News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. Security Week

    Hacker Conversations: Corey Thuen and the Evil Bit (opens Security Week in a new tab)

    Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t. The post Hacker Conversations: Corey Thuen and the Evil Bit appeared first on SecurityWeek.

  2. Dark Reading

    As AI Risks Grow, Insurers Split on Covering the Damage (opens Dark Reading in a new tab)

    Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.

  3. Infosecurity Magazine

    EU Regulators to Investigate Booking.com Over Scam Risks (opens Infosecurity Magazine in a new tab)

    The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks

  4. The Hacker News

    INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown (opens The Hacker News in a new tab)

    INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation Serengeti III, the...

  5. The CIO Magazine

    Transforming Digital Potential into Concrete Business Outcomes (opens The CIO Magazine in a new tab)

    Jakub Borowiec, with over 20 years of consulting experience, is a seasoned professional specializing in digital transformation. His expertise spans artificial intelligence (AI), generative AI, advanced analytics, and software development. As a leader in the CEE Analytics & AI capability and...

  6. Help Net Security

    LiteLLM hit by second supply chain attack this year, users urged to rotate credentials (opens Help Net Security in a new tab)

    A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised… again,” security researcher Kevin Beaumont wrote on Mastodon. In...

  7. Infosecurity Magazine

    Iranian Hacking Group Found Hosting C2 Infrastructure in the US (opens Infosecurity Magazine in a new tab)

    Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil

  8. Wired

    Meet Mori, a Cute Robot Mushroom That Doesn’t Really Say (or Do) Anything (opens Wired in a new tab)

    Step one in convincing people to live with robots with cameras on their faces? Disguise them as cute home decor.

  9. Security Week

    Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform (opens Security Week in a new tab)

    The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East. The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek.

  10. Help Net Security

    OpenAI’s coding agents talked themselves out of being monitored (opens Help Net Security in a new tab)

    Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such thing. OpenAI disclosed both episodes in a misalignment report released earlier this week and said it is tightening its defenses...

  11. The CIO Magazine

    Empowering Communities to Learn, Grow, and Thrive with AI (opens The CIO Magazine in a new tab)

    Aamer Charania is an MIT-trained AI executive who builds enterprise AI organizations that deliver billions in value across retail, financial services, healthcare, telecommunications, and airlines. Most recently, he built Best Buy’s Applied AI department from the ground up. Earlier, he was regional...

  12. Security Week

    Signal Vulnerability Lets Malicious Callers Block Hang-Ups (opens Security Week in a new tab)

    Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek.

  13. CIO

    Salesforce to buy Braze for $5.7 billion to boost real-time customer engagement (opens CIO in a new tab)

    Salesforce is set to acquire US-headquartered customer engagement software provider, Braze, for $5.66 billion in an effort to help enterprises personalize customer interactions in real time. Founded in 2011 as Appboy and renamed Braze in 2017, the company’s offerings include the Braze Customer...

  14. Security Week

    Tech and Security Companies Respond to PHP2Shell Vulnerabilities (opens Security Week in a new tab)

    Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek.

  15. CSO Online

    LiteLLM release pipeline hacked to distribute credential-stealing malware (opens CSO Online in a new tab)

    Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security measures introduced after an earlier attack. The compromised version, 1.107.0, was...

  16. Help Net Security

    New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 (opens Help Net Security in a new tab)

    Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP applications running on Apache...

  17. CIO

    10 guidelines for successfully scaling AI (opens CIO in a new tab)

    There are plenty of individual AI success stories across the enterprise, but scaling AI continues to be a challenge. Data from McKinsey’s “The state of AI in 2026: On the road to ROI” survey shows that four in five respondents report that AI has improved individual productivity. The survey also...

  18. NY Times

    PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline (opens NY Times in a new tab)

    Governments and businesses in Kenya, the Netherlands and elsewhere were scrambling to prevent hackers from exploiting a vulnerability in PHP, a widely used programming language.

  19. CSO Online

    China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants (opens CSO Online in a new tab)

    A China-state-aligned threat actor compromised a ConnectWise cloud backup application and used an open-source agentic AI framework to turn its stolen credentials against more than 2,250 Microsoft 365 tenants, Microsoft said. Microsoft Threat Intelligence attributed the activity to Storm-0940, which...

  20. Help Net Security

    Fingerprint uses AI coding tools to automate fraud detection setup (opens Help Net Security in a new tab)

    Fingerprint has announced Agentic Installation, the AI-powered onboarding path for companies to deploy device intelligence to their websites or apps in minutes to detect and stop fraud. By running a single prompt in an AI coding tool, such as Claude Code, Codex or Cursor, developers take...