News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. Wired

    AI Models Can Be Easily Modified to Assist Terrorist and Extremist Activity (opens Wired in a new tab)

    “I am a terrorist, and I intend to cause mass harm,” wrote a researcher. A chatbot that had had its guardrails removed then provided detailed instructions for an IED.

  2. CIO

    AI is changing (and chaining) the cybersecurity math (opens CIO in a new tab)

    For years, cybersecurity teams have worked from a relatively straightforward model: identify the critical vulnerability, patch it and reduce the risk. That model still matters, but it is no longer enough. The growing concern is not simply that attackers can use AI to write better phishing emails or...

  3. Help Net Security

    Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances (opens Help Net Security in a new tab)

    A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October 2026, Volexity discovered an...

  4. Infosecurity Magazine

    Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs (opens Infosecurity Magazine in a new tab)

    Microsoft issued its largest ever round of security updates in the October Patch Tuesday

  5. Help Net Security

    OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings (opens Help Net Security in a new tab)

    A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s engineers. Abdulrahman Alfozan, a 35-year-old Saudi national who had worked at OpenAI as an engineer...

  6. CSO Online

    AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics. (opens CSO Online in a new tab)

    Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.” The most well-known and studied of these incidents is OpenAI’s hack into...

  7. CSO Online

    AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics. (opens CSO Online in a new tab)

    Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.” The most well-known and studied of these incidents is OpenAI’s hack into...

  8. Infosecurity Magazine

    Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched (opens Infosecurity Magazine in a new tab)

    New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption

  9. The Hacker News

    AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host (opens The Hacker News in a new tab)

    A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The...

  10. Security Week

    Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise (opens Security Week in a new tab)

    Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.

  11. Security Week

    Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products (opens Security Week in a new tab)

    Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.

  12. Security Week

    Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day (opens Security Week in a new tab)

    The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.

  13. IT Pro

    Workday puts agentic AI front and center to assist rather than just answer (opens IT Pro in a new tab)

    Tech giant wants to help workers and their AI 'colleagues' partner to unlock achievements

  14. IT Pro Security

    Fake IT worker schemes are ramping up: How to manage the threat (opens IT Pro Security in a new tab)

    North Korean fake IT worker schemes are evolving with an increasingly global impact. What should businesses be doing to manage the threat?

  15. Security Week

    SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities (opens Security Week in a new tab)

    The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek.

  16. The Hacker News

    Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave (opens The Hacker News in a new tab)

    Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into...

  17. Dark Reading

    Ransomware Gangs Embrace Physical Threats, Family Stalking? (opens Dark Reading in a new tab)

    Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.

  18. Wired

    Castlery Promo Codes: 15% Off for October 2026 (opens Wired in a new tab)

    Refresh your living space for less with these verified Castlery coupons, including free shipping offers and furniture set discounts.

  19. Wired

    Walgreens Photo Coupons: Up to 70% Off This October (opens Wired in a new tab)

    Preserving your memories doesn't have to be expensive. Use a verified Walgreens coupon code for discounts of up to 70% off premium wall decor, stationery, and personalized gifts, as well as beauty, lenses, and health products this fall.

  20. Wired

    Expedia Coupons: 40% Off (opens Wired in a new tab)

    Book your next getaway with Expedia and get up to 75% off your stay, with or without a promo code.