News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Industrial Vendors Check Products for PHP2Shell Vulnerabilities (opens Security Week in a new tab)
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.
-
Anthropic’s IPO Prospectus Reveals What’s Under the Hood (opens Wired in a new tab)
Anthropic on Monday filed documents ahead of a blockbuster IPO that offers insight into the company’s financials, risk factors, and views on the future of AI.
-
Genesys Hack Exposes Customer Data From Internal Systems (opens Security Week in a new tab)
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.
-
Stolen AI Reasoning Could Help China Build Cheaper Rivals (opens Security Week in a new tab)
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek.
-
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans (opens Wired in a new tab)
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
-
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More (opens The Hacker News in a new tab)
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they...
-
10 Software Security Practices Built for the Next 250 Years (opens Dark Reading in a new tab)
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
-
WIRED Ghost Stories (opens Wired in a new tab)
Five hauntings from the other side of technology.
-
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public (opens Infosecurity Magazine in a new tab)
Six Linux flaws were made public, including one with a working root exploit and no merged fix
-
PHP2Shell Exploitation Moves From Probes to Working Shells (opens Security Week in a new tab)
Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells appeared first on SecurityWeek.
-
Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 (opens Help Net Security in a new tab)
The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so a pipeline written against an older script may need edits...
-
Security pros reckon the biggest AI risk comes with an employee badge (opens Help Net Security in a new tab)
Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, the attack they run into most often, made the list of top concerns for only a quarter of the 209 security professionals...
-
Some iPhone Duo Models Are Breaking. iFixit’s Teardown Might Explain Why (opens Wired in a new tab)
The repair company iFixit released its repairability rating for Apple’s very first foldable iPhone. It comes as users report a wave of cracked-screen issues.
-
953 Online Stores Infected in Long-Lasting Malware Campaign (opens Security Week in a new tab)
Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection. The post 953 Online Stores Infected in Long-Lasting Malware Campaign appeared first on SecurityWeek.
-
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw (opens Infosecurity Magazine in a new tab)
Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release
-
Neocloud market set for brutal consolidation, Elon Musk warns (opens IT Pro in a new tab)
As SpaceX secures $40 billion in funding, Musk reckons that AI compute companies need outside revenue to survive
-
Neocloud market set for brutal consolidation, Elon Musk warns (opens IT Pro Cloud in a new tab)
As SpaceX secures $40 billion in funding, Musk reckons that AI compute companies need outside revenue to survive
-
OpenAI, Anthropic disclosures spotlight growing AI containment challenge (opens CIO in a new tab)
Two leading AI developers have released fresh evidence of a problem that researchers have long anticipated: advanced models searching for ways around the limits imposed on them. New disclosures from OpenAI and Anthropic detail how frontier systems exploited weaknesses in their environments or...
-
NetSuite launches SuiteExpress to expedite implementation and optimization of ERP (opens CIO in a new tab)
Agentic AI is the main topic at most industry events this year, with vendors adding agents to their products with gleeful abandon. NetSuite is no different; at its SuiteWorld conference this week, it is unveiling agents and AI workspaces designed to do everything from autonomous financial closing...
-
OpenAI, Anthropic disclosures spotlight growing AI containment challenge (opens CSO Online in a new tab)
Two leading AI developers have released fresh evidence of a problem that researchers have long anticipated: advanced models searching for ways around the limits imposed on them. New disclosures from OpenAI and Anthropic detail how frontier systems exploited weaknesses in their environments or...