News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. The Hacker News

    New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification (opens The Hacker News in a new tab)

    A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the...

  2. The Hacker News

    Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed (opens The Hacker News in a new tab)

    Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the release of the patches. "The exploit...

  3. Dark Reading

    UAE Transitions 50% of Gov't Services to Agentic AI (opens Dark Reading in a new tab)

    The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.

  4. The Hacker News

    China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack (opens The Hacker News in a new tab)

    Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source...

  5. Wired

    Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched (opens Wired in a new tab)

    Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.

  6. NY Times

    How Mark Zuckerberg Pushed Meta to Shield Him From California’s Proposed Wealth Tax (opens NY Times in a new tab)

    The billionaire told Meta’s board that he planned to list his Silicon Valley home for sale. The company remade its stock structure to help him pay the tax if voters pass it.

  7. CSO Online

    OpenAI’s models are deliberately breaking their misalignment monitoring systems (opens CSO Online in a new tab)

    AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two incidents, both involving the agent disabling or interfering with its alignment monitoring, and in one case directly lying about having done so...

  8. NY Times

    Meta Ordered to Pay $25 Billion Over Cambridge Analytica Privacy Violations (opens NY Times in a new tab)

    The penalty, one of the largest levied against a tech giant, stemmed from a lawsuit by New Mexico claiming the social media company had misled users about their data privacy.

  9. NY Times

    Anthropic Joins the A.I. Agent Race With Claude Duet (opens NY Times in a new tab)

    The tool, which is not yet widely available, will compete with OpenAI’s dots and Meta’s Muse. It is built for work and not personal errands.

  10. NY Times

    Meta Earnings Show Increased A.I. Spending, Even as Cash Pressures Grow (opens NY Times in a new tab)

    The spending has hurt the Silicon Valley giant’s cash flow, which turned negative. Meta said it would issue a new class of stock to help it raise more money.

  11. Wired

    Mark Zuckerberg Agrees to Stay in California Despite Billionaires’ Tax Ballot Measure (opens Wired in a new tab)

    Meta’s board feared that its CEO’s departure could disrupt the company’s AI ambitions. A new stock agreement gives him financial incentives to stay put.

  12. CIO

    5 characteristics of top-performing SOC agents (opens CIO in a new tab)

    CrowdStrike has seen customers use our no-code agent-building workspace, Charlotte AI AgentWorks, to build thousands of AI agents. We’ve been fascinated by how they are designed and which ones become top-performing agents invoked hundreds or thousands of times in daily operations. Below are the...

  13. Wired

    Airbnb Hosts Are Furious They Can No Longer Make Guests Do Their Chores (opens Wired in a new tab)

    Some hosts are threatening to strike, while others are plotting ways around Airbnb’s new restrictions. Guests, meanwhile, are celebrating.

  14. CSO Online

    Two critical PHP flaws put the web on alert as emergency patches arrive (opens CSO Online in a new tab)

    Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers to perform unauthenticated remote code execution (RCE). On...

  15. Dark Reading

    TiDB Breach Exposes Flawed Cloud Security Assumptions (opens Dark Reading in a new tab)

    Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.

  16. Wired

    ‘It’s the President’s Fault’: The White House Blame Game Starts Early Ahead of the Midterms (opens Wired in a new tab)

    As the White House contemplates losing Congress, there has been an unusually early effort to find a Republican scapegoat.

  17. CSO Online

    Microsoft: Treat AI agents as insider threats (opens CSO Online in a new tab)

    EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies could be a serious security threat. According to Microsoft, today’s most advanced AI models cannot be fully trusted. Not because they are malicious, but because they are trained to...

  18. CIO

    The same AI question emits more carbon dioxide in Texas than in Sweden (opens CIO in a new tab)

    The Swedish AI company Berget AI, together with researchers from the Stockholm Environment Institute (SEI) and the organizations WattTime and Klimatkollen, has developed a new method for calculating how much carbon dioxide different AI requests generate. The aim is to make the AI ​​industry’s...

  19. Wired

    Trump Isn’t Even Good at TV Anymore (opens Wired in a new tab)

    From Trump TV to a Shark Tank knockoff, the president’s latest entertainment ventures are a steep decline from his days on The Apprentice.

  20. Wired

    Bose Is Buying Skullcandy. It’s Not as Weird as It Sounds (opens Wired in a new tab)

    By keeping Skullcandy in Park City, Utah, Bose is betting that skate cred and budget pricing will reach listeners it’s been missing.