Amazon security boss says crims abused max-security Cisco firewall flaw weeks before disclosure

Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, ...

LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks

The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...
InfoQ

Beyond the Code: Hiring for Cultural Alignment

Alicia Collymore discusses the critical role of cultural alignment in building high-performing engineering teams. She explains how to move beyond "vibes" by identifying specific attributes in company ...
TMCnet

Chainguard Launches Commercial Builds with Industry Leaders, Setting a New Standard for Verifiable, Zero-Vulnerability Software

Azul, Chainloop, Elastic, Expanso, F5 NGINX, Grafana Labs, Mattermost, Nirmata, Percona, Smallstep, and Tiger Data trust Chainguard for verifiably secure software with zero known ...
InfoQ

QCon London 2026: From Prompt to Production: How Spotify Builds Internal Tools in Days with AI

At QCon London 2016, engineers from Spotify presented how the company accelerates internal tool development using its ...
TMCnet

Chainguard Launches the First Unified Repository for Secure-by-Default Open Source Artifacts

AI coding tools and autonomous agents are generating more code, pulling in more dependencies, and interacting with open source at a scale humans have never seen before," said Dan Lorenc, CEO and ...
Android

Fake Claude Code & OpenClaw AI Tools Delivering Data-Stealing Malware to Developers

Kaspersky has warned of a new malware campaign targeting developers through fake Claude Code and OpenClaw downloads. Using malicious search ads, hackers are infecting Windows and Mac users with ...
Ars Technica

OpenAI is acquiring open source Python tool-maker Astral

OpenAI announced Thursday that it has entered into an agreement to acquire Astral, the company behind popular open source Python development tools such as uv, Ruff, and ty, and integrate the company ...
InfoWorld

JDK 26: The new features in Java 26

JDK 26 moves to general production availability. This short-term release is backed by six months of Premier-level support. Java Development Kit (JDK) 26, the latest standard Java release from Oracle, ...

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
The Hacker News

Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access

Interlock ransomware is actively exploiting CVE-2026-20131 (CVSS 10.0) in Cisco FMC, enabling unauthenticated remote code execution as root.
MIT Technology Review

The Download: glass chips and “AI-free” logos

Human-made glass is thousands of years old. But it’s now poised to find its way into the AI chips used in the world’s newest and largest data centers.   This year, a South Korean company ...