News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. Infosecurity Magazine

    Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe (opens Infosecurity Magazine in a new tab)

    The incident has reportedly resulted in temperatures being changed on supermarket refrigerators, reminiscent of an attack that affected French retailers last month

  2. Help Net Security

    Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115) (opens Help Net Security in a new tab)

    Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected servers, VulnCheck has found. Node-RED is a flow-based programming tool built on Node.js that lets users...

  3. CSO Online

    Network appliances go more than a year without patches as exploits speed up (opens CSO Online in a new tab)

    The median vulnerability on enterprise network appliances stays unpatched for more than a year, Microsoft’s own telemetry shows, even as the most damaging software flaws are being weaponized within days of disclosure. Microsoft Security Research reported the findings Monday in an analysis of...

  4. Help Net Security

    AI agents scale and speed up Chinese-linked attacks (opens Help Net Security in a new tab)

    A China-nexus espionage group used AI agents to attack more than 200 organizations in 11 days, CrowdStrike said last week. On Monday, Kaspersky published details of a separate campaign against educational institutions in Africa and Latin America, mounted by Chinese-speaking operators. Though the...

  5. Security Week

    Android’s November 2026 Updates Patch Over 200 Vulnerabilities (opens Security Week in a new tab)

    The most severe is a critical flaw in Framework leading to remote code execution without user interaction. The post Android’s November 2026 Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.

  6. IT Pro

    Time is running out to switch to digital phone lines, UK businesses warned (opens IT Pro in a new tab)

    Openreach says hundreds of thousands of firms still haven't made the change and could face major costs and disruption if they don't

  7. Security Week

    Critical Node-RED Flaw Exploited in Attacks (opens Security Week in a new tab)

    Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells. The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek.

  8. Wired

    Apple AirPods 5 Review: Better Than Before but Not Quite Pro (opens Wired in a new tab)

    Apple finally made ANC standard across the AirPods lineup. But should you still spring for the AirPods Pro 3?

  9. Wired

    The Endlessly Meme-able Steve Kornacki Is Not a Meme Person (opens Wired in a new tab)

    NBC’s go-to data guru also isn’t quite sure what a subreddit is.

  10. CIO Dive

    As the White House touts its AI task force, CISA is conspicuously missing (opens CIO Dive in a new tab)

    Without the cybersecurity agency, the new group could stumble as it tries to work with critical infrastructure operators on AI security, experts said.

  11. CSO Online

    Enterprises pay $100,000 a day for AI they never ordered (opens CSO Online in a new tab)

    Enterprises deploying large language models (LLMs) in production may be unknowingly footing the bill for someone else’s AI business. Google Threat Intelligence Group (GTIG) is warning of financially motivated LLMjacking campaigns in which cybercriminals hijack enterprise cloud and model access...

  12. Infosecurity Magazine

    NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure (opens Infosecurity Magazine in a new tab)

    The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028

  13. Wired

    ICE Is Inspiring Latinos to Vote in Historic Numbers (opens Wired in a new tab)

    “I did a Latino community event [and said] we have to actually fucking vote to tell these motherfuckers to fuck off,” Nevada secretary of state Cisco Aguilar tells WIRED.

  14. The Hacker News

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing (opens The Hacker News in a new tab)

    Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu's fixes for its three newest long-term-support releases remain in its opt-in testing channel with no date for a regular update. The flaw...

  15. The Hacker News

    The 4 Elements of Exposure Prioritization and How to Operationalize Them (opens The Hacker News in a new tab)

    Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attackers may never exploit, while higher-risk exposures sit, waiting in the queue. Gartner®’s report on exposure prioritization states that fewer...

  16. The Hacker News

    Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware (opens The Hacker News in a new tab)

    A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active since at least February 2025, the group has focused exclusively on Ukrainian targets, with a clear preference for law enforcement and...

  17. Wired

    ‘Our Risk, Their Reward’: Zohran Mamdani on AI and Data Centers (opens Wired in a new tab)

    Ahead of the midterms, WIRED talked to New York City’s mayor about data centers, AI in schools, and the future of the Democratic party.

  18. IT Pro

    Prospect union secures access agreement with Google in latest big tech win (opens IT Pro in a new tab)

    The union will be able to connect with Google workers and speak about the benefits of unionization

  19. IT Pro

    NCSC warns UK firms could face a torrent of AI-powered cyber attacks (opens IT Pro in a new tab)

    Critical national infrastructure organizations need to take advantage of the help available, and invest a great deal more

  20. IT Pro Security

    NCSC warns UK firms could face a torrent of AI-powered cyber attacks (opens IT Pro Security in a new tab)

    Critical national infrastructure organizations need to take advantage of the help available, and invest a great deal more