Phillip de Wet
Phillip de Wet started in journalism as an honest B2B IT-sector reporter before straying into business, politics, and international affairs. He is currently in recovery, studying AI while writing about everything from hardware to infosec policy.
Both kept cloud regions running internally – but users couldn't reach them.
Public PoCs target stock Redis releases, including the newly patched 8.8.1. The authors say China’s Kimi K3 found 19 zero-days and built one exploit in 27 minutes.
An "overzealous" model could break out of a sandbox, said a member of its technical staff, weeks before Hugging Face was attacked by a "hyperfocused" pack.
CVE-2026-50522 went from patch to known exploitation with long-term consequences in days, as patch volumes continue to swell.
In Microsoft Forms, at least, the spammy-looking but critical address is getting a grown-up replacement.
So far, the Gold Eagle vulnerability clearing house seems to be CISA with some extra bits.
Google sells stretched private clouds as protection against a complete failure of any one zone. But it messed up the network config.
Apple's lawsuit describes a campaign of theft – and also a failure of basic security, such as managing company laptops and spotting sensitive documents being emailed.
Last week, Sysinternals creator Mark Russinovich started experimenting with agentic coding. Now Process Explorer for Mac will be available within weeks, he tells us.