News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories (opens The Hacker News in a new tab)
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and traces of an intrusion. Apparently, keeping things secure is a problem on both sides of the fence. The rest of the...
-
Dealroom CEO says Europe’s first trillion-dollar startup may already exist (opens The Next Web in a new tab)
Europe’s venture-backed companies could be worth more than its industrial base within five years, Dealroom founder and chief executive Yoram Wijngaarde said. He spoke at Wave by Vento in Turin on Thursday. “I think that the VC-backed ecosystem is going to overtake our industrial base in terms of...
-
Trump to unveil $2.4B in AI credits to boost federal research (opens The Next Web in a new tab)
Five American technology companies are pledging $2.4B in AI tools and compute credits to federal science at a White House summit, with Nvidia giving $1B and Google the smallest share at $150M. The same administration suspended Microsoft from a residency programme hours earlier, and Britain’s...
-
SAP’s Sean Kask: software firms must become AI companies or perish (opens The Next Web in a new tab)
Established software companies have to rebuild their products around AI, not add it as one more feature, SAP’s chief AI strategy officer Sean Kask said. He spoke at Wave by Vento in Turin on Thursday. “Like the famous quip that every company is becoming a software company, every software company...
-
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks (opens The Hacker News in a new tab)
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026 alert on those reports and...
-
Cisco Patches a Dozen Critical Vulnerabilities (opens Security Week in a new tab)
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek.
-
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML (opens The Hacker News in a new tab)
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel. The cybersecurity company...
-
[Podcast] Exploring The Intelligent Endpoint (opens CIO Dive in a new tab)
Discover how AI-powered PCs, Intel AMT, and Kyndryl’s managed services are reshaping endpoint management to create a smarter, more secure, and resilient workplace.
-
Attackers Hijack Three ccTLDs to Obtain Google Certificates (opens Infosecurity Magazine in a new tab)
Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates
-
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms (opens The Hacker News in a new tab)
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...
-
5 rules CIOs must rewrite for the frontier AI era (opens CIO in a new tab)
For decades, cybersecurity benefited from a constraint that was easy to take for granted: Attackers were limited by human capabilities. Finding vulnerabilities and developing reliable exploits required expertise. Reconnaissance, lateral movement, and adaptation took time and effort. That friction...
-
ASOS Confirms Data Breach Linked to Stolen Employee Credentials (opens Infosecurity Magazine in a new tab)
The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers
-
AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma (opens CSO Online in a new tab)
Throughout this year, Amazon Web Services (AWS) has repeatedly had to patch autonomous agent security holes, which have then reemerged in slightly different forms, according to cybersecurity researchers at Palo Alto Networks’ Unit 42 and at Zenity Labs. But the problem is not with AWS, which seems...
-
The New Alexa Tablets Feel Like a Blueprint for an Amazon Phone (opens Wired in a new tab)
Amazon is rumored to be making a smartphone, and the Alexa-powered experiences on its new tablets give us a taste of what might come if that happens.
-
Amazon Alexa Tablet 12 Pro, Alexa Tablet 11, Alexa Tablet 8: Specs, Features, Price (opens Wired in a new tab)
The three new aluminum Alexa Tablets now run Android with full access to the Google Play Store. There are versions for kids too.
-
Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware (opens Infosecurity Magazine in a new tab)
Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024
-
Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls (opens Help Net Security in a new tab)
The FBI and French law enforcement have seized two websites that sold hacked and stolen sexually explicit images and videos of young women and girls, and arrested their suspected administrator in northern France. Seizure notice (Source: US Department of Justice) The U.S. Attorney’s Office for the...
-
YouTubers targeted with fake sponsorships and “channel verification” phishing (opens Help Net Security in a new tab)
Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing fake collaboration platform, the fraudsters walk them through...
-
Writing the Next Chapter (opens Dark Reading in a new tab)
Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share.
-
I audited an award-winning AI project. The case study left out the cloud bill (opens CIO in a new tab)
I have audited enough celebrated technology rollouts to notice a quiet omission across the industry: nobody talks much about what happens to the unit economics once the pilot ends and the software enters daily production. I have anonymized the company and changed identifying details for...