Lifeboat Foundation: Safeguarding Humanity
Toggle light / dark theme

Blog – Page 3

Get the latest international news and world events from around the world.

Log in for authorized contributors

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30.

The flaw, CVE-2026–76504, could allow a remote attacker with no login access to use the Manager’s API as the admin user. Fixed releases are available, and there is no workaround. It carries a CVSS score of 9.8 out of 10. It sits in the part of the Manager’s API that handles login sessions.

The Manager mishandles URI encoding in an HTTP request. A crafted request can therefore bypass an authentication rule intended to restrict access to a single API endpoint.

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed “RedFlick” to deploy its signature CosmicPulse backdoor.

Although the tactic is not a new cybersecurity technique, it is a new delivery approach for the threat actor, allowing it to further automate attacks and reduce victim interaction.

Microsoft researchers say that Star Blizzard expanded its phishing operations and streamlined malware delivery in 2026.

Over 543,000 valid credentials exposed in public GitHub repositories

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform’s security measures to prevent accidental leaks of sensitive data.

Data pulled from scanning 224 million repositories and more than 58 billion files show that the median time a unique credential remained publicly accessible was 784 days.

The research was conducted by Truffle Security, which found that about 10% of the working credentials were older than 6.3 years and the oldest one dated from 2009.

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition.

Tracked as CVE-2026–84411, the security issue is a pre-authentication integer underflow in RouterOS’s web-management HTTP request handling.

CISA says that a single crafted request can produce code execution with root privileges or denial of service.

Microsoft to block Entra ID script injection attacks starting October

Microsoft has reminded customers that the Entra ID identity and access management (IAM) solution will get better protection against external script injection attacks starting next month.

The company first revealed plans to secure Entra ID sign-ins from script injection attacks in a November 2025 announcement.

According to a Monday message center update seen by BleepingComputer, Microsoft will begin enforcing additional Content Security Policy (CSP) defenses that will only allow scripts from trusted Microsoft content delivery network (CDN) domains during Entra ID sign-ins.

RaaS Contract Clauses Decide If Leasing Beats Buying A Robot

Robotics-as-a-Service removes the big upfront purchase. The vendor keeps ownership and bundles maintenance into a monthly subscription.

That structure only beats buying if four specific clauses are negotiated properly: 1. Minimum term length — long lock-in kills the flexibility RaaS is supposed to deliver. 2. Uptime with named remedies — a 99.5% SLA still permits ~44 hours of downtime a year, and most measure the robot hardware, not your actual throughput. 3. Data ownership — performance history is the asset that gives you leverage at renewal. Don’t leave it with the vendor by default. 4. End-of-term options — buyout path, disclosed renewal rates, or a clean transition to another provider.

Get these wrong and a low monthly rate with a long lock-in can quietly cost more than purchasing the robot outright.

Before signing, answer one question: if the robots miss a shipment during a defined failure, what credit do you receive, and who owns the data proving it happened?

Full analysis:

#IndustrialRobotics #RaaS #RobotProcurement #Automation

Continue reading “RaaS Contract Clauses Decide If Leasing Beats Buying A Robot” | >

No Time But Now

What if the future of cancer treatment isn’t about killing the last cancer cell… but finding the first one?

For more than 40 years, renowned oncologist Dr. Azra Raza has pursued this radical idea.

This Wednesday on No Time But Now, Dr. Raza, a Columbia University Irving Medical Center physician and professor, joins William Shatner and Melanie Shatner Gretsch for a powerful conversation about the future of cancer detection, the technology that could transform medicine, and the deeply human realities of grief, hope, mortality, and making every moment count.

Presented by LifeWave Corporate.

Don’t miss this conversation.

🎙️ NO TIME BUT NOW New episode drops Wednesday.

http://www.notimebutnow.com http://www.lifewavehealth.com.

Continue reading “No Time But Now” | >

S1P mimics phosphorylation to mediate PDK1-independent activation of aPKC with an opposing downstream effect

A biochemical analysis in #ScienceSignaling examines how a family of enzymes called atypical protein kinase Cs can have opposing effects on the growth of tumor cells—answering a persistent question in the study of #cancer biology.

This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot.

Gemini 4 Argon: our next era of frontier intelligence

Big G still got moves.

Huge drop from Koray Kavukcuoglu and the DeepMind team.

Koray, Demis, and Sundar are not playing around this year.

The new kids on the block thought they had the lead, but Gemini 4 Argon just dropped—and it’s taking over the leaderboards:

1 on the Vals Index (economic impact across coding, legal, finance, & tax)

77.9% on DeepSWE v1.1 (SOTA in long-horizon software engineering)

1 MILLION Token Output Limit (massive headroom for multi-step reasoning without cutting off)

Continue reading “Gemini 4 Argon: our next era of frontier intelligence” | >
/* */