A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host’s memory and hijack the program that runs the virtual machine. The bug is tracked…

Read more →

Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg). In a nutshell: the VBA code is stored inside an OLE file, that is embedded inside the DWG file. You can do a brute-force search for the embedded OLE file, or you can follow a pointer inside the header of…

Read more →

The offer is ready. The candidate in Lisbon has said yes, the engineering lead is relieved, and then someone asks the awkward question: who is actually going to employ this person?

Read more →

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles…

Read more →

Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm since September 2024, and its latest report shows the malware has changed a lot. Over the past year the team identified four distinct versions…

Read more →

Neel Khokhani is an Australian capital allocator and the founder and principal of Epochal Corporation, a private single-family office. He also owns The Epochal Collection, a…

Read more →

Key Takeaways ● An AI-powered software factory is not a single product. It is an assembly of vendors, each running a different station, from planning and code generation to…

Read more →

Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.

Read more →

Australia’s smart home market more than doubled to $7.7 billion in 2025 and is on track to top $11 billion this year. The thing doing most of the heavy lifting sits on a garage…

Read more →

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Of these, more than 670 relate…

Read more →

Workday CEO, Aneel Bhusri, opened his first Rising keynote since returning to the top job with a confession. He’d wanted to walk on stage to Arnold Schwarzenegger’s “I’ll be…

Read more →

OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports detailing its models’ troubling and overzealous behaviors. In ad hoc misalignment testing, OpenAI models found creative ways to subversively access restricted information by cheating their way through proxy or firewall settings, getting savvy with internet tools, and even damaging…

Read more →

When quantum vendor IonQ on Sunday announced a $1.2 billion all stock deal to take over cybersecurity vendor Elisity, it spoke of a near-term future where enterprise quantum cybersecurity needs will move beyond replacing to-be-outdated encryption. The acquisition brings together IonQ’s post-quantum cryptography (PQC) and quantum key distribution (QKD) capabilities and Elisity’s enterprise Zero Trust…

Read more →

There’s growing talk of digital sovereignty as enterprises rethink past consolidation decisions made in the name of simplicity. Mozilla, developer of Firefox, argues that a “very specific, very important layer” has been mostly missing from that conversation: The browser. To that end, the company has unveiled Firefox Enterprise in a bid to diversify the browser…

Read more →

Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the 2020 record of 1,261. The list was so long that its release was several hours later than the usual 1 p.m. Eastern drop time, somewhat frustrating admins. The bugs include three zero-day vulnerabilities, one of which has been exploited.…

Read more →

New enforcement platforms build on widely adopted technology used worldwide, with expanded AI capabilities and flexible deployment.

Read more →

Senior appointments strengthen Convera’s ability to help customers move money globally with greater speed, visibility, and control.

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications.…

Read more →

Ask a recently qualified clinician what actually prepared them for practice and you will rarely hear about a lecture. You will hear about a particular night, and about a…

Read more →

Sean Dyon named HID’s Primary Board Delegate, bringing enterprise interoperability and identity convergence expertise to the standards alliance

Read more →

Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows.

Read more →

Glean strengthens its investment in ANZ with an experienced enterprise software leader to help scale its growing momentum across the region

Read more →

The Sophos AI team presents a novel technique for calibrating agentic SOC analysts

Read more →

The smart home category is ripe for reinvention, but Siri still needs improvement to win over skeptics.

Read more →

A vulnerability has been discovered in Ivanti Connect Secure (ICS) that could allow for arbitrary code execution. Ivanti Connect Secure is an enterprise-grade SSL VPN and zero-trust remote access gateway. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands.

Read more →

Strategic partnership expands the value of phone number intelligence across messaging, routing, identity and fraud mitigation

Read more →

Reliable IT support is no longer only about fixing laptops after something breaks. For SMEs, technology affects communication, security, document access, remote work and almost every operational process. A strong support partner should therefore reduce avoidable downtime, improve the way systems are used and help the business plan technology decisions before they become emergencies. Understand…

Read more →

Adactin, an APAC-headquartered technology services provider with deep expertise in cloud, AI, and quality engineering services, today announced that it has successfully…

Read more →

Tal Nathan, Regional CTO, Rimini Street ANZ

Read more →

Study of 443 Australian Design and Make companies reveals AECO and D&M sectors continue to grapple with challenges such as cost control, talent shortages and digital adoption.

Read more →

Expanded partnership brings Netskope’s SD-WAN under Macquarie Telecom’s single-vendor SASE framework

Read more →

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of the weaknesses patched this week is considered a “zero…

Read more →

Between June and August 2026, Nozomi Networks Labs observed sustained malicious activity across OT, IoT and critical infrastructure environments, specifically targeting Australia.

Read more →

To set up a Solana trading bot that copies a top Fomo whale, create and fund a wallet in Banana Gun, find the whale’s address with Fomo Wallet Finder, check its last 30 days, create the copy trade, set your filters, and set your exit. The copy trade itself runs in Telegram, with your own…

Read more →

Deeper Network Promo

The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.

