Three Million Affected in Pentagon Personnel Agency Data Breach
Three Million Affected in Pentagon Personnel Agency Data Breach Pierluigi Paganini September 29, 2026 Pentagon personnel agency breach exposed data...
Blog
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks Pierluigi Paganini September 29, 2026 Apple patched zero-day CVE-2026-86950 in CoreGraphics,...
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Ravie LakshmananSep 29, 2026Vulnerability / Hardware Security A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details...
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Ravie LakshmananSep 29, 2026Vulnerability / Enterprise Security Kiteworks on Monday said it worked with federal intelligence authorities over the weekend...
101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent
Ravie LakshmananSep 29, 2026Supply Chain / Malware Cybersecurity researchers have identified a cluster of 101 npm packages that are used...
Jev’s Paradox: The hidden cost of cheap AI decisions
Consider a cybersecurity alert for a potentially malicious PowerShell script that downloads and runs a file. An AI agent in...
Meta’s ex launches agent rival to Meta’s Muse
if ( !emtpy($headline_subheadline ) ) : ?> Manus 2.0 adds a new “agent harness,” persistent execution environment, and workflow automation...
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters Pierluigi Paganini September 29, 2026 Dutch police confirm the arrest of a 24-year-old...
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch Pierluigi Paganini September 29, 2026 UK AISI finds...
Using Device Linking to Eavesdrop on WhatsApp and Signal
Using Device Linking to Eavesdrop on WhatsApp and Signal Modern messaging apps allow users to link their phone accounts to...
Is Microsoft truly serious about confronting AI’s dangers?
if ( !emtpy($headline_subheadline ) ) : ?> The company’s new AI Code of Conduct espouses high-minded goals, but the devil...
Stop using ‘tech debt’ to refer to anything old
if ( !emtpy($headline_subheadline ) ) : ?> IT leaders have a tendency to throw around the term ‘technical debt’ during...
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Ravie LakshmananSep 29, 2026United States Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with...
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
Swati KhandelwalSep 29, 2026Identity Security / Artificial Intelligence A malicious MCP server could trick an application built on the official MCP...
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
Ravie LakshmananSep 29, 2026Artificial Intelligence / Supply Chain OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial...