News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
The ‘Exotic Physics’ Behind a Mysterious 1,000-Mile Cloud on Mars (opens Wired in a new tab)
The cloud has baffled astronomers since its discovery in 2018. Now, a new study offers a possible cause for its appearance.
-
Your AI is only as good as the network underneath it (opens CIO in a new tab)
When an AI workload is not performing as expected, the obvious place to look is the GPU. Do we have enough compute capacity? Would adding more GPUs solve the problem? Not necessarily. The GPUs may be perfectly capable of handling the workload, but if the network is not able to move data quickly and...
-
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data (opens The Hacker News in a new tab)
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by...
-
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances (opens The Hacker News in a new tab)
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one. The...
-
11 Million Impacted by Capcom Data Breach (opens Security Week in a new tab)
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts. The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek.
-
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ (opens Security Week in a new tab)
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders. The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ appeared first on SecurityWeek.
-
The AI notetaker risk is now an everywhere problem (opens CSO Online in a new tab)
The businesspeople adopting AI notetakers are not being reckless. They are responding to a real business need. Our teams are in meetings all day with companies we support, and the idea that we could read a clean summary of every one of them at the end of the day makes us better partners to our...
-
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense (opens Help Net Security in a new tab)
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction set this summer through a honeypot posing as an unprotected AI service...
-
LiteLLM Compromised in Fresh Supply Chain Attack (opens Security Week in a new tab)
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek.
-
Atlassian Patches 75 Flaws in Data Center and Server Products (opens Security Week in a new tab)
Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek.
-
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware (opens The Hacker News in a new tab)
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit...
-
AI is speeding up coding, but devs are squandering time savings (opens IT Pro in a new tab)
An Atlassian survey suggests AI helps coding, but workflow friction needs to be addressed too
-
Progress WhatsUp Gold 2026 review (opens IT Pro Security in a new tab)
A good value network monitoring choice with a wealth of features, a highly informative web console, and the smart WhatsUp Gold 360 service
-
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 (opens Security Week in a new tab)
After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016. The post Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 appeared first on SecurityWeek.
-
Google opens its cloud to rival OpenAI, promises business data won’t train models (opens Help Net Security in a new tab)
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost professional tasks and everyday use that requires...
-
Empowering Organizations to Scale Safely, Efficiently, and Sustainably (opens The CIO Magazine in a new tab)
Keith Campbell is Vice President and Chief Information Officer of Superior Energy Services. A business-first technology executive and CISSP, he brings more than two decades of leadership experience across global industrial and energy organizations, including Amgen, Chevron, Tengizchevroil, PDC...
-
Drone program compliance: What a CTO says most agencies get wrong (opens Help Net Security in a new tab)
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity...
-
AI is taking cybersecurity jobs at junior and experienced levels alike (opens Help Net Security in a new tab)
Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level...
-
New infosec products of the week: October 23, 2026 (opens Help Net Security in a new tab)
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click protection for vulnerable cloud workloads Sweet Security has announced the release of Virtual Patching, a new capability that...
-
State Bank of India Suffers a Customer PII Data Leak (opens Dark Reading in a new tab)
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.