News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
CISA urges federal agencies to patch after PHP exploits observed (opens IT Pro in a new tab)
The PHP vulnerabilities sent the web into a frenzy last week as organizations rushed to apply patches
-
CISA urges federal agencies to patch after PHP exploits observed (opens IT Pro Security in a new tab)
The PHP vulnerabilities sent the web into a frenzy last week as organizations rushed to apply patches
-
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries (opens Infosecurity Magazine in a new tab)
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware
-
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison (opens Security Week in a new tab)
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek.
-
Sony Wants You to Forget About Discs With Its Gorgeous Transparent Controllers (opens Wired in a new tab)
Sony has new, spiffy see-through controllers and covers for its PlayStation 5 that let you see the hardware guts inside.
-
ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls (opens Help Net Security in a new tab)
ControlUp has announced Pulse AI Resolve, the real-time investigative AI layer of the Pulse AI ecosystem. A major enhancement of ControlUp’s endpoint self-service capability, previously ControlUp Connect, Pulse Resolve brings AI-powered investigation and remediation, built-in governance controls...
-
Senators Demand to Know if Dr. Oz Collaborated With Election Denial Groups (opens Wired in a new tab)
A far-right campaign claiming leftists are stealing votes from nursing home residents has centered on changing guidance from Mehmet Oz’s Centers for Medicare and Medicaid Services.
-
Compromised camera management software gives attackers a way into corporate networks (opens Help Net Security in a new tab)
Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents in September and October back to a compromised application. An unidentified application The company’s analysts haven’t been...
-
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots (opens Dark Reading in a new tab)
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
-
Digitate adds AI agents for patch planning, service desks, and SAP operations (opens Help Net Security in a new tab)
Digitate has announced ignio Hummingbird, the latest release of its agentic AIOps platform. Hummingbird introduces AI agents that bring operational expertise to specific IT tasks, move from diagnosis through approved action and verification, and operate within enterprise change, approval and audit...
-
How to Overcome Ageism Against Women in the Workplace? (opens CTO Magazine in a new tab)
Ageism Against Women Is Holding Talent Back. It’s Time for Leaders to Act. Diversity, equity, and inclusion (DEI) is often discussed through the lens of gender, race, and background. Age is just as important. Yet it remains one of the most overlooked forms of workplace bias. Women are usually...
-
345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD (opens Help Net Security in a new tab)
Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October, listing email addresses and email messages as the...
-
Swimlane connects custom detections to AI-led investigation and response (opens Help Net Security in a new tab)
Swimlane has announced new capabilities in the Swimlane Turbine platform that allow security teams to run their own detection logic against large volumes of data and send resulting alerts directly into Swimlane AI SOC for investigation and response. The October release also adds two-way Model...
-
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber (opens Infosecurity Magazine in a new tab)
Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls
-
VikingCloud gives businesses a scorecard for AI governance readiness (opens Help Net Security in a new tab)
VikingCloud has launched AI Governance Services, a new set of compliance and risk assessments that find the AI tools in use across a business, show where security controls fall short, and deliver a remediation plan to close the gaps. Multi-location brands struggle to hold every location to one...
-
Energy Giant Engie Notifies Customers of Supply Chain Breach (opens Infosecurity Magazine in a new tab)
An undisclosed number of Engie customers have had their data compromised after a supply chain incident
-
Upwind Security Raises $400 Million at $3.8 Billion Valuation (opens Security Week in a new tab)
The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security Raises $400 Million at $3.8 Billion Valuation appeared first on SecurityWeek.
-
AI Is Finding a Flood of Bugs, and Silicon Valley Is Rushing to Fix Them (opens NY Times in a new tab)
A.I. has uncovered a horde of software flaws, which engineers are racing to fix before they can be exploited and abused by hackers.
-
Chrome and Firefox Updates Patch Over 200 Vulnerabilities (opens Security Week in a new tab)
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.
-
Upwind secures $400 million to protect AI across endpoints, code, and cloud (opens Help Net Security in a new tab)
Upwind Security has raised $400 million in Series C funding to expand its cloud and AI security platform, bringing the company’s total funding to more than $800 million. Bessemer Venture Partners led the round, with participation from all existing Upwind investors, including Greylock Partners...