August 9, 2026
Ransomware gangs skip the CEO, head straight for the 40-something IT manager
Turns out the fastest way to get a company to consider paying a ransom isn’t calling the CEO – it’s targeting the 46-year-old IT manager. [...]
August 9, 2026
DSA-6418-1 thunderbird – security update
August 8, 2026
DSA-6416-1 jq – security update
August 8, 2026
Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default
Despite the popularity of Claude Code, Cursor, GitHub Copilot, and OpenAI Codex, developers have plenty of complaints about AI coding tools. So researchers [...]
August 8, 2026
Rust preps improved borrow checker for stabilization
The Rust team has announced that it is enabling the Polonius Alpha borrow checker on nightly releases for testing. The team expects to fully stabilize [...]
August 8, 2026
DSA-6417-1 libheif – security update
August 8, 2026
OpenAI pledges to add Astra security as Anthropic loosens Fable’s leash
After acknowledging last month that unreleased AI models committed what for human perpetrators would be computer crimes, OpenAI now says it cannot rule out [...]
August 7, 2026
Water system controllers don’t belong on the internet, says ex-NSA chief after suspected Iran attacks
With at least 12 US states’ water systems having been hacked – most likely by Iran – we have to get better at cyber defense, according to [...]
August 7, 2026
What we lose when every engineer can do everything
Four months ago, a front-end engineer on my team looking to make upgrades to a product or feature would have filed a ticket and waited for the [...]
August 7, 2026
Ransomware attacks spike as world distracted by AI
Ransomware attacks jumped nearly 20 percent in July, with UK firm Comparitech counting 799 incidents, up from 668 in June. Of those, 51 had been confirmed [...]
August 7, 2026
Beware cut-price AI services that read your every word
August 7, 2026
N-able God mode flaw: Vendor confirms attackers reached customer networks as second hotfix lands
N-able has confirmed attackers exploiting an N-central zero-day made it into customer networks, as the vendor pushes out a second mandatory hotfix just [...]
August 7, 2026
Moonshot’s Kimi AI model has also escaped from a test environment
Yet another AI model has escaped from a cybersecurity test lab: This time, it’s the Chinese company Moonshot’s Kimi K3 model on the run. Frontier Security [...]
August 7, 2026
Airtable joins Evernote, Brightcove, WeTransfer and AOL in Bending Spoons portfolio
Bending Spoons has snapped up Airtable to add to its portfolio of software companies, alongside AOL, Evernote, WeTransfer, Brightcove and Vimeo Airtable [...]
August 7, 2026
MIT boffins’ TONTOU attack slips through Spectre defenses on Intel and AMD CPUs
Two MIT researchers will present a new speculative execution attack at DEF CON 34 that uses precisely timed interrupts to bypass defenses against Spectre [...]
August 7, 2026
Scot NHS trust probes access to medical records of 9-year-old girl after man arrested on suspicion of murder
A Scottish NHS trust is investigating a data breach concerning the medical records of a nine-year-old girl who died earlier this week and was named [...]
August 7, 2026
Detecting Persistence on Linux Hosts: A Security Playbook for Cron and systemd
If you manage Linux boxes long enough, you hit this exact wall. You spot a weird process eating CPU, kill it, wipe the script, and reset the user password. [...]
August 7, 2026
Snowflake attacker pleads guilty to hack of 165 companies’ data
A Canadian hacker has admitted being part of a group responsible for several major cyberattacks. Connor Riley Moucka pleaded guilty to being part of a [...]
August 7, 2026
DeepMind founder ascends to singular AI role at Google
Demis Hassabis, the driving force behind Google DeepMind, is ascending to the role of chief scientist at Alphabet, Google’s parent company, replacing Jeff [...]
August 7, 2026
Attacker phished way into US defense supplier’s Microsoft 365 account
US defense and aerospace supplier IEH Corporation ‘fessed up that a criminal managed to break into its Microsoft 365 mailbox in a filing with [...]
August 7, 2026
‘Asimov was right’ about rules for robots, says ex-US Cyber Director
EXCLUSIVE Don’t waste time worrying about AI models achieving sentience – they’re essentially already there, according to former US National [...]
August 7, 2026
Three concepts cloud architects overlook
After two decades of cloud architecture consulting, I see an unchanging pattern in enterprise deployments. Organizations approach me with unexpectedly high [...]
