2026

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed 2026-05-05 at 17:46 By Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a persistent OAuth token with no expiration date, no automatic cleanup, and in most organizations, no one

MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks 2026-05-05 at 17:46 By Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS) known as MetInfo, according to new findings from VulnCheck. The vulnerability in question is CVE-2026-29014 (CVSS score: 9.8), a code injection flaw that could result in

We Scanned 1 Million Exposed AI Services. Here’s How Bad the Security Actually Is 2026-05-05 at 17:46 By While the software industry has made genuine strides over the past few decades to deliver products securely, the furious pace of AI adoption is putting that progress at risk. Businesses are moving fast to self-host LLM infrastructure,

More missions, less money, higher risk: NASA’s back to the ’90s playbook 2026-05-05 at 17:33 By Richard Speed Faster, better, cheaper is back and history suggests you can’t get all three at the same time OPINION  NASA’s budget and its new administrator’s statements are evoking a ghost from the agency’s past: Faster, better, cheaper.… This

Bun posts Rust porting guide, says rewrite is still half-baked 2026-05-05 at 17:08 By Tim Anderson Zig’s no-AI policy is at odds with view that most open source code will be AI-written in future Bun creator Jarred Sumner has posted a Zig-to-Rust porting guide, igniting speculation that the project may migrate away from Zig, though

Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking 2026-05-05 at 16:34 By Connor Jones Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats Real estate giant Cushman & Wakefield has confirmed a data breach after two cybercrime groups, ShinyHunters and Qilin, separately claimed responsibility for attacks

Unexpected item in Windows’ bagging area 2026-05-05 at 13:21 By Richard Speed Activating Windows will cost more than a couple of cheap carrier bags Bork!Bork!Bork!  Things must be tough for UK grocery retailer Sainsbury’s, judging by the state of Windows Activation on one of its self-service kiosks.… This article is an excerpt from The Register

NHS to close-source hundreds of GitHub repos over AI, security concerns 2026-05-05 at 13:21 By Connor Jones Healthcare giant’s maintainers handed May deadline to enact the change The UK’s National Health Service (NHS) is ordering all of its technology leaders to temporarily wall off the organization’s open source projects over concerns relating to advanced AI

Microsoft’s bad obsession is showing up in shabby services and slipshod software. Here’s proof 2026-05-05 at 13:21 By Rupert Goodwins If you can’t bother to keep GitHub running, why should we bother with you? Opinion  It’s been another shabby week for Microsoft, and a shabbier one for its users. We learnt that Windows 11’s epic