News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. The Hacker News

    Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns (opens The Hacker News in a new tab)

    The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised...

  2. CIO

    The infrastructure playbook for operational sovereignty: Why neoclouds need to offer sovereign AI (opens CIO in a new tab)

    For leadership teams at neoclouds, the explosive demand for AI represents a historic market opportunity. Enterprises are now embedding large language models and autonomous agents directly into their core business automation workflows to manage proprietary patent portfolios, optimize supply chains...

  3. CIO

    The euro-sovereignty playbook: How telcos are transforming into trusted AI factories (opens CIO in a new tab)

    Geopolitical reality is transforming digital architecture from a relatively minor procurement detail into a core pillar of corporate risk management. With regulations such as the European Union’s NIS2 Directive and the EU AI Act imposing data residency and algorithmic transparency mandates, global...

  4. CIO

    Securing the foundations of intelligence: Physical security and power sovereignty in AI factories (opens CIO in a new tab)

    As enterprise AI models expand, the competitive advantage belongs to leaders who look beyond software to secure physical infrastructure. Digital autonomy is fundamentally dependent on physical realities: resource availability, power independence, and robust data center supply chains. For the...

  5. CIO

    The auditor’s dilemma: Solving the explainability problem in public sector AI (opens CIO in a new tab)

    In public governance and highly regulated enterprise landscapes, automated decisions demand verifiable accountability. As AI systems transition from internal productivity tools to customer-facing or citizen-impacting utility systems, public sector CIOs and corporate compliance officers face extreme...

  6. The Hacker News

    Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. (opens The Hacker News in a new tab)

    Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and...

  7. The Hacker News

    Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win (opens The Hacker News in a new tab)

    A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the...

  8. The Hacker News

    PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network (opens The Hacker News in a new tab)

    Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25...

  9. Infosecurity Magazine

    Japan’s GMO Internet Urges Customers to Disconnect PCs (opens Infosecurity Magazine in a new tab)

    GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack

  10. Dark Reading

    AI Takes Root in Hospital Corridors, Raises Security Stakes (opens Dark Reading in a new tab)

    Artificial intelligence (AI) is everywhere in healthcare, from doctors’ intake forms to cancer screenings. But, in some cases, life-and-death uses are outpacing cyber security.

  11. Help Net Security

    I underestimated how fast security teams would trust AI to act in the SOC (opens Help Net Security in a new tab)

    For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow the same path. I expected AI adoption in the SOC to lag behind almost every other category of security...

  12. IT Pro

    CISA urges federal agencies to patch after PHP exploits observed (opens IT Pro in a new tab)

    The PHP vulnerabilities sent the web into a frenzy last week as organizations rushed to apply patches

  13. IT Pro Security

    CISA urges federal agencies to patch after PHP exploits observed (opens IT Pro Security in a new tab)

    The PHP vulnerabilities sent the web into a frenzy last week as organizations rushed to apply patches

  14. Infosecurity Magazine

    Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries (opens Infosecurity Magazine in a new tab)

    Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware

  15. Security Week

    Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison (opens Security Week in a new tab)

    Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek.

  16. Wired

    Sony Wants You to Forget About Discs With Its Gorgeous Transparent Controllers (opens Wired in a new tab)

    Sony has new, spiffy see-through controllers and covers for its PlayStation 5 that let you see the hardware guts inside.

  17. Help Net Security

    ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls (opens Help Net Security in a new tab)

    ControlUp has announced Pulse AI Resolve, the real-time investigative AI layer of the Pulse AI ecosystem. A major enhancement of ControlUp’s endpoint self-service capability, previously ControlUp Connect, Pulse Resolve brings AI-powered investigation and remediation, built-in governance controls...

  18. Wired

    Senators Demand to Know if Dr. Oz Collaborated With Election Denial Groups (opens Wired in a new tab)

    A far-right campaign claiming leftists are stealing votes from nursing home residents has centered on changing guidance from Mehmet Oz’s Centers for Medicare and Medicaid Services.

  19. Help Net Security

    Compromised camera management software gives attackers a way into corporate networks (opens Help Net Security in a new tab)

    Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents in September and October back to a compromised application. An unidentified application The company’s analysts haven’t been...

  20. Dark Reading

    Attacker Relentlessly Scans for Credentials by Impersonating AI Bots (opens Dark Reading in a new tab)

    The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.