Aggregated from vendor advisories, security research, and industry publications.
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrat…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled …
Hyperscalers are getting decidedly twitchy about citizens’ reactions to their secretive data center construction plans, and are looking for ways to de-escalate some of the conflict…
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination…
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm
Thanks to a listener request, today’s episode talks about how to optimize your home network for gaming. Ethan and Holly discuss key factors such as latency, connection type, and ba…
AI infrastructure and AI software will shape the next $1 trillion dollars in IT spending growth, according to Gartner. The research firm is anticipating a significant rise in AI-dr…
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, …
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation,…
'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
Ned Bellavance gets to be the guest on today’s show to discuss foundational AI knowledge, inference training, and running local models with Kyler Middleton. Together, they break do…
Cisco announced a new operational technology security certification designed to help network and security professionals develop the skills needed to secure industrial environments …
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive interna…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi…
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie…
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those a…
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, us…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerab…
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm So…
Gartner kicked off its IT Symposium/Xpo this week and unveiled its annual list of the top strategic technology trends that organizations need to explore in the coming year. AI s…
AI agents are driving up telemetry costs and complicating network management as enterprises struggle to monitor the technology and control unexpected expenses, according to new res…
Keith Parsons and Nick Turner discuss the latest WLAN Pi OS updates including the integration of model context protocol (MCP) for AI agent interaction. They also discuss Wi-Fi 7 mu…
Many a IT professional is having the AI football tossed to them, “We need to implement in house AI, go do it”. If this is you, what questions should you be asking of yourself and o…
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary c…
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity…
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
In this sponsored episode Scott is joined by Stefano Gridelli, cofounder and CEO of NetBeez, to discuss continuous network experience assurance and moving beyond reactive troublesh…
John Capobianco returns to the show to discuss the latest developments in Model Context Protocol (MCP) and agentic infrastructure. John and host William Collins weigh in on the ong…
SolarWinds this week introduced Avior, an agentic AI system, to help network teams automate operational tasks, reduce alert noise, and improve infrastructure management while letti…