Intelligence Feed
showing 100 items
Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEs
Kubernetes Blog · Kubernetes · src 8 · Tue, 26 May 2026 09:30:00 -0800 · HIGH 100
<p>The Kubernetes project relies on transparency to empower cluster administrators and security
researchers. One important way we do that is by publishing CVE records into the Common
Vulnerabilities and Exposures database. As part of our ongoing effort to mature the official
<a href="https://kubernetes.io/docs/reference/issues-security/official-cve-feed/index.json">Kubernetes CVE Feed</a>, we have identified
some dis
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
The Hacker News · Cybersecurity · src 8 · Mon, 10 Aug 2026 20:30:29 +0530 · HIGH 100
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default.
That pretty much covers the mood this week. Old bugs are back, supply chains are getting stranger, and some exploit paths are so short you wonder what was supposed to stop them in the first place.
That’s only part of it. Here’s
Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networks
The Hacker News · Cybersecurity · src 8 · Tue, 11 Aug 2026 14:46:24 +0530 · HIGH 100
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the world.
Targets of these attacks include healthcare and public health, financial services, government services and facilities, and professional and nonprofit services.
"Gunra is another variant in the ongoing trend of
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
The Hacker News · Cybersecurity · src 8 · Tue, 11 Aug 2026 18:41:23 +0530 · HIGH 100
OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response.
"Built on GPT‑5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks (e.g., finding zero-day vulnerabilities and developing exploit chains) and to reduce refusals for certain higher-risk
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
The Hacker News · Cybersecurity · src 8 · Tue, 11 Aug 2026 22:17:44 +0530 · HIGH 100
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent.
The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. Microsoft's
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 01:40:55 +0530 · HIGH 100
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks.
The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first.
The flaw is tracked as CVE-2026-68820 (CVSS score: 7.0) and is the only
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 12:11:38 +0530 · HIGH 100
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak.
The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet.
RoguePlanet has been described
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 13:01:40 +0530 · HIGH 100
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.
The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.
"SAP Commerce Cloud allows an
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 14:31:54 +0530 · HIGH 100
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.
The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 16:43:03 +0530 · HIGH 100
Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.
The most severe of the flaws are listed below -
CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
The Hacker News · Cybersecurity · src 8 · Thu, 13 Aug 2026 11:39:48 +0530 · HIGH 100
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code.
The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday updates.
"The authentication
GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
The Hacker News · Cybersecurity · src 8 · Fri, 14 Aug 2026 00:15:12 +0530 · HIGH 100
A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr.
The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution (RCE). The security defect remains unpatched.
It was first disclosed on August 12, 2026, at 10:46 UTC, by a researcher named @
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
The Hacker News · Cybersecurity · src 8 · Sat, 15 Aug 2026 12:54:04 +0530 · HIGH 100
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned.
The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
The Hacker News · Cybersecurity · src 8 · Sat, 15 Aug 2026 14:08:46 +0530 · HIGH 100
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.
The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation.
"SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
The Hacker News · Cybersecurity · src 8 · Mon, 17 Aug 2026 13:06:19 +0530 · HIGH 100
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).
The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code
Max severity SAP Commerce Cloud flaw now targeted in attacks
BleepingComputer · Cybersecurity · src 9 · Fri, 14 Aug 2026 09:45:18 -0400 · HIGH 100
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused. [...]
Microsoft working on Defender patch for ShieldBreak zero-day
BleepingComputer · Cybersecurity · src 9 · Mon, 17 Aug 2026 05:05:33 -0400 · HIGH 100
Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414. [...]
Microsoft Plugs Nearly 400 Security Holes
Krebs on Security · Cybersecurity · src 10 · Tue, 11 Aug 2026 21:28:35 +0000 · HIGH 95
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
The Hacker News · Cybersecurity · src 8 · Tue, 11 Aug 2026 22:05:27 +0530 · HIGH 93
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience.
"Its recovery ecosystem combines the Session messaging network with blockchain-backed services that store and deliver resources used throughout the extortion process," the Microsoft Threat
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 23:09:27 +0530 · HIGH 93
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and India.
The activity, per Check Point Research, is part of Operation Dream Job, a long-running cyber espionage and
Kubernetes v1.36: User Namespaces in Kubernetes are finally GA
Kubernetes Blog · Kubernetes · src 8 · Thu, 23 Apr 2026 10:35:00 -0800 · HIGH 91
<p>After several years of development, User Namespaces support in
Kubernetes reached General Availability (GA) with the v1.36 release.
