Uncategorized

Exclusive: What the Celebrity Stalkerware Breach Means for Executive Protection 2026-05-05 at 21:18 By Security magazine spoke with Cybersecurity Researcher Jeremiah Fowler about the risks of stalkerware in executive protection.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware 2026-05-05 at 21:18 By A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. “These installers are distributed from the legitimate website of DAEMON Tools and are signed with digital certificates

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE 2026-05-05 at 21:18 By The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to remote code execution (RCE). The vulnerability, tracked as CVE-2026-23918 (CVSS score: 8.8), has been

China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions 2026-05-05 at 21:18 By A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025. The activity is being tracked by Cisco Talos under

SAP dives deeper into Iceberg with Dremio acquisition 2026-05-05 at 17:46 By Lindsay Clark ERP giant previously leaned on Databricks for integration SAP has snapped up Dremio, a data integration and analytics provider, to extend the reach of its data analytics and AI agent-building tools into external data sources.… This article is an excerpt from

VMware claims Cloud Foundation on track for world domination 2026-05-05 at 17:46 By Simon Sharwood Delivers update aimed at reducing hardware bill shock VMware has announced an update to its flagship Cloud Foundation (VCF) private cloud suite and tried to make it fit the times by adding features that allow users to run with less

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed 2026-05-05 at 17:46 By Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a persistent OAuth token with no expiration date, no automatic cleanup, and in most organizations, no one

We Scanned 1 Million Exposed AI Services. Here’s How Bad the Security Actually Is 2026-05-05 at 17:46 By While the software industry has made genuine strides over the past few decades to deliver products securely, the furious pace of AI adoption is putting that progress at risk. Businesses are moving fast to self-host LLM infrastructure,

MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks 2026-05-05 at 17:46 By Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS) known as MetInfo, according to new findings from VulnCheck. The vulnerability in question is CVE-2026-29014 (CVSS score: 9.8), a code injection flaw that could result in

More missions, less money, higher risk: NASA’s back to the ’90s playbook 2026-05-05 at 17:33 By Richard Speed Faster, better, cheaper is back and history suggests you can’t get all three at the same time OPINION  NASA’s budget and its new administrator’s statements are evoking a ghost from the agency’s past: Faster, better, cheaper.… This

Bun posts Rust porting guide, says rewrite is still half-baked 2026-05-05 at 17:08 By Tim Anderson Zig’s no-AI policy is at odds with view that most open source code will be AI-written in future Bun creator Jarred Sumner has posted a Zig-to-Rust porting guide, igniting speculation that the project may migrate away from Zig, though

Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking 2026-05-05 at 16:34 By Connor Jones Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats Real estate giant Cushman & Wakefield has confirmed a data breach after two cybercrime groups, ShinyHunters and Qilin, separately claimed responsibility for attacks

Unexpected item in Windows’ bagging area 2026-05-05 at 13:21 By Richard Speed Activating Windows will cost more than a couple of cheap carrier bags Bork!Bork!Bork!  Things must be tough for UK grocery retailer Sainsbury’s, judging by the state of Windows Activation on one of its self-service kiosks.… This article is an excerpt from The Register

Microsoft’s bad obsession is showing up in shabby services and slipshod software. Here’s proof 2026-05-05 at 13:21 By Rupert Goodwins If you can’t bother to keep GitHub running, why should we bother with you? Opinion  It’s been another shabby week for Microsoft, and a shabbier one for its users. We learnt that Windows 11’s epic

NHS to close-source hundreds of GitHub repos over AI, security concerns 2026-05-05 at 13:21 By Connor Jones Healthcare giant’s maintainers handed May deadline to enact the change The UK’s National Health Service (NHS) is ordering all of its technology leaders to temporarily wall off the organization’s open source projects over concerns relating to advanced AI

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows 2026-05-05 at 13:20 By The North Korea-aligned state-sponsored hacking group known as ScarCruft has compromised a video game platform in a supply chain espionage attack, trojanizing its components with a backdoor called BirdCallto likely target ethnic Koreans residing in China. While prior versions

Classic ASCII game NetHack debuts version 5.0 just 11 years after last major release 2026-05-05 at 11:25 By Simon Sharwood New monsters! New magic items! An Arm port! And compliance with a dead C standard Antiques Code Show  Admirers of Roguelike games have a new distraction: Version 5.0 of NetHack dropped last weekend.… This article

Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries 2026-05-05 at 11:24 By Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of conduct-themed lures and legitimate email services to direct users to attacker-controlled domains and steal authentication tokens. The multi-stage campaign, observed between April 14

Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API 2026-05-05 at 11:24 By A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The vulnerability (CVE-2026-22679, CVSS score: 9.8) relates to a case of unauthenticated remote code execution affecting Weaver

Microsoft to stop taking reservations for 17 Azure VM flavours, kill 13 in 2028 2026-05-05 at 09:19 By Simon Sharwood Haswell’s had its day and Skylake and Cascade Lake are draining away Microsoft will stop offering long-term rentals for 17 Azure instance types – most of them powered by CPUs Intel released in the 2010s