RC RANDOM CHAOS

The Wire

Curated cybersecurity and tech news — AI-summarized, source attributed.

cybersecurityvulnerability

Cisco patches critical Webex SSO flaw, forces customers to rotate SAML certificates

Cisco pushed fixes for four critical vulnerabilities this week, headlined by CVE-2026-20184 in Webex Services. The bug sat in the SSO integration with Control H

via BleepingComputer ·
cybersecurityvulnerability

Cisco Ships Emergency Fixes for Four Critical ISE and Webex RCE Bugs

Cisco has released patches addressing four critical vulnerabilities across its Identity Services Engine (ISE) and Webex product lines, each capable of enabling

via The Hacker News ·
open-sourcedevops

Datasette 1.0a27 drops Django-style CSRF for header-based protection, adds rename events

The latest Datasette alpha replaces Django-style CSRF form tokens with a modern header-based approach modeled on Filippo Valsorda's browser-header technique. Th

via Simon Willison ·
open-sourcedevops

datasette-export-database 0.3a1 patches CSRF cookie breakage from Datasette 1.0a27

Simon Willison shipped a point release of his datasette-export-database plugin to repair a regression introduced by Datasette 1.0a27. The plugin had been relyin

via Simon Willison ·
policytech-culture

FTC forces ad firms to settle over 'brand safety' standards targeting conservative sites

The FTC and eight states extracted settlements from Dentsu, Publicis, and WPP over allegations the agencies colluded through industry trade groups to deny ad re

via Ars Technica ·
cybersecuritymalware

Global Adware Campaign Pivots to Disabling Antivirus Software

A widespread adware operation that had long been dismissed as a low-severity nuisance has evolved into a more dangerous threat, now actively disabling antivirus

via Dark Reading ·
aicybersecurity

Google turns Gemini loose on malvertising as attackers scale up with generative AI

Google is leaning harder on Gemini to police its ad network, citing 8.3 billion ads blocked or removed and 24.9 million advertiser accounts suspended in 2025, w

via BleepingComputer ·
aitech-culture

Humans Play Differently Against LLMs — Assuming They're More Rational Than People

A controlled lab experiment on the multi-player p-beauty contest — a classic strategic reasoning game — found that humans shift their choices significantly lowe

via Schneier on Security ·
tech-cultureai

Intel's non-Ultra Core chips finally get new silicon with Wildcat Lake

Intel has refreshed its non-Ultra Core line with genuinely new hardware for the first time in years. Previous Series 1 and Series 2 non-Ultra parts were recycle

via Ars Technica ·
aiopen-source

llm-anthropic 0.25 adds Claude Opus 4.7 support with xhigh thinking effort

Simon Willison's llm-anthropic plugin bumped to 0.25, wiring up claude-opus-4-7 as a new target model. The release introduces an xhigh tier for the thinking_eff

via Simon Willison ·
cybersecurityvulnerability

Marimo notebook RCE weaponized to drop NKAbuse RAT from Hugging Face Spaces

A critical remote code execution flaw in the Marimo reactive Python notebook (CVE-2026-39987) is being exploited within hours of public disclosure, with Sysdig

via BleepingComputer ·
cybersecurityvulnerability

Microsoft's Original Secure Boot Certificate Hits Expiration Wall

The original Microsoft certificate anchoring Windows Secure Boot is reaching end-of-life, forcing a coordinated transition across the PC ecosystem. Secure Boot

via Dark Reading ·