Menu

Latest articles

Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe
Spyware vendors found a way to make targeted ads even worse
The online advertising industry has found a new way to make itself even more unpopular, with one adtech outfit accused of helping spyware vendors infect [...]
ServiceNow makes it easier to build AI agents, gives them verifiable identities
ServiceNow is giving its AI Control Tower new features to make AI agents more governable — and a new name, Super Intelligence Control Tower (SICT), to [...]
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthropic’s Mythos model, the CEO said on [...]
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
X says it has nuked more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate. In a post on [...]
Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Google aims to make BigQuery spending on AI functions more predictable with token quotas
Google has made daily token quotas generally available for BigQuery’s generative AI functions to give enterprises a way to limit AI consumption by project [...]
Legal Aid Agency hackers made off with records dating back to 1978
Hackers who broke into the UK’s Legal Aid Agency last year stole records dating back nearly five decades, the government has admitted, revealing the [...]
Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
Welcome, once again, to PWNED, the weekly column where we gawk at organizations that have made serious security mistakes. Normally, we’re talking about [...]
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
UK officials have stopped short of committing to AI-specific measures in the Cyber Security and Resilience Bill despite ministers promising to legislate [...]
Your AI agent needs more than memory. It needs reliable state
Most teams building AI agents are pouring effort into better memory, longer context windows, conversation summaries, retrieval systems that pull up [...]
Building Fabric Apps with Microsoft’s Rayfin
Using vibe coding to scratch an itch has many of the same issues as using low-code and no-code development tools. That’s not surprising. Putting together [...]
When an agent acts, who is accountable?
For most of the history of enterprise software, accountability has been relatively easy to understand. A person logs in, a person has a set of permissions, [...]
Metropolitan Police’s unchecked use of shoplifting platform lands force in trouble with data watchdog
The Information Commissioner’s Office (ICO) has reprimanded London’s Metropolitan Police Service (MPS) and issued an enforcement notice after [...]
Debian LTS Firefox-ESR Security Update DLA-4836-1 CVE List
Jev and other decision models can still be tricked with prompt injection
Some of the excitement about decision models follows from TypeSafe AI’s claim that its Jev decision model cannot hallucinate and that “the [...]
Debian mariadb Critical Unauthorized Access Denial of Service DLA-4835-1
Mageia Kernel Important Security Updates Multiple CVEs 2026-0506
Rocky Linux 10 curl Moderate Issues CVE-2026-10536 RLSA-2026-80512
Rocky Linux python36 Important Data Disclosure DoS Fix RLSA-2026-82858
Fedora Exim Critical Code Execution Denial of Service 2026-4f9e436ed5
Fedora 43 Exim Critical Code Execution and DoS Fix FEDORA-2026-d202b74c6a
Fedora 43 python3.14 Critical SSLContext Vulnerability Fix 2026-a3da6bb5cd
Fedora 43 python3-docs Important Fixes for CVE-2026-19553 and More
New version of Python interpreter Security fix for CVE-2026-19553 Security fix for CVE-2026-82049 Security fix for CVE-2026-15310 Security fix for CVE-2026-19672
Fedora 43 FreeRDP Update 3.32.1 Security Advisory 2026-d51a33b2f5
SUSE Bind Important Threat Patch Advisory 2026-4664-1 CVE-2026-19033
openSUSE Bind Important Patch for Multiple Vulnerabilities 2026-4664-1
SUSE Kernel Important Security Update 110 Fixes 2026-4665-1
openSUSE Kernel Important Security Fix Advisory 2026-4665-1
openSUSE Kernel Important Security Update 2026-4668-1 Fixes 86 Issues
SUSE Kernel High-Priority Security Update Version 2026-4668-1
SUSE glibc Important Local Privilege Escalation Vuln 2026-4669-1
SUSE Containerd Important Privilege Escalation Issue SUSE-SU-2026-4671-1
SUSE helm Major Security Update Releases – 2026-4674-1 Alert
SUSE Security Update Container-Suseconnect Critical 2026-4675-1
openSUSE webkit2gtk3 Critical Buffer Overflow Vulnern 2026-4676-1
SUSE WebKit2GTK3 Essential Security Patch Released 2026-4676-1
DSA-6562-1 chromium – security update
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
Ubuntu 26.04 urllib3 Important Denial of Service CVE-2026-97687
Slackware 15.0 libarchive Security Update SSA-2026-287-01
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Cisco “strongly” implored customers to patch yet another critical, make-me-root vulnerability in its Secure Email Gateway (SEG), one that has already been [...]
