News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines (opens Security Week in a new tab)
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek.
-
Just 3% of companies have recorded cost savings with AI (opens IT Pro in a new tab)
More than one-third of AI projects have run over budget, but business leaders are still bullish on investment
-
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record (opens Help Net Security in a new tab)
About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container...
-
Beyond deterministic worms: Preparing the SOC for reasoning adversaries (opens CSO Online in a new tab)
In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in at least 100 countries. The National Audit Office called it the largest cyberattack ever to hit the NHS in England. At least 80 of 236 hospital trusts were infected or disrupted, an...
-
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor (opens Security Week in a new tab)
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop. The post $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor appeared first on SecurityWeek.
-
Hackers are using GitHub to push fake ChatGPT and Claude apps (opens IT Pro in a new tab)
A Russia-linked campaign tricks users into installing infected software by by impersonating popular AI desktop applications
-
Hackers are using GitHub to push fake ChatGPT and Claude apps (opens IT Pro Security in a new tab)
A Russia-linked campaign tricks users into installing infected software by by impersonating popular AI desktop applications
-
As Russia's Cyberwar Evolves, Belarus Steps Forward (opens Dark Reading in a new tab)
The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
-
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw (opens The Hacker News in a new tab)
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13...
-
Hacked fridges and another Google Cloud outage (opens IT Pro Security in a new tab)
On this week's episode, ITPro news and analysis editor Ross Kelly joins Bobby and Scott to talk through the biggest stories of the month
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV (opens The Hacker News in a new tab)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0)...
-
Transforming Talent Acquisition into Strategic Workforce Advantage (opens The CIO Magazine in a new tab)
Terry Dawson is Commercial Managing Director at La Fosse, the UK’s largest employee-owned technology talent and transformation business, and a member of its senior leadership team. He leads La Fosse’s Business Systems, Change and Transformation, and International teams across Recruitment, Executive...
-
Fake IT help desk callers got by on little more than names and email addresses (opens Help Net Security in a new tab)
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access ended in ransomware...
-
What exactly is ISOC? And what does it mean for you? (opens Help Net Security in a new tab)
Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected in the emergence of this new category. For years...
-
Scammers rebuild fake shopping sites within hours of a takedown (opens Help Net Security in a new tab)
One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes, according Akamai’s Fraud and Abuse Report 2026. A ticket scam used a similar...
-
Smart TVs can harbor unpatched security flaws and track what you watch (opens Help Net Security in a new tab)
Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and September. Televisions...
-
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen (opens The Hacker News in a new tab)
Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far. Tether and Circle said they have frozen more...
-
Scaling agentic AI with confidence (opens CIO in a new tab)
Your AI agents are making decisions faster than your teams can review them. Governance requires the same speed. In order to accomplish their given tasks, agents gain access to new applications and business data around the clock. But every autonomous decision raises a question you’ll eventually have...
-
The AI trust deficit: Why explainability, not more automation, is the CIO’s next priority (opens CIO in a new tab)
An AI trust deficit occurs when an organization deploys autonomous AI agents faster than it can prove those agents are acting within policy. It’s the gap between what AI agents are doing and what CIOs can clearly explain to a board, auditor, or regulator. Closing that gap requires audit-ready...
-
PHP2Shell plus Fragnesia: A dangerous new route from web server to root (opens CSO Online in a new tab)
The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers...
