Federal buyers, the FDA, and the EU’s CRA era all want your software’s ingredients list and next year’s CVE will interrogate the SBOMs you generate today.…
XWorm RAT Evolves Into Surveillance Platform
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
npm Trusted Publishing Flaw With 10 Million Downloads Exposes 1,500+ Packages to Malicious Takeover
A security flaw in npm’s Trusted Publishing feature exposed more than 1,500 packages to possible takeover through reclaimed GitHub repository names. The…
IT Security News Hourly Summary 2026-10-13 14h : 4 posts
4 posts published in the last hour 11:01Critical Ghostscript Vulnerability Lets Malicious PDFs Trigger Remote Code Execution 11:01$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant 11:01Amazon Fire TV Cube Security Flaws Allow Bootloader Unlocking and Permanent Root Access…
Critical Ghostscript Vulnerability Lets Malicious PDFs Trigger Remote Code Execution
A critical vulnerability in Ghostscript could allow attackers to execute code on vulnerable servers by uploading a specially crafted PDF containing a…
$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
Amazon Fire TV Cube Security Flaws Allow Bootloader Unlocking and Permanent Root Access
A recently released exploit package lets the third-generation Amazon Fire TV Cube gain an unlocked bootloader and persistent root access on firmware…
IT Security News Hourly Summary 2026-10-13 13h : 24 posts
24 posts published in the last hour 10:32UK Regains Early Access to AI Models After Reported White House Reversal 10:32SonicWall Fixes 4 SMA 1000 Vulnerabilities, Including Critical CVSS 10.0 SSRF Flaw 10:31AI and humans: Why their collaboration makes a Managed…
UK Regains Early Access to AI Models After Reported White House Reversal
UK researchers regain access to advanced AI models for safety testing as ministers consider stronger incident reporting and expand government cyber…
SonicWall Fixes 4 SMA 1000 Vulnerabilities, Including Critical CVSS 10.0 SSRF Flaw
SonicWall released security updates to address four vulnerabilities in its SMA 1000 series appliances, including a critical server-side request forgery…
AI and humans: Why their collaboration makes a Managed SOC so powerful
Cybercriminals have long been using artificial intelligence. They automate attacks, develop malware more quickly and scan corporate networks for…
Critical SonicWall Vulnerability Exploited in Attacks Following Disclosure
A critical SonicWall SMA1000 flaw, CVE-2026-102255 (CVSS 10.0), is being actively exploited days after disclosure, allowing unauthenticated attackers to…
Screencasting in the AI era
During my tenure as InfoWorld’s blogger-in-chief I became fascinated with narrated videos of software in action. Tools existed to do that kind of…
Amazon Fire TV Cube Rooted Using Four-Year-Old Arm Mali Vulnerability
A four-year-old Arm Mali GPU vulnerability can be used to root the third-generation Amazon Fire TV Cube, but…
AI distrust is GitHub’s opportunity
Developers have never been more inclined to use AI, yet never less inclined to trust its output. In Stack Overflow’s surveys, the proportion of…
Critical Progress MarkLogic Server Vulnerabilities Could Enable Code Execution and Privilege Escalation
Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation, server-side code execution, authentication bypass,…
The best place to run AI agents
Every few weeks, another enterprise leader asks me the same question: Should our AI agents run in the cloud or in our own data center? It sounds like a…
Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts
A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded OLE…
Local AI on NPUs: Building a zero-cloud photo deduplicator with OpenCLIP
Every new laptop today is marketed as an ‘AI PC’ thanks to a built-in Neural Processing Unit (NPU). But beyond chatting with small local LLMs, what…
IT Security News Roundup: 2026-10-13 Morning
IT Security News: Morning roundup, 2026-10-13 Summary This morning's security news highlights a sharp increase in critical remote code execution flaws across enterprise software, with urgent patches issued for high-severity vulnerabilities in GitLab, Citrix NetScaler, and MarkLogic database servers. At…
UK Government Announces Sweeping New AI Security Plans
The government is planning tweaks to legislation, new incident response and more to head of AI security threats
Meta outlines Muse Wonder safeguards for AI agents acting on your behalf
Meta’s Muse Wonder and Muse Wonder Full models are built for AI agents that handle tasks such as preparing insurance claims, reviewing leases and…
Critical Progress MarkLogic Flaws Enable Remote Code Execution and Admin Takeover
Progress released urgent security updates for MarkLogic Server to fix a broad set of critical and high-severity flaws that could let attackers gain…
Critical MariaDB Vulnerabilities Could Enable Remote Code Execution and Privilege Escalation
MariaDB maintainers have disclosed ten vulnerabilities affecting database server components, Linux packaging, and Connector/C. Under specific conditions,…