Author: NCIJ NETWNCIJ NETWORK

gorodenkoff/iStock/Getty Images PlusFollow ZDNET: Add us as a preferred source on Google.ZDNET’s key takeawaysAI brings new challenges for hard-working cyber staff.Talented professionals will question almost everything.Work with agents to make decisions that reduce risks.Working in cybersecurity is a tough gig. While security teams work hard to prevent damage to their organizations, ZDNET reported earlier this year that many cyber professionals aren’t receiving the recognition they deserveEmerging technology brings new challenges. AI-assisted vulnerability discovery is accelerating the pace of bug reports, with a growing mismatch between what machines can surface and what humans can realistically triage.Also: AI failed to patch software flaws 74% of the time,…

Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello for Business key to authenticate to Microsoft Entra ID. The attacker can then establish longer-term cloud access, register a device it controls, obtain a Primary Refresh Token (PRT), and add further authentication methods where tenant policies permit. On TPM-backed systems, the attacker does not extract the private key, recover the PIN, or trigger a biometric prompt. Windows ticketing keeps private-key operations available while the user is interactively signed in, allowing code…

Bitcoin’s BIP-110-enforcing branch stalled at block 961,633 on Sunday after producing only two blocks, while the non-enforcing chain advanced to 961,721, widening the gap to 88 blocks. According to the BIP-110 monitor, updated at 10:19 am UTC, the branch’s latest block had been mined about 12 hours earlier. Ocean records show that a pseudonymous mining group called Roughnecks produced the branch’s first two blocks using Ocean’s Decentralized Alternative Templates for Universal Mining (DATUM) mining protocol. The divergence began after BIP-110 entered mandatory signaling at block 961,632 on Saturday. Only 51 of the preceding 2,016 blocks, or 2.53%, signaled support. During this window,…

When Israel launched its latest war against Hezbollah in March, the first targets the military warned it would strike were not weapons depots or underground command centers.They were banks.Israeli fighter jets leveled more than a dozen branches of a shadowy financial institution known as Al-Qard al-Hassan, long accused of operating as Hezbollah’s bank in Lebanon. More airstrikes followed on exchange shops that Iran used to funnel money to Hezbollah, its Lebanese proxy, and on gas stations that generated revenue for the group.With these strikes, Israel was sending a clear message: Hezbollah’s money, not only its arsenal, was in the cross…

Andy Burnham is to undertake a national tour this coming week as he aims to improve the government’s connection with the British public during his premiership.The prime minister is expected to announce a set of policies that will help people financially as many struggle with the cost of living, as well as indicate his intent to improve high streets across the country.Burnham has previously given the public “breathing space” since succeeding Keir Starmer in the role last month, but is said to be in “listening mode” as he tours Britain and pushes his “10-year plan to bring back hope”.While an…

The prime minister is set to announce “a series of measures to make life easier” for those struggling with the cost of living in the coming days, Downing Street says.No 10 says Andy Burnham’s plans are to “give people some room to breathe”. He will also focus on ways of “improving high streets” as he embarks on a tour of the UK.But the government is facing continued pressure over its early release scheme for prisoners in England and Wales – with criticism of the fact that two of PC Andrew Harper’s killers will be eligible from next year.Burnham is also…

More details continue to trickle out about OpenAI’s mysterious new hardware device — described previously as an AI-fueled smart speaker that will be the “physical manifestation” of ChatGPT. Bloomberg now reports that the device will be “donut-shaped,” designed thusly to allow users to carry it around their home and place it in different locations, like a bedside table or a kitchen counter. It will be constructed from “high-quality metal,” have a “premium look,” and (in a detail that mystifies) will have distinct “moving parts,” sources told Bloomberg. It also could be slightly more expensive than your average smart speaker, perhaps…

Swati KhandelwalAug 07, 2026Web Security / Vulnerability PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate desync vectors. PortSwigger said a separate human-guided discovery cascade also exposed a zero-day in Apache Traffic Server. Kettle said HTTP Terminator tested 30,000 websites where scanning was authorized through bug bounty or vulnerability disclosure programs and found roughly 700 vulnerable targets before deeper validation and RQP research. Kettle said those findings involved banks, government infrastructure, security products, and an airport. The research produced new desync triggers, a dual-matching…

BTCPay Server has temporarily restricted public remote connections to Lightning Network nodes running Lightning Network Daemon (LND) software after attackers exploited a critical vulnerability to obtain credentials and move funds. BTCPay said the restriction prevents external wallets such as Zeus from connecting through a BTCPay Server domain or Tor onion address on Docker deployments. BTCPay said Lightning payments can continue and that it plans to restore the remote-access option when it considers it safe. Version 2.4.2 installs LND version 0.21.1 and automatically regenerates the macaroon credentials on standard BTCPay installations. The project advised operators to check for unauthorized payments, unexpected channel closures,…

As the new season of Ted Lasso started, I was reminded of one of the show’s stranger storylines. When Dani “Football is life!” Rojas gets injured, his teammates blame the incident on a curse said to haunt the treatment room.Absurd? Perhaps. But sports curses aren’t just fictional plot devices. Football is fertile ground for stories of mysterious forces, blamed for everything from missed penalties to decades of failure.Take Mayo’s Gaelic football team. After they won the All-Ireland title in 1951, the story goes that a local priest cursed them, declaring they would not win another final until every member of…