KPMG tech and data boss tells staff facing the boot he's getting promoted
Paul Henninger shares news of his move up via email as around 200 colleagues prepare for redundancy
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
FBI alleges covert recorder was plugged into a TV, with a second device later discovered in the employee's bag
The AI math isn't mathing as infrastructure spending forecast to outstrip expected revenue
Analyst predicts 80% of neoclouds will disappear as standalone businesses by 2030
UK government chases AI while aging IT leaves it exposed, PAC chair warns
Whitehall's digital staffing falls short of its own target as ministers leave the skills gap unresolved
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it …
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozil…
It won't kill you, or humanity, to get off the AI upgrade treadmill
New models arrive so fast, we already have more new tech than it's possible to understand in a career
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilit…
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Includ…
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities …
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is…
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
37% of ransomware attacks involve psychological or physical threats, global survey found
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation.…
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
When quantum vendor IonQ on Sunday announced a $1.2 billion all stock deal to take over cybersecurity vendor Elisity, it spoke of a near-term future where enterprise quantum cybers…
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to…
Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's reco…
Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI. The post Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Comp…
Anthropic reinvents source control as Claude floods the world with code
When continuous integration gits you down, there's always an AI-tuned monorepo
OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record…
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
The First Social Network: In rural Argentina residents send messages w AM radio
Article URL: https://www.newyorker.com/magazine/2026/10/19/the-first-social-network Comments URL: https://news.ycombinator.com/item?id=50079701 Points: 164 # Comments: 61
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF f…
North Korea Phishes Ukrainians for War Intel
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capab…
CISA director touts private partnerships after agency killed many
Nick Andersen wants to work with private industry on security, but the Trump admin has taken an axe to such efforts.
Anthropic Finds Ingredients for Future AI Worms
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
OpenAI's dot assistant burned 300K+ tokens in a day without a single prompt
Geordie's tests recorded 155 activity traces and multiple subagents after dot was given read-only permissions
Tech Bytes: Get Ahead of AI-Driven Vulnerabilities with Frontier Virtual Patching (Sponsored)
Today on Tech Bytes we explore frontier virtual patching with sponsor Palo Alto Networks. Palo Alto Networks recently announced frontier virtual patching as part of PAN-OS 12.2. We…
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-da…