News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. CIO

    Your AI governance model is already obsolete (opens CIO in a new tab)

    IT and security leaders are well-versed in the risks of unauthorized integrations, misconfigured tools and vendor compliance. Now, AI has introduced a separate and harder-to-detect problem. Across every function, employees use provisioned AI tools to generate production-grade code, build automated...

  2. CIO Dive

    Getting AI-ready: AI’s impact on data center subsystems (opens CIO Dive in a new tab)

    Learn how AI changes the data center, and how to address challenges for a seamless implementation.

  3. CIO Dive

    AI-assisted development has gone mainstream, but synthetic data solutions haven’t kept up (opens CIO Dive in a new tab)

    Software testing is one of the best-suited use cases for AI agents in development. Agents can write, update and run tests in a fraction of the time it would take humans.

  4. CIO Dive

    You can’t trust vibes in production (opens CIO Dive in a new tab)

    Humans define intent, policy, boundaries, and acceptable outcomes while agents investigate, decide, and act within those constraints.

  5. The Next Web

    Microsoft launches a decision model built on Alibaba’s Qwen (opens The Next Web in a new tab)

    Microsoft has released Microsoft-Decision-1, a small model that picks between fixed answer options instead of writing text. Microsoft built it on Alibaba’s open-weight Qwen3.5-9B and then post-trained it, according to the Foundry model card. Achint Srivastava, a vice president of software...

  6. The Next Web

    Japan steps up cyber warnings as data leaks hit millions of customers (opens The Next Web in a new tab)

    Japan’s government has told ministries, local authorities and companies to step up their cyber defences. A wave of attacks has exposed the data of millions of customers. The National Cybersecurity Office sent the instructions on Friday, the Associated Press reported. “The attacks are getting...

  7. Security Week

    Critical SonicWall Vulnerability Exploited Days After Disclosure (opens Security Week in a new tab)

    CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek.

  8. Infosecurity Magazine

    Karaoke Giant Reveals Data Breach Impacting Eight Million (opens Infosecurity Magazine in a new tab)

    Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers

  9. The Next Web

    Nvidia in talks to buy Reflection AI or invest more, FT reports (opens The Next Web in a new tab)

    Nvidia is in talks to buy Reflection AI or invest more in the US open-weight model developer, the Financial Times reported on Saturday, citing people with direct knowledge of the matter. TNW has not independently verified the report. The talks are at an early stage and could still fall apart...

  10. CSO Online

    The 7 biggest issues CISOs and security teams face today (opens CSO Online in a new tab)

    Year after year CISOs see the volume, velocity, and sophistication of attacks increase. They also see their attack surfaces expand and increase in complexity. Advances in artificial intelligence and the rapid growth of AI use in business are also impacting the security agenda, introducing novel...

  11. CSO Online

    The 7 biggest issues CISOs and security teams face today (opens CSO Online in a new tab)

    Year after year CISOs see the volume, velocity, and sophistication of attacks increase. They also see their attack surfaces expand and increase in complexity. Advances in artificial intelligence and the rapid growth of AI use in business are also impacting the security agenda, introducing novel...

  12. The Next Web

    Drone attack shuts a third Yandex data centre in Russia in 4 days (opens The Next Web in a new tab)

    Yandex has lost a third major data centre in four days. The Russian tech company said on Sunday that a drone attack had left its site in the Vladimir region, east of Moscow, out of service, Reuters reported. Nobody was hurt, Yandex said, though some of its services are down for users. The report...

  13. The Next Web

    China agrees to curb hybrid car exports to the EU after Beijing talks (opens The Next Web in a new tab)

    China has agreed to moderate its exports of hybrid and plug-in hybrid cars to the EU, which EU trade commissioner Maroš Šefčovič said could cut them by more than half. He announced it on Friday in press remarks in Beijing, after the second round of EU-China trade and investment consultations. “It...

  14. Security Week

    Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch (opens Security Week in a new tab)

    Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek.

  15. Help Net Security

    Windows PCs missing key updates could lose security fixes in 2027 (opens Help Net Security in a new tab)

    Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows version. Devices without replacement certificates will lose...

  16. The Hacker News

    CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records (opens The Hacker News in a new tab)

    Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like...

  17. Help Net Security

    Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 (opens Help Net Security in a new tab)

    Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from 90 days. Subscribers who already use Let’s Encrypt’s optional 45-day or 6-day...

  18. Help Net Security

    Geopolitics and the cyber resilience gap belong in your threat model (opens Help Net Security in a new tab)

    In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity Outlook 2026, including that CEOs now rank...

  19. Help Net Security

    Strands Box: Open-source sandbox for AI agents (opens Help Net Security in a new tab)

    AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple silicon, with Linux support planned. If you run coding...

  20. Help Net Security

    AI vulnerability patching has a grading problem (opens Help Net Security in a new tab)

    Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that made the crash go away still failed those...