August 7, 2026
Mageia 10 9 Rootcerts Security Update Vuln MGASA-2026-0325
August 7, 2026
Mageia Python-Django Medium Exposure Issues Vuln 2026-0324
August 7, 2026
Oracle Linux 10 ELSA-2026-51075 GPSD Important Command Injection Fix
Oracle Linux has released an update for version 10, addressing CVE-2026-58459, which fixes a command injection vulnerability in gpsprof and includes [...]
August 7, 2026
China launches mysterious probe into security of Palo Alto Networks’ products
China’s Cyberspace Administration (CAC) has conducted a review of Palo Alto Networks’ products. The regulator’s announcement of its review says it’s needed [...]
August 7, 2026
Fedora 43 libXfont2 Important CVE Patch 2026-4f471dd34a
August 7, 2026
Fedora 43 Coreutils Denial of Service Risk CVE-2026-56391
August 7, 2026
Fedora 44 python-gstreamer1 Update Advisory 2026-d51eee8d48
August 7, 2026
Fedora 44 gstreamer1-rtsp-server Patch Alert 2026-d51eee8d48
August 7, 2026
Fedora 44 GStreamer 1.28.6 Update Advisory 2026-d51eee8d48
August 7, 2026
Fedora 44 gst-devtools Update 1.28.6 FEDORA-2026-d51eee8d48
August 7, 2026
Fedora 44 GStreamer Documentation Revision 2026-d51eee8d48
August 7, 2026
How the famed USENIX Security conf is managing a flood of papers in the AI era
The 35th USENIX Security Symposium (USS), which takes place next week in Baltimore, Maryland, hit an all-time high for paper submissions. While some of [...]
August 6, 2026
Microsoft releases open-source agent that generates unit tests
Microsoft has released code-testing-generator, an open-source agent for generating unit tests in any programming language, according to the company. [...]
August 6, 2026
SUSE openssl-3 Important DoS Threat Advisory 2026-3516-1
August 6, 2026
Mageia 10-9 Font-Tools Bugfix Security Advisory 2026-0078
August 6, 2026
AI struggles to patch vulns without adult supervision
AI models may not be that good at fixing security flaws. Researchers at 1Password’s Off-by-1 Labs analyzed security patches generated by two frontier [...]
August 6, 2026
Oracle Linux 10 ELSA-2026-27288 Important Kernel Bug Fix
August 6, 2026
Humans in the loop miss a third of dangerous AI coding agent requests
A browser-based game designed to test humans’ ability to safely approve AI coding agent requests suggests humans in the loop aren’t as good at [...]
August 6, 2026
Mak’s Weekly Security Roundup: Critical Linux Security Updates Admins Should Know
This week’s most important Linux security updates arrived through vendor advisories rather than major headline-making disclosures.
August 6, 2026
Kubernetes Maintainers Expand CSI Path Traversal Fixes Beyond Original Vulnerabilities
Kubernetes maintainers patched two path-traversal vulnerabilities in the NFS and SMB CSI drivers earlier this year. But repository histories show that the [...]
August 6, 2026
IT department put sticky notes on the laptops to help employees log in
PWNED Welcome back to PWNED, the weekly column where we lovingly poke fun at other organizations’ security screw-ups, in hopes the rest of us can [...]
August 6, 2026
Meta launches Muse Code for complex software work with persistent AI agents
Meta has released a beta coding agent designed to handle complex software assignments across large codebases. Available for macOS and Linux, Muse Code uses [...]
August 6, 2026
Agents are coming for data (just slowly)
Agents have turned up just about everywhere in software this past year, with one conspicuous exception: data. That’s a little odd, because querying data is [...]
August 6, 2026
Microsoft Web IQ: Ground your AI agents with up-to-date web data
Microsoft has unveiled a suite of IQ products over the last few months. Work IQ, Fabric IQ, and Foundry IQ build on what Microsoft used to call its [...]
August 6, 2026
Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway
Chinese Wi-Fi router vendor Zbtlink has denied its products contain backdoors but paused firmware downloads while it fixes unspecified security [...]
August 6, 2026
Rocky Linux Kernel Moderate DoS Bug Fixes RLSA-2026-49871
August 6, 2026