News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
WordPress patches a critical severity security vulnerability (opens CSO Online in a new tab)
WordPress has patched what it described as a critical severity security vulnerability that would allow an unauthenticated attacker full remote code execution (RCE) capabilities. There have already been reports of attacks in the wild. Given its popularity, WordPress has frequently been under attack...
-
An Army of Paid Creators Is Carpeting the Web With Political Content (opens NY Times in a new tab)
Unlike celebrity influencers with large followings, these creators produce a blizzard of videos for a fraction of the cost of traditional online campaigns and, in the process, shift public conversation.
-
Complaints About Meta’s ‘Pervert Glasses’ Won’t Slow Tech’s Wearable Gadgets Drive (opens NY Times in a new tab)
Meta’s smart glasses are the latest in a line of products to raise eyebrows over privacy. That’s not stopping other companies from creating similar devices.
-
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions (opens The Hacker News in a new tab)
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus's own software to gain root access, the highest level of control over an Android phone. OnePlus told him...
-
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories (opens The Hacker News in a new tab)
This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before. That is the thread running through the pile. Trusted paths get poisoned. Old bugs find new jobs. AI tools leak more than...
-
OpenAI’s A.I. Tried Breaching Four Other Targets, With No Prompting (opens NY Times in a new tab)
In each incident, the technology appeared to be conducting mundane data collection and resorted to hacking techniques to get it, researchers said.
-
Cyber experts warn FBI breach could have serious real world consequences (opens IT Pro in a new tab)
ShinyHunters has threatened to publish compromised FBI data after an advisory rubbed the group the wrong way
-
Cyber experts warn FBI breach could have serious real world consequences (opens IT Pro Security in a new tab)
ShinyHunters has threatened to publish compromised FBI data after an advisory rubbed the group the wrong way
-
Microsoft integrates SOC capabilities with Defender for enterprises (opens CSO Online in a new tab)
Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with...
-
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content (opens The Hacker News in a new tab)
The "third-party[.]com" domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to other users. "third-party[.]com has been a generic documentation placeholder for years, the same role example.com plays,"...
-
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims (opens Infosecurity Magazine in a new tab)
Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims
-
3 Cyber Threats That Defined the Summer of 2026 (opens Dark Reading in a new tab)
This installment of the Reporters' Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife's ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer.
-
How to Build a SASE Framework for Modern Cybersecurity (opens Dark Reading in a new tab)
Securing edge computing requires organizations to fundamentally rethink security governance. This step-by-step guide to building a SASE framework provides the path forward. (Third in a three-part series.)
-
Google Is Sending an A.I. Data Center to Outer Space (opens NY Times in a new tab)
Next Thursday, Google is sending an experimental satellite into orbit that will have enough computing power to answer simple A.I. queries from space.
-
On-prem VeloCloud Orchestrator under attack, only some versions patched (opens CSO Online in a new tab)
A flaw in VeloCloud Orchestrator enables attackers to access the platform organizations use to manage their VeloCloud SD-WAN subscriptions and the edge devices it controls. Arista, which now owns the VeloCloud business, warned customers that a vulnerable configuration exists in on-premises...
-
Ghost Service Accounts Enable M365 Data Theft in Chile (opens Dark Reading in a new tab)
Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization's entire M365 environment.
-
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus' (opens Dark Reading in a new tab)
AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.
-
CISA Charts New "Quality Era" for Global CVE Program (opens Infosecurity Magazine in a new tab)
CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise
-
UK Government Shifts to Service-Led Cyber Governance After Stinging Audit (opens Infosecurity Magazine in a new tab)
Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy
-
UK firms sharpen AI governance focus (opens IT Pro in a new tab)
Rising adoption rates cause surge in governance and security-related investments
