Latest cybersecurity reporting from selected sources.

Time to start praying to the goddess of wisdom and war

Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins

Researchers warn many AI coding assistants now execute commands from project configurations

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

One rule for the workers, another for execs

Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models

Spotted in intrusions targeting insurance, education, IT, and professional services sectors

Former employee accuses company of prioritizing pending IPO over client security

And the admin password was right in the Active Directory description field

To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust

CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought

200+ C2 servers linked to StealC and Amadey shut down

'Permanent biometric surveillance of the public square' incompatible with policing by consent, say critics

Five ISPs and plenty of users await their fate

Plus more blasts from the past: NetWare, FTP, and HTTP

Bosses told to step up and get cybersecurity right

Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out

A plethora of pwn-prevention, including a 'Patch The Planet' pledge

Makers of Chrome, Edge, Firefox back bot-fraud defense called Private Access Control Tokens

As yet another extortion crew Icarus exploits Salesforce-linked integrations