Read more →

Ivanti customers are in familiar territory, responding to yet another actively exploited zero-day affecting one of the vendor’s most commonly targeted security products.  Volexity researchers, which discovered in-the-wild exploitation earlier this month, said attackers actually exploited three zero-days in a chain that allowed them to bypass authentication, execute code remotely and escalate privileges.  Ivanti disclosed…

Read more →

August 2026 Windows Updates brought a patch for CVE-2026-62878, a remote code execution vulnerability in Windows DNS Server, allowing an attacker to remotely cause memory corruption on the DNS server without authentication or special privileges. According to Microsoft’s advisory, such memory corruption could be used for arbitrary code execution. Subsequently, security researchers Nicolas Alejandro Malizia…

Read more →

69Critical 1337Important 0Moderate 1Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild. Microsoft patched 1,407 CVEs in its October 2026…

Read more →

Federal authorities have charged 14 people and seized roughly 187 computers in their newest effort to disrupt North Korea’s remote IT worker scheme.  The Justice Department announced the indictment Tuesday, highlighting two arrests and searches of more than 40 residences in Texas known or suspected to operate as “laptop farms,” where facilitators maintain employer-issued laptops…

Read more →

Picture a composite case drawn from documented scams where a tech professional spends forty minutes on a video…

Read more →

The Democratic People’s Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.

Read more →

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs;…

Read more →

When VergeIO’s new CEO sat down in front of journalists from four continents in Palo Alto, he summed up his reason for being there in one line. “We thought the market was…

Read more →

If you’ve ever looked at a list of cybersecurity jobs and felt like none of them fit you, you might just be looking at a short list. Most career guides cover the same few roles, like the analyst watching alerts or the pen tester (penetration tester, someone hired to legally break into systems to find…

Read more →

Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as “critical.” Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-96951 is a security feature bypass vulnerability that affects Windows Shell. The shared…

Read more →

Anthropic’s latest study combines IoT and network tests to explore AI self-replication, which researchers said would be “challenging” to shut down.

Read more →

There is a storeroom in almost every growing company with a stack of laptops nobody ordered on purpose. Someone needed machines in a hurry, a vendor had stock, and the purchase…

Read more →

Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today’s patch Tuesday, and one is already exploited. CVE-2026-96951: An already exploited Windows Shell Security Feature Bypass Vulnerability. This vulnerabliity allows bypassing the “Mark of the Web” making it…

Read more →

The Federal Trade Commission is asking a court to force the owner of multiple digital security and privacy companies from further operations, saying the businesses are serially defrauding their customers out of millions of dollars. Earlier this month, the FTC filed a federal lawsuit in Ohio against Dmitry Belkin and 12 of his businesses, alleging…

Read more →

Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self-propagating worm botnets that are “challenging to shut down,” since “there’s no centralized…

Read more →

A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker…

Read more →

An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according to Volexity.…

Read more →

The move is a turning point in the developer’s relationship with AI and Linux.

Read more →

A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP’s official Python client for BTP services. An attacker must be able to control…

Read more →

Compare the best NinjaOne Alternatives for endpoint management, patch management, remote monitoring, IT automation and MSP security workflows.

Read more →

A GPU waiting for data still draws full power. DDN has built its entire pitch around that one uncomfortable fact, and with bookings growing threefold, a rebuilt executive team…

Read more →

…To Close The Loop Between Product Design And Frontline Maintenance.

Read more →

It just got a whole lot easier to vibe code the exact Android app you need – no developer experience required.

Read more →

Apple has finally has a dedicated smart display. It’s called Apple HomeView, it has a 7-inch screen sitting on a speaker, it knows your face, and in Australia it costs RRP…

Read more →

GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials. “Your configuration becomes validated and exempt from expiry after its first successful publish,” the…

Read more →

A joint international law enforcement and industry operation against scammers netted 28 arrests, rescued 117 trafficking victims and led to the takedown of more than 3.7 million accounts, the Justice Department announced Tuesday. The crackdown, billed as “Joint Disruption Week,” focused on West Africa and also identified more than $11 million in freezable funds and…

Read more →

Read more →

Read more →

Apple’s ‘Welcome Home’ event featured all the new smart home hardware coming to the Apple lineup.

Read more →

HomePod mini 2 is here, and there are four major upgrades that separate it from the first generation.

Read more →

Learn how Cisco’s Secure Development Lifecycle (CSDL) is evolving to support AI-driven development, ensuring secure and resilient software at speed.

Read more →

  We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and programs and promoting the implementation of PCI security standards worldwide to protect payment data. We…

Read more →

When Workday acquired Sana just about a year ago, it said that the combination of Sana’s AI with Workday’s platform would create a new “front door” to work. Today at its Workday Rising conference, it unveiled that front door, turning Sana into Workday’s default home screen that, it said, “brings tasks, decisions, meetings, and agent…

Read more →

As an Apple Home user, here’s what stands out about Apple’s new smart home hub – and what I want to test firsthand.