This is a Linux-only feature.</p>
<p>For those of us working on low level container runtimes and rootless
technologies, this has been a long awaited milestone. We finally
reached the point where "rootless" security isolation can be used for
Kubernetes workloads.</p>
<p>This
Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA
Kubernetes Blog · Kubernetes · src 8 · Fri, 24 Apr 2026 10:35:00 -0800 · HIGH 91
<p>On behalf of Kubernetes SIG Auth and SIG Node, we are pleased to announce the
graduation of fine-grained <code>kubelet</code> API authorization to General Availability
(GA) in Kubernetes v1.36!</p>
<p>The <code>KubeletFineGrainedAuthz</code> feature gate was introduced as an opt-in alpha
feature in Kubernetes v1.32, then graduated to beta (enabled by default) in
v1.33. Now, the feature is generally available and t
Kubernetes v1.36: Pod-Level Resource Managers (Alpha)
Kubernetes Blog · Kubernetes · src 8 · Fri, 01 May 2026 10:35:00 -0800 · HIGH 91
<p>Kubernetes v1.36 introduces
<a href="https://kubernetes.io/docs/concepts/workloads/resource-managers/#pod-level-resource-managers">Pod-Level Resource Managers</a>
as an alpha feature, bringing a more flexible and powerful resource management
model to performance-sensitive workloads. This enhancement extends the kubelet's
Topology, CPU, and Memory Managers to support pod-level resource specifications
(<code>.spec.r
Kubernetes v1.36: Admission Policies That Can't Be Deleted
Kubernetes Blog · Kubernetes · src 8 · Mon, 04 May 2026 10:35:00 -0800 · HIGH 91
<p>If you've ever tried to enforce a security policy across a fleet of
Kubernetes clusters, you've probably run into a frustrating chicken-and-egg
problem. Your admission policies are API objects, which means they don't
exist until someone creates them, and they can be deleted by anyone with
the right permissions. There's always a window during cluster bootstrap
where your policies aren't active yet, and there's no w
Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA
Kubernetes Blog · Kubernetes · src 8 · Thu, 07 May 2026 10:35:00 -0800 · HIGH 91
<p>Dynamic Resource Allocation (DRA) has fundamentally changed how platform administrators handle hardware
accelerators and specialized resources in Kubernetes. In the v1.36 release, DRA
continues to mature, bringing a wave of feature graduations, critical usability
improvements, and new capabilities that extend the flexibility of DRA to native
resources like memory and CPU, and support for ResourceClaims in PodGroup
Kubernetes v1.36: Deprecation and removal of Service ExternalIPs
Kubernetes Blog · Kubernetes · src 8 · Thu, 14 May 2026 10:35:00 -0800 · HIGH 91
<p>The <code>.spec.externalIPs</code> field for <a href="https://kubernetes.io/docs/concepts/services-networking/service/">Service</a> was an early attempt to provide
cloud-load-balancer-like functionality for non-cloud clusters.
Unfortunately, the API assumes that every user in the cluster is fully
trusted, and in any situation where that is not the case, it enables
various security exploits, as described in
<a href
Kubernetes v1.36: Mixed Version Proxy Graduates to Beta
Kubernetes Blog · Kubernetes · src 8 · Fri, 15 May 2026 10:00:00 -0800 · HIGH 91
<p>Back in Kubernetes 1.28, we introduced the <code>Mixed Version Proxy (MVP)</code> as an Alpha feature (under the feature gate <code>UnknownVersionInteroperabilityProxy</code>) in a <a href="https://kubernetes.io/blog/2023/08/28/kubernetes-1-28-feature-mixed-version-proxy-alpha/">previous blog post</a>. The goal was simple but critical: make cluster upgrades safer by ensuring that requests for resources not yet kno
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
The Hacker News · Cybersecurity · src 8 · Tue, 11 Aug 2026 11:18:44 +0530 · HIGH 88
Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform's plugins team to temporarily disable their downloads.
"Unlike traditional software supply chain attacks, zero source code files were modified within the official WordPress.org repository," Wordfence researcher Paolo Tresso said.
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 11:45:58 +0530 · HIGH 88
Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild.
The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker to trigger
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
The Hacker News · Cybersecurity · src 8 · Mon, 17 Aug 2026 14:59:55 +0530 · HIGH 88
Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies.
"While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including
Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GA
Kubernetes Blog · Kubernetes · src 8 · Tue, 12 May 2026 10:35:00 -0800 · HIGH 86
<p>Since its original implementation in the Linux kernel in 2018,
<em>Pressure Stall Information</em> (PSI) has provided users
with the high-fidelity signals needed to identify resource saturation before it becomes an outage.
Unlike traditional utilization metrics, PSI tells the story of tasks stalled and time lost, all in nicely-packaged percentages of time across the CPU, memory, and I/O.</p>
<p>With the recent rel
Hackers exploit macOS Screen Sharing flaw to deploy Monero miner
BleepingComputer · Cybersecurity · src 9 · Fri, 14 Aug 2026 10:59:55 -0400 · HIGH 84
The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. [...]
