Hashicorp co-founder Mitchell Hashimoto says GitHub ‘no longer a place for serious work’
Bemoans frequent outages that mean he’ll move Ghostty elsewhere
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Future holiday horror: ‘A robot lost my luggage in Tokyo’
Haneda airport will start testing humanoid robots, because everything that gets a plane flying was designed for our species
The future of software development: Now with less software development
At AI Dev 26 x SF, code slingers confront their relationship with AI
Oracle plans to power its New Mexico mega datacenter with a 2.45GW fuel cell farm
No sense in OpenAI stressing over its cloud bills if Oracle can't get the lights on
BlueNoroff Uses Fake Zoom Calls to Turn Victims Into Attack Lures
The North Korean group is using stolen victim videos, AI-generated avatars, and fake Zoom calls to scale malware attacks against cryptocurrency executives.
Cloudera had US candidates send resumes to a fake email address, DoJ charges
PERM filings require employers to show American workers had a fair shot at the role
NSA Chief During Snowden Affair Shares Regrets, Reflections 13 Years Later
Chris Inglis was the head civilian in charge at the NSA when the Snowden leaks exploded. He gets candid about mistakes the organization made, and what CISOs need to know about spot…
Feuding Ransomware Groups Leak Each Other's Data
When 0APT and KryBit attacked each other, they exposed infrastructure and operational data, giving defenders rare insight into ransomware operations.
OpenAI jumps out of Microsoft's bed, into Amazon's Bedrock
Altman's gaggle of GPTs now available in limited preview in an AWS region near you
Vidar Rises to Top of Chaotic Infostealer Market
The malware has filled the gap created by last year's law enforcement takedowns of Lumma and Rhadamanthys.
Don't pay Vect a ransom - your data's likely already wiped out
'Full recovery is impossible for anyone, including the attacker'
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to ob…
Trump admin pays wind developers to quit, back fossil fuel projects
DoI offers up to $885M if they abandon offshore wind projects
HW076: Linux for the WLAN Professional
What separates good Wi-Fi engineers from ones who really can troubleshoot anything? Linux. Understanding Linux—from packet capture workflows to using tcpdump to how USB NIC drivers…
Vintage chatbot lives in the past like an elderly relative
Talkie's training data stops at the end of 1930, and its creators hope it'll help us better understand how AI thinks
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign
A cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets Minecraft players with a new stealer called LofyStealer (ak…
IBM's AI coding 'partner' Bob hits general availability
80,000 internal guinea pigs, Bobcoins, mainframe dreams and a name that really should have raised more flags
Amazon unveils a Copilot for all your apps
Retailer touts 'teammates' and always-on context as it muscles into an already crowded enterprise market
2026 network outage report and internet health check
ThousandEyes, a Cisco company, monitors how ISPs, cloud providers and conferencing services are handling any performance challenges and provides Network World with a weekly roundup…
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
Article URL: https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 Comments URL: https://news.ycombinator.com/item?id=47936479 Points: 451 # Comments: 93
PP107: Why Now’s the Time to Prepare for a Post-Quantum World (Sponsored)
A cryptographically relevant quantum computer is, at some point, going to emerge that can crack modern encryption. But we don’t know when, so it’s tempting to set this problem asid…
Infected Cisco firewalls need cold start to clear persistent Firestarter backdoor
Security researchers have discovered a chilling backdoor aimed at Cisco System firewalls that exploits unpatched vulnerabilities to maintain persistence, even after patching. This …
Fresh Wave of GlassWorm VS Code Extensions Slices Through Supply Chain
Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating malware.
Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak
Names, phone numbers, physical addresses also included in Shiny Hunters alleged data dump
AI data bursts force rethink of data center networking at Backblaze
Cloud storage provider Backblaze has been ripping out its 100-gigabit links and replacing them with 400-gigabit links because AI has changed how traffic flows inside their data cen…
VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi
Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware due to a critical flaw in its encryption implementation acros…
Despite proposed science cuts, NASA boss says 'We haven't canceled anything yet'
That 'yet' is sure doing a lot of heavy lifting if the budget for science is slashed
Tenstorrent’s Galaxy Blackhole AI servers escape the event horizon
RISC-V-based systems pack 32 Blackhole accelerators in a 6U, $110K chassis
Brussels orders Google to share Android's AI sandbox with the other kids
DMA enforcers want rival assistants to get same deep device access as Gemini
Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About
Every security program is betting on the same assumption: once a system is connected, the problem is solved. Open a ticket, stand up a gateway, push the data through. Done. That as…