News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets (opens The Hacker News in a new tab)
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system...
-
ElevenLabs doubles its valuation to $22bn in a $300m share sale (opens The Next Web in a new tab)
ElevenLabs is now worth $22bn, double its $11bn valuation in February. Employees and existing investors sold $300m of shares, the voice AI company said in a blog post on Wednesday. Wellington Management and T. Rowe Price led the deal. Six investors bought in for the first time. They are EQT...
-
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks (opens The Hacker News in a new tab)
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360...
-
FTC opens probe into OpenAI, Anthropic and other AI labs (opens The Next Web in a new tab)
The US Federal Trade Commission is investigating OpenAI, Anthropic and other AI labs over the risks their technology poses to consumers. An FTC spokesperson confirmed the probe on Wednesday to CNBC and CBS News. The New York Post first reported the probe earlier on Wednesday, citing administration...
-
DoorDash launches a text-to-order AI agent that runs inside Apple Messages (opens The Next Web in a new tab)
DoorDash has opened an American waitlist for an AI agent that takes food orders inside Apple’s Messages app, using your order history and stored payment method. Bloomberg’s testing found it giving prices that differed from the app, which in Europe is a consumer law question rather than a bug...
-
Amazon launches a faster Fire TV Stick 4K with a new remote design (opens The Next Web in a new tab)
Amazon has launched a faster Fire TV Stick 4K with a redesigned remote, running its own Vega operating system rather than Android. That switch also removes sideloading, and the Digital Markets Act cannot require Amazon to restore it, because none of its operating systems is designated. Amazon has...
-
F.T.C. Investigates OpenAI and Anthropic Over Potential Consumer Harms (opens NY Times in a new tab)
The agency will examine whether A.I. labs have broken federal laws prohibiting companies from unfair and deceptive practices.
-
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager (opens The Hacker News in a new tab)
Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin...
-
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net (opens Dark Reading in a new tab)
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.
-
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures (opens The Hacker News in a new tab)
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another...
-
ElevenLabs opens Brussels office and plans to triple its Belgian team (opens The Next Web in a new tab)
ElevenLabs has launched in Belgium and opened an office in Brussels, the voice AI company said on Wednesday. The office is in the European District, close to the main EU buildings. ElevenLabs has named Falke Van Onacker to lead its Belgian business and plans to triple its local team this year. Most...
-
A Biotech Founder Makes the Moral Case for Gene-Editing Human Embryos (opens Wired in a new tab)
The practice of editing the genes of embryos remains highly controversial and risky, but Origin Genomics founder Cathy Tie argues its a “moral imperative” to address hereditary diseases.
-
At a private AI retreat, the vendor told us the tool won’t save you (opens The Next Web in a new tab)
Grady Sokaras, Zapier’s head of sales, opened a session at the company’s private AI retreat with a line about the kind of product Zapier sells. “A tool is never the solution,” Sokaras said. A company that buys the product and expects a transformation gets “one more piece of dependency or...
-
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery (opens Security Week in a new tab)
Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution. The post Google: AI Is Changing the Pace and Profile of Vulnerability Discovery appeared first on SecurityWeek.
-
AI-Found Vulnerabilities More Likely to Enable RCE, Google Says (opens Infosecurity Magazine in a new tab)
AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise
-
Unsloth’s model picker had a code-execution problem (opens CSO Online in a new tab)
True to its name, AI-model-training tool Unsloth would do more work than it was asked to when developers checked out a model: It would also allow arbitrary code to execute on their machines. Pillar Security found that simply selecting a model in Unsloth Studio caused the application to download and...
-
DeepSeek and Huawei Target a Key Source of Nvidia’s A.I. Dominance (opens NY Times in a new tab)
In China’s push for self-reliance in artificial intelligence, DeepSeek and Huawei have teamed up to develop software tools for advanced chips.
-
Jim Lanzone on Yahoo’s plan to fix AI search with more links to publishers (opens The Next Web in a new tab)
Yahoo already holds what AI agents ask people for first, their email and their calendar, CEO Jim Lanzone told TNW. He said Yahoo will launch more personalised, agentic products “in the months ahead”. Lanzone spoke to TNW in an exclusive interview at HumanX in Amsterdam on 23 September, for the...
-
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability (opens Security Week in a new tab)
WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS. The post WatchGuard Patches Critical Fireware OS Code Injection Vulnerability appeared first on SecurityWeek.
-
IONNA launches driver council as its US fast-charging network doubles (opens The Next Web in a new tab)
IONNA, the electric vehicle charging network established by eight car manufacturers, now operates over 180 charging sites in the United States, which is more than twice the number it had at the beginning of 2026. The company, based in Durham, North Carolina, is launching a council of well-known...