Aggregated from vendor advisories, security research, and industry publications.
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.
DeepSeek V4.1 Flash proves that just because you build a bigger model doesn't mean you need more GPUs to serve it
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' c…
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. [...]
PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have c…
There's no place like the Home directory, but the Documents folder is sometimes nicer
Redmond's coders get the tool to help them scrub memory bugs off Windows
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center …
It’s a better interface, can speed installations, and drives IaaS sales too
The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.
GPT-Live-1 makes speaking to AI models more fluid
Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun
A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]
Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users f…
Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board. The post Mandiant Founder Kevin Mandia Joins Amazon …
War is peace. Freedom is slavery. Privacy is surveillance
Acquisition gives open source CSS framework 'a stable long-term home'
Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. [...]
Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing …
Human operator: don't touch CIS orgs. AI agents: look a squirrel!
Chris Grundemann joins Alexis and Kevin to discuss his career evolution from pulling cable to co-founding the Network Automation Forum. Chris shares insights on the challenges of a…
New report points finger at OpenAI bots that hijacked a German wiki for improper use of an additional 20 websites, and 14 fetching services
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service …
Nvidia continues to commit major dollars to AI companies, this time investing $3.5 billion in chipmaker MediaTek in return for licensing Nvidia technology. Nvidia will purchase …
Gartner reckons nearly a third of displaced employees may be rehired by 2029 – at a premium
Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa. The post Cybersecurity M&A Roundup: 33 Deals Announced in A…
Can help you pick the perfect spot for your future evil lair, or boffins make discoveries about Earth's satellite
A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers. [...]
Cisco Talos says two recently patched Secure Firewall Management Center (FMC) vulnerabilities have been exploited by three separate threat clusters linked to ransomware and state-s…