Aggregated from vendor advisories, security research, and industry publications.
IBM and ServiceNow are teaming up for new services they say will help enterprise customers bring aging legacy environments into an AI-ready infrastructure. The collaboration will combine IBM’s AI, data, and automation capabilities and ServiceNow’s AI platform for a variety of offerings that will modernize aging systems, enable autonomous IT operations, and help organizations evolve existing sy…
Initial methods suggest attackers had likely mapped out Ivanti's asset landscape upfront and acted quickly once the exploit became public.
Language model builds on diffusion tech to boost output performance by up to 4x, claims Chocolate Factory
Another day, another Windows exploit code
Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controlled code or hand over…
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed GreatXML, a day after they published an exploit for M…
We're all familiar with AI cranks by now, but what about crank-powered AIs?
AWS better at running chip fabs than their mouths
A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion at…
PARTNER CONTENT: Recognized for breakthrough achievements in FWA, Network Ecosystem, and Native AI Baseband, ZTE solidifies its role as a key driver of Indonesia’s 5G-Advanced and …
iFixit teardown reveals two-year-old, mid-range, Chinese Android
'We have no reason to believe that our data or systems have been compromised. We are in the process of contacting the Maine Attorney General's office to have this removed.'
Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million. [...]
You can learn a lot about IPv6 from books, videos, and podcasts (such as this one), but it’s hard to beat hands-on experience. John Osmon joins our hosts to discuss how to set up y…
PARTNER CONTENT Your genomics pipeline is probably failing 30% of the time and you're paying for all of it
Persistent containers promise native tooling and strong isolation, though docs, features, and memory handling need polish
As a network engineer, you’ll end up with a lot of weird problems to solve. Many times, the problems will not be with the network at all, and it’ll be up to you to figure it all ou…
Katalyst's LINK spacecraft is go for integration, with a launch from Kwajalein expected within weeks
Even the best segmentation strategy will fall apart without constant oversight and disciplined operations.
The only solution is to buy an upgrade (or switch providers)
AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why integrated security, automation, and recovery are be…
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks. The post Oracle Addresses PeopleSoft Vulnerabilit…
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise. The post Alert Fatigue Is Becoming…
Satnav parts designed and manufactured in the EU, but using GlobalFoundries to produce them
Most good security work is invisible by design. Today is the exception. The 2026 Cybersecurity Stars Awards winners are announced across 95 subcategories in four main award catego…
It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there's a supply chain attack kit in a public …
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries. The post CISA Directs Federal Agencies to Prioritize…
Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution te…
As OpenAI courts investors and chases enterprise customers, Forrester says today's AI leader could become tomorrow's cautionary tale
The Personal Information Protection Commission (PIPC), South Korea's data protection regulator, has fined e-commerce giant Coupang a record 624.6 billion won (roughly $409 millio…