Spotlight on WG Device Management
Kubernetes Blog · Kubernetes · src 8 · Wed, 24 Jun 2026 10:00:00 -0800 · HIGH 78
<p>The rising popularity of AI, Edge, and Telecommunications workloads on Kubernetes has led to new requirements for hardware management. We now need hardware specification beyond CPU time and memory allocations. This includes allocating GPUs, TPUs, network interfaces, and other hardware, sometimes after pod start and occasionally through time-sharing.</p>
<p>Efficiently managing this specialized hardware is the miss
Running Agents on Kubernetes with Agent Sandbox
Kubernetes Blog · Kubernetes · src 8 · Fri, 20 Mar 2026 10:00:00 -0800 · HIGH 77
<p>The landscape of artificial intelligence is undergoing a massive architectural shift. In the early days of generative AI, interacting with a model was often treated as a transient, stateless function call: a request that spun up, executed for perhaps 50 milliseconds, and terminated.</p>
<p>Today, the world is witnessing AI v2 eating AI v1. The ecosystem is moving from short-lived, isolated tasks to deploying multi
SafePal data breach impacts 39,798 customers, stolen info for sale
BleepingComputer · Cybersecurity · src 9 · Sun, 16 Aug 2026 19:47:06 -0400 · HIGH 74
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. [...]
Felons, Fraudsters Flog Offensive Cybersecurity Startup
Krebs on Security · Cybersecurity · src 10 · Wed, 08 Jul 2026 12:31:39 +0000 · HIGH 70
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names.
Con Kolivas Revives "-ck" Patches & MuQSS To Improve Linux Desktop Responsiveness
Phoronix · Linux/System · src 7 · Mon, 17 Aug 2026 06:26:08 -0400 · HIGH 67
Huge surprise this morning! Longtime Linux users may recall the out-of-tree work done years ago by open-source developer Con Kolivas... And as part of that his work on the Brain F*** Scheduler that evolved into the MuQSS scheduler, all in the name of working to improve Linux desktop and mobile responsiveness. While a number of years ago he decided to retire from this out-of-tree Linux kernel work, out of the blue he
What is Code
Martin Fowler · Software Engineering · src 8 · 2026-05-12T09:30:00-04:00 · HIGH 66
<p>Increasingly humans delegate writing code to agents. Will there even be
source code in the future? To wrestle with this question, we have to
understand what code is. <b class="author">Unmesh Joshi</b> sees code as having
two distinct but intertwined purposes: <i>instructions to a machine</i> and a
<i>conceptual model of the problem domain</i>. He explores why it's vital
to build a voc
Bliki: Interrogatory LLM
Martin Fowler · Software Engineering · src 8 · 2026-05-14T11:04:00-04:00 · HIGH 66
<p>When we need an LLM to perform a complex task, we often need to feed it a
lot of context. Coming up with a design for a new feature requires
descriptions of how we want the feature to appear to the user, guidelines on
how it should be implemented, information on external systems to consult, and
so on. All this can be several pages of markdown. The obvious way to do
this is for a human to write this conte
DSLs Enable Reliable Use of LLMs
Martin Fowler · Software Engineering · src 8 · 2026-07-14T08:51:00-04:00 · HIGH 66
<p> LLMs generate code incredibly fast, but to ensure they generate
exactly what is intended, they need clear boundaries. Abstractions and
Domain-Specific Languages (DSLs) provide a strong harness that guides LLMs
right from the start. <b class="author">Unmesh Joshi</b> describes how the example
of Tickloom - a domain model and DSL for illustrating distributed system
behavior - <a href="
Introducing Node Readiness Controller
Kubernetes Blog · Kubernetes · src 8 · Tue, 03 Feb 2026 10:00:00 +0800 · HIGH 66
<img alt="Logo for node readiness controller" src="https://kubernetes.io/node-readiness-controller-logo.svg" style="float: right; display: inline-block; margin-left: 2em;" />
<p>In the standard Kubernetes model, a node’s suitability for workloads hinges on a single binary "Ready" condition. However, in modern Kubernetes environments, nodes require complex infrastructure dependencies—such as network agents,
Announcing the AI Gateway Working Group
Kubernetes Blog · Kubernetes · src 8 · Mon, 09 Mar 2026 10:00:00 -0800 · HIGH 66
<p>The community around Kubernetes includes a number of Special Interest Groups (SIGs) and Working Groups (WGs) facilitating discussions on important topics between interested contributors. Today, we're excited to announce the formation of the <a href="https://github.com/kubernetes-sigs/wg-ai-gateway">AI Gateway Working Group</a>, a new initiative focused on developing standards and best practices for networking infr
Securing Production Debugging in Kubernetes
Kubernetes Blog · Kubernetes · src 8 · Wed, 18 Mar 2026 10:00:00 -0800 · HIGH 66
<p>During production debugging, the fastest route is often broad access such as <code>cluster-admin</code> (a ClusterRole that grants administrator-level access), shared bastions/jump boxes, or long-lived SSH keys. It works in the moment, but it comes with two common problems: auditing becomes difficult, and temporary exceptions have a way of becoming routine.</p>
<p>This post offers my recommendations for good pract
Announcing Ingress2Gateway 1.0: Your Path to Gateway API
Kubernetes Blog · Kubernetes · src 8 · Fri, 20 Mar 2026 11:00:00 -0800 · HIGH 66
<p>With the Ingress-NGINX <a href="https://kubernetes.io/blog/2025/11/11/ingress-nginx-retirement/">retirement</a> scheduled for March 2026, the Kubernetes networking landscape is at a turning point.
