Partner tells Ars that HPE should be giving out more free VM Essentials licenses. Hewlett Packard Enterprise’s (HPE) new virtualization software promotion will likely pique the interest of end users and resellers who are unhappy with Broadcom’s pricing of VMware. During its HPE Discover event in Las Vegas this…
SearchLeak exploit shows why the industry’s approach to LLM security fails over and over. Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft revealed how their proof-of-concept exploit…
AMD’s stripping of TSME from consumer CPUs appears to be a deliberate, covert move. A decade ago, AMD added a protection to its high-end CPUs to protect them against cold boot attacks and other types of physical exploits that siphon sensitive data out of the connected memory chips. Short…
Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they come. One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to pay up in…
A separate zero-day also disclosed by Nightmare Eclipse appears to be patched as well. Microsoft on Tuesday released fixes for two high-severity zero-days that were disclosed by a researcher who has been locked in a testy beef with the software giant. Nightmare Eclipse, the pseudonym the researcher goes by,…
Use-after-free bug can be exploited to evade sandbox defenses. Researchers have analyzed a high-severity vulnerability in Linux that’s able to escalate untrusted users to root by exploiting a bug you don’t often see: a single errant character inside the kernel. The vulnerability, tracked as CVE-2026-23111, is located in nf_tables,…
73 packages run self-replicating stealer as soon as they’re opened by an AI agent. Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI coding agents. In all, multiple researchers said,…
Seller of the Sound Blaster Katana V2X doesn’t consider the behavior a vulnerability. Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious attacks, typically require hackers to jump through all kinds of hoops to bypass the…
By targeting large numbers of users, attackers increased their chances of success. Dashlane said that attackers mounted a coordinated hacking campaign against a large base of its users in an attempt to recover as many encrypted password vaults as possible. The password manager provider said fewer than 20 personal…
Security advisory leaves out key details. Dashlane maintains complete silence. There’s a lot that doesn’t add up in a security advisory password manager Dashlane published Monday, warning that attackers managed to obtain 20 encrypted user vaults. “Starting on Sunday, May 31, 2026, an external party launched a brute force…
