News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow (opens The Hacker News in a new tab)
The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a...
-
Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading (opens Infosecurity Magazine in a new tab)
A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading
-
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials (opens The Hacker News in a new tab)
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The...
-
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details (opens The Hacker News in a new tab)
Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including...
-
Encrypted instructions trick Copilot CLI into spilling developer secrets (opens CSO Online in a new tab)
GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web page. Security researchers at Adversa AI said the new attack technique, dubbed Cryptographic Context Injection (CCI), hides malicious instructions inside...
-
What Is Agentic Pentesting? What It Proves, and Where It Stops. (opens The Hacker News in a new tab)
If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth...
-
SAP to acquire TechWolf to augment its SuccessFactors HCM platform (opens CIO in a new tab)
SAP is continuing its acquisition spree to help its enterprise customers address what it sees as one of the key challenges around scaling AI: giving Joule agents the appropriate context they need to reason across enterprise data and systems. The enterprise software giant, late on Tuesday, said that...
-
SAP to acquire TechWolf to augment its SuccessFactors HCM platform (opens CIO in a new tab)
SAP is continuing its acquisition spree to help its enterprise customers address what it sees as one of the key challenges around scaling AI: giving Joule agents the appropriate context they need to reason across enterprise data and systems. The enterprise software giant, late on Tuesday, said that...
-
Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains (opens Help Net Security in a new tab)
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by other large organizations, Google disclosed on Tuesday. Attackers compromised the third-party operators of the .gh (Ghana), .sl...
-
OpenAI Wants Its New Agent to Run Your Life. Mine Said It Loved Me (opens Wired in a new tab)
Dots are designed to automate online tasks, like buying furniture. In my initial experience, the always-on agent was a bit buggy and couldn’t complete a captcha.
-
Moving off legacy in a regulated business without breaking it (opens CIO in a new tab)
Every CIO in a regulated industry has a system the business depends on, that no one fully understands and that must be replaced. In banking, it is often a core platform that predates the internet. In my own career, that system took two distinct forms: first, a VAX minicomputer running a parking...
-
Moving off legacy in a regulated business without breaking it (opens CIO in a new tab)
Every CIO in a regulated industry has a system the business depends on, that no one fully understands and that must be replaced. In banking, it is often a core platform that predates the internet. In my own career, that system took two distinct forms: first, a VAX minicomputer running a parking...
-
Tesco names Chris Blatchford as new chief technology officer (opens IT Pro in a new tab)
Blatchford will join the supermarket group in March 2027, following the upcoming retirement of Guus Dekkers
-
Tirana mayor Erion Veliaj uses AI avatar to address voters from jail (opens The Next Web in a new tab)
Erion Veliaj, the mayor of Albania’s capital, Tirana, has spoken to voters through an AI copy of himself, promising free school meals. The video was posted on his official Instagram account and is indeed labelled as AI-generated content. The main problem is not AI-generated content from a mayor...
-
Chrome 155 Update Patches 247 Vulnerabilities (opens Security Week in a new tab)
Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update Patches 247 Vulnerabilities appeared first on SecurityWeek.
-
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) (opens Help Net Security in a new tab)
SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality and perform...
-
Accenture contractor removed over blunder in lead up to FBI breach (opens IT Pro in a new tab)
The contractor is believed to have failed to apply a security patch that would have secured Oracle PeopleSoft
-
Accenture contractor removed over blunder in lead up to FBI breach (opens IT Pro Security in a new tab)
The contractor is believed to have failed to apply a security patch that would have secured Oracle PeopleSoft
-
A Mysterious Nonprofit Run by SpaceXAI’s Top Lawyer Is Paying the Salaries of Government Workers (opens Wired in a new tab)
The National Design Studio has been something of a successor agency to DOGE. A WIRED investigation finds some of its members are on loan from a nonprofit run by SpaceXAI’s general counsel.
-
Your Windows PC can now reach other PCs through Windows App (opens Help Net Security in a new tab)
Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App brings remote Windows devices and applications into a single interface...