For most organizations, the question isn't whether to migrate to <a href="https://gateway-api.sigs.k8s.io/">Gateway API</a>, but how to do so safely.</p>
<p>Migrating from Ingress to Gateway API is a fundamental shift in
Kubernetes v1.36: Mutable Pod Resources for Suspended Jobs (beta)
Kubernetes Blog · Kubernetes · src 8 · Mon, 27 Apr 2026 10:35:00 -0800 · HIGH 66
<p>Kubernetes v1.36 promotes the ability to modify container resource requests and limits
in the pod template of a suspended Job to beta. First introduced as alpha in v1.35, this
feature allows queue controllers and cluster administrators to adjust CPU, memory, GPU,
and extended resource specifications on a Job while it is suspended, before it starts
or resumes running.</p>
<h2 id="why-mutable-pod-resources-for-suspe
Kubernetes v1.36: In-Place Vertical Scaling for Pod-Level Resources Graduates to Beta
Kubernetes Blog · Kubernetes · src 8 · Thu, 30 Apr 2026 10:35:00 -0800 · HIGH 66
<p>Following the graduation of Pod-Level Resources to Beta in v1.34 and the General Availability (GA) of In-Place Pod Vertical Scaling in v1.35, the Kubernetes community is thrilled to announce that <strong>In-Place Pod-Level Resources Vertical Scaling has graduated to Beta in v1.36!</strong></p>
<p>This feature is now enabled by default via the <code>InPlacePodLevelResourcesVerticalScaling</code> feature gate. It al
Kubernetes v1.36: Declarative Validation Graduates to GA
Kubernetes Blog · Kubernetes · src 8 · Tue, 05 May 2026 10:35:00 -0800 · HIGH 66
<p>In Kubernetes v1.36, <strong>Declarative Validation</strong> for Kubernetes native types has reached General Availability (GA).</p>
<p>For users, this means more reliable, predictable, and better-documented APIs. By moving to a declarative model, the project also unlocks the future ability to publish validation rules via OpenAPI and integrate with ecosystem tools like Kubebuilder. For contributors and ecosystem de
Kubernetes v1.36: Server-Side Sharded List and Watch
Kubernetes Blog · Kubernetes · src 8 · Wed, 06 May 2026 10:35:00 -0800 · HIGH 66
<p>As Kubernetes clusters grow to tens of thousands of nodes, controllers that watch
high-cardinality resources like Pods face a scaling wall. Every replica of a
horizontally scaled controller receives the full stream of events from the API
server, paying the CPU, memory, and network cost to deserialize everything, only
to discard the objects it is not responsible for. Scaling out the controller
does not reduce per-r
Kubernetes v1.36: Advancing Workload-Aware Scheduling
Kubernetes Blog · Kubernetes · src 8 · Wed, 13 May 2026 10:35:00 -0800 · HIGH 66
<p>AI/ML and batch workloads introduce unique scheduling challenges that go beyond simple Pod-by-Pod scheduling.
In Kubernetes v1.35, we introduced the first tranche of <em>workload-aware scheduling</em> improvements,
featuring the foundational Workload API alongside basic <em>gang scheduling</em> support built on a Pod-based framework,
and an <em>opportunistic batching</em> feature to efficiently process identical P
Announcing etcd 3.7.0-beta.0
Kubernetes Blog · Kubernetes · src 8 · Wed, 20 May 2026 00:00:00 +0000 · HIGH 66
<p>SIG-Etcd announces the availability of the <a href="https://github.com/etcd-io/etcd/releases/tag/v3.7.0-beta.0">first beta release of etcd v3.7.0</a>. This new version of the popular distributed database and key Kubernetes component includes the long-requested RangeStream feature, as well as a refactoring and cleanup of multiple legacy components and interfaces. v3.7 will deliver improved security, better operatio
From Kubernetes Dashboard to Headlamp: Understanding the Transition
Kubernetes Blog · Kubernetes · src 8 · Mon, 01 Jun 2026 10:00:00 -0800 · HIGH 66
<p>For many people, Kubernetes Dashboard was their first window into Kubernetes. It offered a simple visual way to see what was running in a cluster, inspect resources, and build confidence without relying on the command line. For years, it helped developers, students, and operators make sense of Kubernetes, and it served as an important onramp into the ecosystem.</p>
<p>The Kubernetes Dashboard project has now been
See your serverless: introducing the Headlamp plugin for Knative
Kubernetes Blog · Kubernetes · src 8 · Thu, 25 Jun 2026 10:00:00 -0800 · HIGH 66
<p><a href="https://headlamp.dev/">Headlamp</a> is an open-source, extensible Kubernetes SIG UI project designed to let you explore, manage, and debug cluster resources.</p>
<p><a href="https://knative.dev/">Knative</a> brings serverless workloads to Kubernetes, handling traffic routing, autoscaling, and revision management so teams can deploy and iterate without fighting infrastructure. But operating Knative workloa
Inspect Volcano workloads faster with Headlamp
Kubernetes Blog · Kubernetes · src 8 · Thu, 25 Jun 2026 12:00:00 -0800 · HIGH 66
<p><a href="https://volcano.sh/">Volcano</a> is a cloud native batch scheduler for Kubernetes, built for high-performance computing, AI/ML, and other batch workloads.</p>
<p><a href="https://headlamp.dev/">Headlamp</a> is an extensible Kubernetes web UI. With its plugin system, Headlamp can surface APIs and workflows beyond the built-in Kubernetes resources. The Volcano plugin brings core Volcano resources into Headl
Introducing the Cluster API plugin for Headlamp
Kubernetes Blog · Kubernetes · src 8 · Thu, 25 Jun 2026 14:00:00 -0800 · HIGH 66
<p><a href="https://headlamp.dev/">Headlamp</a> is an open-source, extensible Kubernetes SIG UI
project designed to let you explore, manage, and debug cluster resources directly
from a browser.</p>
<p><a href="https://cluster-api.sigs.k8s.io">Cluster API (CAPI)</a> is a Kubernetes sub-project
that brings declarative, Kubernetes-style APIs to cluster lifecycle management. It
lets platform teams provision, upgrade, and
Open source maintainership in the age of AI
Kubernetes Blog · Kubernetes · src 8 · Fri, 26 Jun 2026 10:00:00 -0800 · HIGH 66
<p>AI has really changed the game around software development.
