Security At least two vulnerabilities are already under attack Not everyone is willing to follow responsible disclosure of vulns. An anonymous researcher has dumped what

KETTLE AI commands all the headlines nowadays, but the biggest security story of the week is all about human laziness and poor password habits –

SECURITY In the Azure Edition, of course Microsoft has extended Windows Server 2022 hotpatching into 2027, beyond the end of mainstream support for the operating

Security Carmaker points finger at an ‘unknown’ flaw as customer fallout continues Nissan has joined the growing list of Oracle customers cleaning up after a

Digital Security Your inbox is an identity system all of its own: whoever owns it may own a lot more Phil Muncaster 29 Jun 2026

It’s going to be a “messy” summer for security folks, especially when it comes to fixing the open source code that underpins their organizations. That’s

Security Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins It seems like nobody wants to carry

security Researchers warn many AI coding assistants now execute commands from project configurations A high-severity flaw in Amazon’s AI coding assistant for Visual Studio Code

security Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers The Miasma malware campaign has claimed another

Business Security Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience. Phil Muncaster 26 Jun

security One rule for the workers, another for execs ON CALL Supporting IT and keeping it secure is a serious endeavor. Which is why The Register

Security Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models Chinese cybersecurity vendor Qihoo 360 claims it’s

security Spotted in intrusions targeting insurance, education, IT, and professional services sectors A new self-destructing backdoor called Mistic used in intrusions since April appears to be

Cyber-Crime Former employee accuses company of prioritizing pending IPO over client security Security firm Huntress allegedly has a turncoat insider leaking info to a ransomware

Cyberespionage has remained a constant feature of Russia’s war against Ukraine. ESET Research has long tracked Gamaredon, one of the most active Russia-aligned advanced persistent

SECURITY And the admin password was right in the Active Directory description field PWNED Welcome back to PWNED, the weekly column where we school ourselves

security To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust Australia’s Security and Intelligence Organisation (ASIO) has

Security CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought It’s looking like another tough week (month? year?) for Switchzilla