What Your IP Address Reveals Every Time You Visit a Website
Ubuntu curl Important Sensitive Info Denial of Service Vuln USN-8932-1
Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1
Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools
Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed
openSUSE python312 Important Security Issues Patch 2026-4659-1
SUSE python312 Vital Security Patch for Various Vulnerabilities 2026-4659-1
openSUSE 15.6 Kernel Important Security Update Advisory 2026-4660-1
SUSE Kernel Important Security Update for 124 Issues SUSE-SU-2026-4660-1
SUSE google-osconfig-agent Vital Buffer Overflow Patch SUSE-SU-2026-4661-1
SUSE amazon-cloudwatch-agent Critical Integer Overflow Fix 2026-4662-1
openSUSE Amazon CloudWatch Agent Important Buffer Overflow CVE-2026-63209
SUSE xorg-x11-server Important Buffer Overflow Security Update 2026-4663-1
openSUSE xorg-x11-server Critical Buffer Overflow Alerts 2026-4663-1
Ubuntu 26.04-20.04 BlueZ Critical Regression Denial of Service USN-8908-2
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Researchers at security startup Xbow used OpenAI’s GPT-5.6 Sol model to help chain three zero-day vulnerabilities in Chrome into an exploit capable [...]
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Ivanti customers are being urged to update Connect Secure and check for compromise after attackers exploited a newly disclosed zero-day vulnerability. On [...]
Ubuntu 26.04 Bind9 Vital Denial of Service Cache Poisoning Vulnern 8929-1
Rocky Linux 10 python-tornado Important Denial of Service RLSA-2026-82041
Rocky Linux 10 pcre2 Important Denial of Service Issues RLSA-2026-81522
Rocky Linux 10 Kernel Important Security RLSA-2026-81406
openSUSE Tumbleweed Python EngineIO Moderate Fix CVE-2019-13611
openSUSE Tumbleweed python313-pydrive2 Security Advisory CVE-2023-49297
openSUSE Tumbleweed Python313 Pycryptodomex Moderate CVE-2023-52323 Alert
openSUSE Tumbleweed CVE-2023-52323 python313-pycryptodome Moderate Risk
openSUSE python313-orjson Important CVE-2024-27454 Advisory 2026-12024-1
openSUSE python313-paramiko Important Security Advisory 2026-12025-1
openSUSE Tumbleweed python313-pipreqs Moderate Advisory CVE-2023-31543
Critical Security Alert for openSUSE python313-openpyxl CVE-2017-5992
openSUSE Tumbleweed python313-oletools Medium Security Update 2026-12022-1
FLock.io Unveils Edge Decision Model, Built on Qwen, for Enhanced Data Privacy
Google positions Gemini 4 Argon for long-horizon agentic work
Google has launched Gemini 4 Argon, a new flagship AI model aimed at complex enterprise and software-development workloads, pairing claims of stronger [...]
What’s old is new: Lightwell discovers novel zero-day vulnerability in core Java framework
Enterprise IT runs on decades-old foundational code. The prevailing assumption around these mature components is that if code has been sitting untouched in [...]
Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft
5 agentic AI trade-offs to consider before production
Companies across industries are moving quickly to build agentic AI systems. But getting an agent to work in a prototype is very different from getting one [...]
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
The Department of Justice has charged an OpenAI engineer with attempting to intercept oral communications after allegedly planting a recording device in an [...]
Seven ways to encourage critical thinking in AI users
Employees are increasingly using large language models (LLMs) and AI agents to get work done. Many are using agents to complete tasks, and others are using [...]
The value of software is approaching $0
Imagine a vendor comes to you and explains how they can dramatically de-risk your infrastructure. They have a new software product or SaaS that detects [...]
What building an Android weather app taught me about designing for reliability
I spent 13 years building Android apps, and for most of them, the backend was someone else’s problem. Building Weather Pal, my own forecast app, broke that [...]
It’s time to rewrite all that old code
The first substantial software project I ever undertook (at least it seemed substantial at the time) was porting the famous text-based Star Trek game from [...]
Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
Ransomware gets personal: ‘We-know-where-you-are kind of stuff’
Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard when a package [...]
Mageia Freeciv Vulnerability Heap Buffer Overflow and Read Issues 2026-0505
Mageia 10 Shows Major Path Traversal Flaw with Patool – CVE-2026-29509
Mageia 10 mingw-gdk-pixbuf Important Image Parsing Issues Vuln 2026-0503
Mageia Apache Security Update 2026-0502 Addresses CVE-2026-42356 RCE Issues
Mageia 10 Gnumeric Important Heap Use-After-Free CVE-2026-97222
Fedora 43 Chromium Major Update Addresses 247 Security Vulnerabilities
Fedora 43 Kernel 7.2.10 Important Update Advisory FEDORA-2026-bc7bd292d6
Fedora 43 python-jupytext Important XSS Security Patch 2026-3942ab86fd
Fedora 43 arm-none-eabi-binutils Important Buffer Overflow CVE-2026-19582
Fedora 43 Aegisub CVE-2026-92705 Fixes Arbitrary Code Execution Advisory
Fedora 43 avr-binutils Important Buffer Overflow Fix CVE-2026-19582
Fedora 43 xdg-dbus-proxy Security Advisory FEDORA-2026-e1cac11588
Actionable Threat Intelligence: How Linux Teams Use Threat Reports
A threat report names an address in your server logs. Should you block it?
Fedora 44 Firefox Update 158.0 Security Advisory FEDORA-2026-469a21a80e
Fedora 44 Chromium 155 0 8059 39 Key Access Control Vulnerabilities Report