More people are leveraging AI than ever to contribute patches to projects they use.
To me, this is a good thing as more folks will contribute patches rather than fork or not fix them.
The main problem is that AI has made generating code fast but there has been very little improvement in maintaining code bases.
In this post, we will highlight the ways the
Announcing etcd v3.7.0
Kubernetes Blog · Kubernetes · src 8 · Wed, 08 Jul 2026 20:00:00 +0800 · HIGH 66
<p><em>This article is a mirror of the <a href="https://etcd.io/blog/2026/announcing-etcd-3.7/">original announcement</a></em></p>
<p>Today, SIG etcd is releasing <a href="https://github.com/etcd-io/etcd/releases/tag/v3.7.0">etcd v3.7.0</a>, the latest minor release of the popular distributed key-value store and core Kubernetes component. v3.7 ships the long-requested RangeStream feature, delivers several other perfo
Kubernetes Dashboard to Headlamp: A Step-by-Step Guide
Kubernetes Blog · Kubernetes · src 8 · Mon, 13 Jul 2026 10:00:00 -0800 · HIGH 66
<h2 id="1-before-you-start-know-what-is-changing">1. Before you start: know what is changing<a class="td-heading-self-link" href="https://kubernetes.io/feed.xml#1-before-you-start-know-what-is-changing"></a></h2><p>Kubernetes Dashboard and Headlamp both show what is running in a cluster, but they work differently. When Headlamp runs on the desktop, it uses your existing kubeconfig to connect to one or more clusters a
Operating AI/ML Workloads on Kubernetes: A Headlamp Plugin for Kubeflow
Kubernetes Blog · Kubernetes · src 8 · Mon, 13 Jul 2026 12:00:00 -0800 · HIGH 66
<p>Kubernetes has quietly become the default platform for AI and machine learning. Whether you run notebook servers for data scientists, schedule distributed training jobs, tune hyperparameters, or orchestrate multi-step ML pipelines, those workloads increasingly land on a Kubernetes cluster. <a href="https://www.kubeflow.org/">Kubeflow</a> is one of the most popular ways to assemble that stack, and it does so the Ku
Building a Custom Metrics Exporter for Kubernetes
Kubernetes Blog · Kubernetes · src 8 · Tue, 14 Jul 2026 10:00:00 -0800 · HIGH 66
<p>Kubernetes ships with built-in awareness of CPU and memory, but most
real-world scaling decisions depend on signals that live entirely outside
that narrow window: how many messages are waiting in a queue, how long
the last batch job took, how many active WebSocket connections a pod is
holding. When the built-in metrics are not enough, a <em>metrics exporter</em>
bridges that gap.</p>
<p>This post walks through wri
Kubernetes v1.37 Sneak Peek
Kubernetes Blog · Kubernetes · src 8 · Fri, 31 Jul 2026 08:00:00 -0800 · HIGH 66
<p>As we get closer to the release date for Kubernetes v1.37, the project develops and matures,
features may be deprecated, removed, or replaced with better ones for the project's overall
health. This blog outlines some of the planned changes for the Kubernetes v1.37 release that the
release team feels you should be aware of for the continued maintenance of your Kubernetes
environment and keeping up to date with the
Gateway API v1.6: TCPRoute and UDPRoute Graduate to Standard
Kubernetes Blog · Kubernetes · src 8 · Mon, 03 Aug 2026 08:00:00 -0800 · HIGH 66
<p><img alt="Gateway API logo" src="https://kubernetes.io/blog/2026/08/03/gateway-api-v1-6-release/gateway-api-logo.svg" /></p>
<p>The Kubernetes SIG Network community is thrilled to share the release of <strong>Gateway API v1.6.0</strong>, which was released on June 30th of this year!</p>
<p>Gateway API has become the standard for modern, role-oriented,
and expressive service networking in Kubernetes.