Read more →

Deeper Network Promo

TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the…

Read more →

Authors: Yun Zheng Hu Introduction Today Fox-IT is publicly releasing its full Cobalt Strike Beacon Corpus, containing 56,843 raw beacons and their parsed configurations, from 190,182 sightings collected from 30,604 unique IP addresses running a Team Server (the Cobalt Strike command-and-control server that beacons connect back to) between 4 July 2018 and 29 September 2026,…

Read more →

Apple has launched its most serious push yet into your home, built around its attempt to normalize always-on AI with Siri. As widely expected, the new products include its much-anticipated Apple HomeView smart display, a new Apple TV 4K with Siri AI, the next generation HomePod mini 2, and Apple Home Collection, a range of home accessories designed in collaboration with…

Read more →

Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims

Read more →

New market research from Counterpoint Research shows that global smartphone sales fell by 20% in the third quarter of this year compared with the same period a year ago. This is the lowest level for a third quarter since 2012. The decline is attributed to the ongoing shortage of memory components, where sharply rising prices…

Read more →

Flashpoint research suggests that only 25% of security teams have actively deployed AI, with many concerned about AI Agents’ negative impact

Read more →

The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying ​Grindr users’ sensitive data to advertisers. The administrative penalty is the largest issued by the data protection watchdog, arguing the case merited a high fine because of the “very serious” nature of the…

Read more →

Norway’s privacy regulator Datatilsynet has fined advertising technology company Xandr 92 million Norwegian kroner, approximately $9.6 million, for unlawfully processing and sharing sensitive information about Grindr users. While the decision concerns users in Norway, the data-sharing practices were not confined to Norwegian users. BleepingComputer reports that information about Grindr users in other countries was also…

Read more →

Exclusive: A new Employ report shows how AI is both helping and hurting the hiring industry.

Read more →

Critical infrastructure faces mounting threats from nation-state groups and AI-driven attacks. In the latest installment of our Cybersecurity Awareness Month blog series, learn how leading cybersecurity agencies, such as CISA, are advising critical infrastructure organizations on ways to protect themselves and the essential services they provide. Key takeaways Critical infrastructure organizations often struggle with asset…

Read more →

HomeView is a square-shaped screen for smart home control, hands-free FaceTime calls and access to Siri AI.

Read more →

The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting…

Read more →

Another European move toward digital sovereignty has curtailed adopting the US workplace suite.

Read more →

GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform. The vulnerability, tracked as CVE-2026-97229, was fixed in versions 19.4.2, 19.3.5,…

Read more →

Microsoft has launched Decision-1, an AI model that returns probabilities for predefined answers, allowing software applications to use its outputs directly instead of processing a free-form response from a large language model (LLM). The model targets tasks such as classifying requests, prioritizing incidents, and checking AI-generated responses. Microsoft says it can handle these decisions with…

Read more →

A cyberattack has forced hundreds of supermarkets across France to throw away refrigerated and frozen food after attackers interfered with the systems that keep it cold. The attack caused significant financial losses and food waste. Some installations reportedly reached temperatures of around 50°C (122°F), with damaged equipment and reports of fires adding to the disruption.…

Read more →

Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models,…

Read more →

Microsoft on Monday unveiled the Maia 300, its third-generation AI chip. According to Microsoft, the new chip will be optimized to handle the latest reasoning AI models and agents, which should result in lower operating costs. “We expect Maia 300 to deliver 40% more tokens per megawatt compared to leading GPU-based systems,” said Scott Guthrie,…

Read more →

I remember the name of that AI doco now – The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: “it’s gonna kill us all” versus “it’s gonna make…

Read more →

The world is advancing toward a future in which over 10 billion humans coexist with trillions of autonomous agents in a superintelligent universe. But as AI becomes more intelligent, humanity is being divided into those who can access intelligent tools and those who will remain isolated from one of the greatest technological revolutions in decades.…

Read more →

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an…

Read more →

A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by reclaiming abandoned GitHub repository names, potentially exposing millions of package downloads to supply-chain attacks. Researchers at Bloom Security identified more than 1500 potentially vulnerable npm packages, including security scanners, authentication tools, and cryptographic packages. The vulnerability, dubbed SlugFest, came…

Read more →

The government is planning tweaks to legislation, new incident response and more to head of AI security threats

Read more →

Every day, thousands of SOC and IR teams worldwide analyze suspicious files, emails, and links with ANY.RUN. Beyond individual investigations, this activity generates valuable data on emerging threats, industry trends, and SOC operational performance. Drawing on real-world investigations across thousands of organizations, ANY.RUN provides visibility into threats affecting different sectors, from banking to retail. Security…

Read more →

For years, SOC Prime has focused on one core problem: curating behavioral detection rules that cover both the threats that never go away and the new ones that emerge every day. As agentic AI changes how security teams work, we see the same opportunity opening up in a new area — and we’re expanding our…

Read more →

Socura report claims CISOs are calling in sick or taking holiday to miss Patch Tuesday

Read more →

GitLab has released emergency security updates addressing CVE-2026-97229, a maximum-severity remote code execution vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE). The flaw has a CVSS score of 10.0 and could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable GitLab server under certain conditions. The vulnerability resides in GitLab’s…

Read more →

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store’s fridges and freezers, a device made by Danish company Danfoss…

Read more →

Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

Read more →

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. “GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression…

Read more →