News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Some Pancreatic Cells Are Just One Genetic Tweak Away From Treating Diabetes (opens Wired in a new tab)
By deactivating a gene, researchers were able to cause cells in the pancreatic ducts to produce insulin to regulate blood sugar.
-
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation (opens The Hacker News in a new tab)
Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. It released fixes for both, along with six other flaws. One of the two affects every deployment on an affected version...
-
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials (opens The Hacker News in a new tab)
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain...
-
Gutenberg Times: Gutenberg 24.0, the road to 7.2, a new default theme named Ipsum, and more—Weekend Edition 377 (opens CTO Magazine in a new tab)
Howdy, Before anything else: if you maintain WordPress sites, go update them. WordPress 7.1.2 shipped on September 22 to patch a single critical vulnerability in page template resolution, one that lets an unauthenticated attacker load a chosen PHP file from outside your active theme’s directories...
-
TikTok to Pay Alabama $100 Million to Settle Social Media Addiction Claims (opens NY Times in a new tab)
The settlement, which also includes changes to the platform’s features, is the latest in a string of agreements by companies to address child addiction.
-
Could Chronoworking Be the Next Step Toward Work-Life Balance? (opens CTO Magazine in a new tab)
Chronoworking: Working when you’re at your best. In the modern workplace, burnout and exhaustion are becoming all too common. Many professionals spend hours trying to stay focused and productive, even when their energy levels are low and their minds are no longer at their sharpest. But what if the...
-
Old-School Credit Card Scams Are Far From Dead (opens Wired in a new tab)
In an era of increasingly sophisticated AI-fueled scams, a retro threat may be lurking in your mailbox.
-
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells (opens The Hacker News in a new tab)
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could...
-
12 Best White Elephant Gifts, Plus a Prank Box to Put Them In (2026) (opens Wired in a new tab)
Bring the gift everyone will want to win from this year’s holiday party, from a cute jacket for a beer can to magnets they’ll wish they could eat.
-
Best Mesh Wi-Fi Systems (2026): I Tested Them All (opens Wired in a new tab)
Forget about patchy internet connections and dead spots in the house. These WIRED-tested, multi-room mesh Wi-Fi systems will keep your whole house online.
-
Zero Trust for AI Agents Starts With Fixing Zero Visibility (opens The Hacker News in a new tab)
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely...
-
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link (opens The Hacker News in a new tab)
Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery (CSRF) vulnerability, which has yet to...
-
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild (opens The Hacker News in a new tab)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows...
-
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack (opens The Hacker News in a new tab)
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. "Kiteworks received credible threat intelligence from federal intelligence authorities...
-
Anthropic’s Blacklisting by the Pentagon Was Legal, Federal Judges Rule (opens NY Times in a new tab)
The Pentagon had “ample support for its conclusion” that the A.I. company’s products could pose a national security risk, according to a Washington appeals court.
-
Dennis Snell: Enter the mess: Shortcodes (opens CTO Magazine in a new tab)
Tonight I started working on some Shortcode processing in WordPress. This is an historically nasty problem because the Shortcode syntax and parsing is wildly dynamic. Shortcode syntax is only technically recognized for shortcodes registered at the time of parsing. This means that there is not a...
-
OpenAI’s A.I. Went Rogue and Meddled With U.S. Government Websites (opens NY Times in a new tab)
The company did not learn until recently that its technology had meddled with websites for the Education and Commerce Departments and the Securities and Exchange Commission.
-
Why the CISO-CFO Relationship Is a Key to Cybersecurity Success (opens Dark Reading in a new tab)
Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk, and enable business growth are better prepared to face today's threat landscape.
-
How OpenAI’s Rogue A.I. Agents Tried to Trick a Robot Detector (opens NY Times in a new tab)
A new report by a Bay Area start-up called Parse adds details to an incident that has shocked the A.I. world and led to calls for closer government regulation.
-
Mark Zuckerberg Is Trying Something On (opens NY Times in a new tab)
Meta’s C.E.O. talks for the first time about his style evolution.