In previous re
How to Pretty-Print Your Kubernetes YAML as KYAML and Why You'd Want To
Kubernetes Blog · Kubernetes · src 8 · Tue, 11 Aug 2026 10:00:00 -0800 · HIGH 66
<p>YAML has been the standard way to write Kubernetes manifests for years. Every example, tutorial, and configuration file you come across is written in it. The problem isn't that YAML is a bad format. It's that YAML gives you a lot of choices, and not all of them are equally good for writing Kubernetes manifests. Some features make files harder to read, some are easy to misuse and others can lead to surprising behav
AMD GAIA 0.23 Delivers Ability To Install/Run AI Agents From The Terminal
Phoronix · Linux/System · src 7 · Thu, 13 Aug 2026 20:33:01 -0400 · HIGH 65
AMD's GAIA open-source AI software built atop Lemonade for serving as an AI companion for emails, a Bash coding agent, and other AI agent skills is out with a new version today with more features while also improving security and making other improvements...
Lemonade 11.6 Integrates Muse-Glimmer 30B, Experimental TheNoise ROCm Image Generation
Phoronix · Linux/System · src 7 · Fri, 14 Aug 2026 16:00:22 -0400 · HIGH 65
For those dabbling with generative AI on the weekends, the AMD-led Lemonade SDK 11.6 is out today with its newest feature release of this open-source software for running local AI apps with optimized LLMs across CPUs, GPUs, and NPUs...
LG to Ban Residential Proxies from Smart TV Apps
Krebs on Security · Cybersecurity · src 10 · Wed, 22 Jul 2026 01:10:38 +0000 · HIGH 65
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG's webOS store allow unknown third-parties to route their Internet traffic through a user's TV.
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
The Hacker News · Cybersecurity · src 8 · Tue, 11 Aug 2026 15:54:00 +0530 · HIGH 63
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction.
The trick can work even after a blunt version of the same theft is refused: split the request into fragments that each look routine, place them in channels the assistant already uses, and let
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
The Hacker News · Cybersecurity · src 8 · Wed, 12 Aug 2026 19:39:50 +0530 · HIGH 63
A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to intercept browser traffic and route them through a proxy infrastructure.
The extensions, published across at least 40 Chrome Web Store developer accounts, racked up 75,486 installs. Of those identified, 274 have been found to impersonate 66
Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware
The Hacker News · Cybersecurity · src 8 · Fri, 14 Aug 2026 16:14:34 +0530 · HIGH 63
Apple on Thursday sent a fresh batch of notifications to customers whom it suspects may have been targeted by mercenary spyware attacks.
In a statement shared with TechCrunch, the iPhone maker said it alerted an unspecified number of users targeted in 110 countries and that it has notified customers in over 150 countries to date. Apple began sending threat notifications to users in late 2021.
IAM Compliance Requirements and Best Practices
The Hacker News · Cybersecurity · src 8 · Fri, 14 Aug 2026 22:49:49 +0530 · HIGH 63
IAM compliance is the practice of demonstrating that identity and access controls are not only documented but actually enforced across users, applications, infrastructure, and non-human identities. This guide explains what IAM compliance requires, which regulations matter, and how organizations move from periodic access reviews toward continuous, evidence-backed verification that auditors can
The Open Source Community is backing OpenEnv for Agentic RL
Hugging Face Blog · AI · src 7 · Mon, 08 Jun 2026 00:00:00 GMT · HIGH 62
Agentic Resource Discovery: Let agents search
Hugging Face Blog · AI · src 7 · Wed, 17 Jun 2026 00:00:00 GMT · HIGH 62
Mapping Europe’s AI Workforce Opportunity
OpenAI News · AI · src 8 · Mon, 29 Jun 2026 07:00:00 GMT · HIGH 60
A new OpenAI report maps how AI could reshape jobs across the EU, highlighting which occupations may face automation, growth, or workflow changes.
Working with the American Psychological Association on youth mental health and AI
OpenAI News · AI · src 8 · Thu, 06 Aug 2026 06:00:00 GMT · HIGH 60
OpenAI and the American Psychological Association advance evidence-based guidance, resources, and safeguards for responsible AI use and youth mental health.
