News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Turning your Wi-Fi network into an AI-native location platform (opens CIO Dive in a new tab)
Explore what’s possible with indoor location intelligence.
-
How AI will evolve supply chains from better plans to better outcomes (opens CIO Dive in a new tab)
Supply chains have the data and the dashboards. Now AI is adding the decisions.
-
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations (opens The Hacker News in a new tab)
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between...
-
10 most powerful cybersecurity companies today (opens CSO Online in a new tab)
The number of cybersecurity startups attempting to cash in on the AI boom is staggering. But an analysis of the cybersecurity marketplace indicates that the incumbents, rather than resting on their laurels and opening themselves up for disruption, are quickly adapting to the new AI-centric threat...
-
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding (opens CSO Online in a new tab)
Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a running application. In its first open source research run, it found High or Critical issues in 45% of the projects...
-
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs (opens The Hacker News in a new tab)
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an...
-
Witness: Open-source framework for verifying how your software was built (opens Help Net Security in a new tab)
Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing Foundation, and an open community now...
-
AI slop is piling up highest on the biggest open-source projects (opens Help Net Security in a new tab)
The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close to a third of the code changes landing in their queue are low...
-
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware (opens The Hacker News in a new tab)
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent...
-
Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture (opens Help Net Security in a new tab)
An AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates incidents, triages findings, and drives response from the same security architecture. That gives people...
-
Forgotten AI agents may still access sensitive company data (opens Help Net Security in a new tab)
AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive software. Agents by exposure...
-
Synthetic identities leave US lenders with $2.4 billion in fraud exposure (opens Help Net Security in a new tab)
Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first half of 2026 occurred during...
-
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers (opens The Hacker News in a new tab)
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls...
-
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity (opens The Hacker News in a new tab)
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. "What researchers saw was an attack against a European government agency executed in the...
-
Widgets & Web Launches AI-Operated Investor Relations Websites for Public Companies at a Fixed $299 per Month (opens CTO Magazine in a new tab)
Miami, Florida, United States, October 24th, 2026, FinanceWire Widgets & Web, the investor relations website provider trusted by more than 500 public companies, SPACs, and IPO-stage firms, today announced AI-operated investor relations websites: complete, custom IR sites designed, built and...
-
Wallhack M-001 Review: When Fun Overrides Specs (opens Wired in a new tab)
With a tactile dongle for on-the-fly customization and a metal chassis, the Wallhack M-001 is the most fun I've had reviewing a gaming mouse in a long time.
-
Scientists Trapped an Antimatter Particle for Months to Study Its Secrets (opens Wired in a new tab)
These elusive and reactive particles have been challenging to hold on to and even more challenging to study, but a new method paves the way for tests on the differences between matter and antimatter.
-
6 Best Folding Phones (2026): Samsung, Apple, Google, Motorola (opens Wired in a new tab)
Ready to move on from the traditional glass slab? Introduce a hinge into your life with these folding smartphones.
-
The MacBook Pro Max Just Dropped to Its Lowest Price Ever (opens Wired in a new tab)
Apple will reportedly launch an innovative new MacBook next week, which means existing options have their largest discount yet.
-
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave (opens Security Week in a new tab)
Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks. The post Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave appeared first on SecurityWeek.
