IT News

Latest headlines from Hacker News, BleepingComputer, The Hacker News, Ars Technica and The Register. Links open the original sites.

Railway warns devs to rotate secrets after potential breach

BleepingComputer · 58m ago

Capcom confirms data breach affecting 11.7 million accounts

BleepingComputer · 2h ago

Disgraced eMudhra drops out of TLS business after using cert private key of 4

Ars Technica · 2h ago

LiteLLM release pipeline hacked to distribute info-stealer malware

BleepingComputer · 3h ago

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

The Hacker News · 3h ago

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

The Hacker News · 3h ago

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

The Hacker News · 4h ago

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

The Hacker News · 4h ago

Max-severity GitLab bug allows remote code execution over 12 years of releases

The Register · 4h ago

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

BleepingComputer · 5h ago

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

The Hacker News · 5h ago

Disgraced Indian cert issuer leaves the cert issuing business

The Register · 5h ago

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

The Hacker News · 6h ago

PHP2Shell puts dozens of UK government services out of service

The Register · 6h ago

Microsoft shares how to fix broken Exchange Online EWS apps

BleepingComputer · 6h ago

Apple App Store review process hits a traffic jam

The Register · 7h ago

When the attacker becomes the user: Rethinking account takeover

The Register · 7h ago

Singapore boffins weave a GUI into fabric, and it's machine washable too

The Register · 8h ago

Machine speed attacks require machine speed detection and response

BleepingComputer · 8h ago

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

The Hacker News · 8h ago

Amazon says PHP2Shell exploitation began 4 days before patches

BleepingComputer · 9h ago

Nvidia's Huang: Don't mention the AI-pocalypse

The Register · 9h ago

Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure

The Register · 10h ago

GitLab warns of new max severity code execution vulnerability

BleepingComputer · 10h ago

333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

Ars Technica · 10h ago

Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants

The Register · 10h ago

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

The Hacker News · 11h ago

Veteran ESA probe rolls out welcome mat for Japan's Phobos mission

The Register · 11h ago

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

The Hacker News · 11h ago

IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall

The Register · 12h ago

UK government hasn't the foggiest how much it's spending on digital transformation

The Register · 13h ago

Vendors asking forward deployed engineers to make good on trillion-dollar AI bet

The Register · 13h ago

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

The Hacker News · 13h ago

Authorities disrupt nearly 11,000 cybercrime networks in Africa

BleepingComputer · 13h ago

Why the immediate future of liquid cooling is hybrid

The Register · 14h ago

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

The Hacker News · 14h ago

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

The Hacker News · 15h ago

Certification authority eMudhra defends its laughably weak private keys

The Register · 15h ago

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

The Hacker News · 15h ago

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

The Hacker News · 18h ago