Autonomous AI attacks pose 'clear and present danger' to critical infrastructure
The Register · Tech · src 6 · Fri, 14 Aug 2026 15:03:00 +0200 · HIGH 51
Weaponized agents could turn digital intrusions into kinetic disasters, experts warn
Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees
Kubernetes Blog · Kubernetes · src 8 · Thu, 29 Jan 2026 00:00:00 +0000 · HIGH 51
<p><strong>In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments.</strong> The retirement of Ingress NGINX was <a href="https://kubernetes.io/blog/2025/11/11/ingress-nginx-retirement/">announced</a> for March 2026, after years of <a href="https://groups.google.com/a/kubernetes.io/g/dev/c/rxtrKvT_Q8E/m/6_ej0c1ZBAAJ">public warnings</a> that
New Conversion from cgroup v1 CPU Shares to v2 CPU Weight
Kubernetes Blog · Kubernetes · src 8 · Fri, 30 Jan 2026 08:00:00 -0800 · HIGH 51
<p>I'm excited to announce the implementation of an improved conversion formula
from cgroup v1 CPU shares to cgroup v2 CPU weight. This enhancement addresses
critical issues with CPU priority allocation for Kubernetes workloads when
running on systems with cgroup v2.</p>
<h2 id="background">Background<a class="td-heading-self-link" href="https://kubernetes.io/feed.xml#background"></a></h2><p>Kubernetes was originally
Security updates for Wednesday
LWN Headlines · Linux/System · src 9 · Wed, 12 Aug 2026 13:03:48 +0000 · MEDIUM 49
Security updates have been issued by <b>AlmaLinux</b> (fence-agents, firefox, frr10, gstreamer1-plugins-good, iscsi-initiator-utils, isns-utils, kernel, kernel-rt, perl-DBI:1.641, postgresql, postgresql:12, and resource-agents), <b>Debian</b> (libgd2, openjdk-25, php7.4, php8.2, and postfix), <b>Fedora</b> (clamav, domoticz, and libidn), <b>Red Hat</b> (delve, edk2, firefox, go-fdo-client, go-fdo-server, grafana, hos
Hackers arrested over €30M bank fraud exploiting service provider flaw
BleepingComputer · Cybersecurity · src 9 · Fri, 14 Aug 2026 14:04:26 -0400 · MEDIUM 49
Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts. [...]
Fragments: May 5
Martin Fowler · Software Engineering · src 8 · 2026-05-05T12:23:00-04:00 · MEDIUM 48
<p>Over the last couple of months Rahul Garg published a series of posts here on how to <a href="https://martinfowler.com/articles/reduce-friction-ai/">reduce the friction in AI-assisted programming</a>. To make it easier to put these ideas into practice he’s now built an <a href="https://martinfowler.com/articles/reduce-friction-ai/#ThesePatternsAsInstallableInfrastructure">open-source framework to operationalize th
Why I’m Writing Rachel’s Ramblings
Martin Fowler · Software Engineering · src 8 · 2026-07-28T08:32:00-04:00 · MEDIUM 48
<p class="precis"><b>TL;DR</b><br /><i>I have ideas. I haven’t been writing them. That’s about to change. I promise… myself.</i></p>
<img src="https://martinfowler.com/rachels-ramblings/card.png" />
<p>I’ve been thinking a lot about talent. Actually, I’ve been thinking a lot about thinking. And writing. Or more specifically, not writing. This really hit me earlier this year at the Future of Software conference. I was
The Conductor Developer
Martin Fowler · Software Engineering · src 8 · 2026-07-31T09:48:00-04:00 · MEDIUM 48
<p class="precis"><b>TL;DR</b><br /><i>Why I think software development is starting to feel a little more like conducting an orchestra.</i></p>
<img src="https://martinfowler.com/rachels-ramblings/card.png" />
<p>There’s a shift happening in software development that I don’t think we’re talking about clearly enough.</p>
<p>For the last couple of years we’ve framed AI as a productivity tool. How much faster can it wr
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The Hacker News · Cybersecurity · src 8 · Mon, 10 Aug 2026 17:03:41 +0530 · MEDIUM 48
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors.
Russian cybersecurity vendor Kaspersky said it detected the attacks in July 2026.
The activity involves exploiting a vulnerability chain
New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
The Hacker News · Cybersecurity · src 8 · Thu, 13 Aug 2026 20:30:29 +0530 · MEDIUM 48
Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaign that delivers a previously undocumented backdoor called PATCHCORD.
According to Acronis Threat Research Unit (TRU), the backdoor is a compiled C/C++ implant delivered by means of sector-specific lures, including fake VPN installers impersonating Afghan Telecom (
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
The Hacker News · Cybersecurity · src 8 · Fri, 14 Aug 2026 16:37:45 +0530 · MEDIUM 48
Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions.
The technique assumes that an operator already has code execution on the Windows host and does not involve
Univé builds an AI-ready workforce
OpenAI News · AI · src 8 · Fri, 31 Jul 2026 07:00:00 GMT · MEDIUM 48
See how Univé built an AI-ready workforce with ChatGPT Enterprise by combining leadership, responsible governance, and employee-led innovation to transform work at scale.
Open-Source exFAT Programs 1.4.3 Improves Fsck & Mkfs
Phoronix · Linux/System · src 7 · Fri, 14 Aug 2026 05:44:14 -0400 · MEDIUM 47
Ahead of the Linux 7.2 kernel release expected on Sunday, a new release of the exFAT file-system user-space programs was released overnight...
