projects so you can work and pay in parallel
Running multiple Claude sessions at once means less waiting around to hit your usage limit
HN842: How Network Engineers Can Prepare for a Post-Quantum World
Q-Day signals the public emergence of a cryptographically relevant quantum computer that can break public key encryption. The date of Q-Day is unknown but the tech industry is maki…
TNO073: Network Automation Forum: From Simple Survey to Global Community
In this crossover episode, Scott invites William Collins and Eric Chou to do the hosting so he and Network Automation Forum (NAF) cofounder Chris Grundemann can discuss how their c…
MFA Won't Save You From OAuth Consent Abuse
MFA is essential, but it cannot replace OAuth governance, least-privilege scopes, consent monitoring, and rapid revocation.
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine. Kernel maintain…
Huawei aims to deliver faster AI chips, faster
Huawei is accelerating its AI chips development, bringing forward the release of the next two models in the family powering its AI computing clusters by three to nine months. It…
Researchers used Claude to hack OpenAI employees' ChatGPT accounts
Agentic exploits for the win (again)
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to inst…