Uncategorized

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access 2026-04-07 at 18:15 By A high-severity security vulnerability has been disclosed in Docker Engine that could permit an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The vulnerability, tracked as CVE-2026-34040 (CVSS score: 8.8), stems from an incomplete fix for CVE-2024-41110, a maximum-severity vulnerability in the same […]

Break, no fix: Apple and Samsung make repairs hard 2026-04-07 at 18:08 By Dan Robinson Motorola and Google top PIRG’s latest scorecard Samsung and Apple phones are more difficult to repair than those from other makers, according to a report ranking devices by how easy to fix they are.… This article is an excerpt from

No-Nvidia interconnect club delivers 2.0 spec before v1.0 silicon ships 2026-04-07 at 15:02 By Simon Sharwood UALink splits work on physical layer and protocol specs to speed things up, literally and metaphorically The UALink Consortium, a group of tech giants working on GPU networking standards to provide an alternative to Nvidia’s NVLink and NVSwitch, has

Shots fired over proposal to build datacenter in Indianapolis 2026-04-07 at 14:59 By Dan Robinson Quite literally, from a gun, into the front door of a councilor who supports plan Datacenter protests have taken an ugly turn in the US, with gunshots fired at the home of an Indianapolis councilor who recently lent his support

OpenInfra General Manager talks sovereignty, governments deploying tech ‘kill switches’ 2026-04-07 at 14:59 By Richard Speed Geopolitics enter the room as Thierry Carrez shows that there’s more to Kubecon than AI Kubecon  Sovereignty was a big topic was at last week’s Kubecon, and Thierry Carrez, the General Manager of the OpenInfra Foundation, shared strong feelings

New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips 2026-04-07 at 14:58 By New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to escalate privileges and, in some cases, even take full control of a host. The efforts have been codenamed GPUBreach, GDDRHammer, and GeForge. GPUBreach goes

Apple’s chips are the core of a new landscape, but its biggest win is Windows 2026-04-07 at 12:56 By Rupert Goodwins Walled gardens make more sense when it’s an AI-lligator infested swamp outside Opinion  When the first M1 Apple Silicon systems sprouted at the end of 2020, we loved the tech but not the walled

Brits are falling out of love with posting every thought online 2026-04-07 at 12:02 By Dan Robinson Ofcom finds social media participation dropping as skepticism about digital life grows British adults are now less active on social media, according to Ofcom, with just half of users actively posting, and fewer now believe the benefits outweigh

Healthcare Executives Face a New Era of Personal Risk 2026-04-07 at 11:24 By Protecting executives’ digital and physical environments is no longer optional.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware 2026-04-07 at 10:45 By A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and N-day vulnerabilities to orchestrate “high-velocity” attacks and break into susceptible internet-facing systems. “The threat actor’s high operational tempo and proficiency in identifying exposed

Yahoo! Japan’s owner consolidating 164 OpenStack clusters into one 2026-04-07 at 09:24 By Simon Sharwood Customizations are causing pain so new cloud will stick to upstream cuts of the open source stack LY Corporation, the Japanese web giant that dominates messaging, e-commerce and payments in many Asian countries, has revealed it is replacing a heavily-customized

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed 2026-04-07 at 09:24 By Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings from VulnCheck. The vulnerability in question is CVE-2025-59528 (CVSS score: 10.0), a code injection vulnerability that could result in

Anthropic reveals $30bn run rate and plans to use 3.5GW of new Google AI chips 2026-04-07 at 04:41 By Simon Sharwood Broadcom’s building the silicon and is chuffed about that, but also notes Anthropic remains a risk Broadcom has announced that Google has asked it to build next-generation AI and datacenter networking chips, and that

Hackers run amok, but fewer corporate victims are paying up as ‘dealmakers’ strive to outwit criminals: report 2026-04-07 at 03:13 By Marc Vartabedian Corporate America is under digital siege — but the crooks aren’t cashing in like they used to, according to a new report. This article is an excerpt from Latest Technology News |

AI agents found vulns in this popular Linux and Unix print server 2026-04-07 at 03:13 By Jessica Lyons CUPS server shown spilling out remote code execution and root access In the latest chapter on leaky CUPS, a security researcher and his band of bug-hunting agents have found two flaws that can be chained to allow

AI slop got better, so now maintainers have more work 2026-04-07 at 03:13 By Thomas Claburn Once AI bug reports become plausible, someone still has to verify them If AI does more of the work but humans still have to check it, you need more reviewers. Now that AI models have gotten better at writing

AMD’s AI director slams Claude Code for becoming dumber and lazier since last update 2026-04-07 at 00:07 By Brandon Vigliarolo ‘Claude cannot be trusted to perform complex engineering tasks’ according to GitHub ticket If you’ve noticed Claude Code’s performance degrading to the point where you find you don’t trust it to handle complicated tasks anymore,

Anthropic closes door on subscription use of OpenClaw 2026-04-06 at 23:17 By Thomas Claburn The company is having trouble meeting user demand OpenClaw is popular, but not with the people responsible for keeping Anthropic’s services online. The company has disallowed subscription-based pricing for users who use the open-source agentic tool with Claude to try to

How to choose a high-volume printer that scales with your business 2026-04-06 at 22:32 By Barret Wertz In industries where paper carries legal or financial weight, a jammed tray isn’t just a nuisance; it’s a threat to your professional credibility. This article is an excerpt from Latest Technology News | New York Post View Original

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations 2026-04-06 at 22:31 By An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East. The activity, assessed to be ongoing, was carried out in three distinct attack waves that took place on