Patches Posted For Fixing The Linux DRM Scheduler's Fair Policy
Phoronix · Linux/System · src 7 · Fri, 14 Aug 2026 06:04:16 -0400 · MEDIUM 47
Ahead of the Linux 7.2 kernel release expected out on Sunday, the Direct Rendering Manager (DRM) subsystem was forced to revert their "fair" scheduler policy default new for this kernel. Due to a last minute user-reported regression, FIFO returns as the default DRM scheduler policy for Linux 7.2. But patches are now available for addressing that regression and thus hopefully for Linux 7.3 there will be the fair sched
D7VK 2.1 Brings Faster Load Times, More Performance Tweaks
Phoronix · Linux/System · src 7 · Fri, 14 Aug 2026 16:26:46 -0400 · MEDIUM 47
D7VK as the open-source implementation of the Direct3D 7 / 6 / 5/ 3 APIs atop the Vulkan API for Linux/Wine usage is out with another feature update. D7VK continues to mature quite well for further enhancing these older Direct3D API versions that cover the span prior to DXVK's focus of Direct3D 8 to Direct3D 11 or VKD3D-Proton's Direct3D 12...
AMD Posts Massive 109 Patch Series For GFX 12.1 RAS Support On Friday Evening
Phoronix · Linux/System · src 7 · Fri, 14 Aug 2026 21:01:22 -0400 · MEDIUM 47
AMD has a tendency to send out large feature patch series for their open-source Linux drivers on Friday afternoons/evenings. Today we were greeted by a set of 109 patches working on RAS support for the upcoming AMD GFX12.1 target...
New Linux Driver Enables 12VHPWR Monitoring For ASUS ROG Astral Graphics Cards
Phoronix · Linux/System · src 7 · Sun, 16 Aug 2026 06:19:06 -0400 · MEDIUM 47
For those concerned about current imbalance or voltage changes with the 12VHPWR power connectors and having an ASUS ROG Astral graphics card, there is now an open-source driver for Linux available that integrates with the hardware monitoring (HWMON) subsystem for 12VHPWR reporting on these ASUS graphics cards...
GNU Linux-libre 7.2-gnu Released Following More Driver Cleaning
Phoronix · Linux/System · src 7 · Mon, 17 Aug 2026 05:27:57 -0400 · MEDIUM 47
Following yesterday's release of the Linux 7.2 kernel, GNU Linux-libre 7.2-gnu is now available for this kernel downstream that strips out support for drivers depending upon non-free-software microcode/firmware, the ability to load closed-source kernel modules, and other restrictions in the name of software freedom...
CNCF Announces Graduation of Cloud Native Buildpacks, Advancing the Standard for Container Builds
CNCF Blog · Cloud Native · src 7 · Tue, 11 Aug 2026 16:00:00 +0000 · MEDIUM 47
Project reaches broad production adoption for transforming application source code into OCI-compliant container images across cloud environments Key Highlights: SAN FRANCISCO — Aug. 11, 2026 — The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems...
Mystery attacker spent a year raiding Salesforce and ServiceNow portals
The Register · Tech · src 6 · Thu, 13 Aug 2026 15:32:00 +0200 · MEDIUM 46
Custom tools harvested whatever over-permissioned guest accounts would surrender
The what, why, and how of pull requests and source comments
The Register · Tech · src 6 · Sun, 16 Aug 2026 09:58:00 +0200 · MEDIUM 46
Microsoft veteran on knowing the difference and convincing approvers to accept a change
SELinux Volume Label Changes goes GA (and likely implications in v1.37)
Kubernetes Blog · Kubernetes · src 8 · Wed, 22 Apr 2026 10:35:00 -0800 · MEDIUM 46
<p>If you run Kubernetes on Linux with SELinux in enforcing mode, plan ahead: a future release (anticipated to be v1.37) is
expected to turn the <code>SELinuxMount</code> <a href="https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/">feature gate</a> on by default. This makes volume setup faster
for most workloads, but <strong>it can break applications</strong> that still depend on the old
Responding to the next frontier of critical cyber capabilities
OpenAI News · AI · src 8 · Fri, 07 Aug 2026 15:20:00 GMT · MEDIUM 45
OpenAI is sharing preliminary cybersecurity evaluations for Astra and the steps we’re taking to strengthen safeguards and security controls.
Expanding Daybreak as the Cyber Defense Window Narrows
OpenAI News · AI · src 8 · Mon, 10 Aug 2026 10:00:00 GMT · MEDIUM 45
Meet GPT-5.6-Cyber, OpenAI’s cybersecurity-specific model available through Daybreak Red for authorized vulnerability research, exploit validation, and security testing.
Fragments: May 27
Martin Fowler · Software Engineering · src 8 · 2026-05-27T15:40:00-04:00 · MEDIUM 44
<p>At the GOTO Conference in Copenhagen in 2025, <a href="https://www.youtube.com/watch?v=ii_rLjQfjp0&list=PLEx5khR4g7PINwOsYrkwz3lTTJUYoXC53">Kent Beck and I spent some time on stage</a> talking and answering questions from the audience - a format I refer to as “two old geezers on a park bench”. We talk about our experiences with LLM-augmented programming (at that point - October 2025), we show our frustration t