AI Agents Are Rewriting the Rules of Lateral Movement

The Hacker News - Sep 22, 2026

Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we determine which paths an autonomous system can discover, given the access it already has? A person may try several ways to complete a task. A deterministic application follows the flow its developer wrote. But an AI agent is relentless in its pursuit of done. In May

Read full article

More News

Sep 22, 2026

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled. The bug, tracked as CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.

Sep 22, 2026

Googlebook laptops launched with Gemini AI, OLED display and Android app support: Check price and features

Google has unveiled Googlebook, a new laptop category designed around Gemini Intelligence and Android connectivity, with prices starting at $899. The laptops offer features such as Magic Pointer, Rambler, Cast My Apps, native Android apps and up to 14 hours of battery life.

Sep 22, 2026

Starship flight 14: Why SpaceX's first-ever orbital test matters to NASA's Artemis

Starship flight 14: Why SpaceX’s first-ever orbital test matters to NASA’s Artemis SpaceX is preparing for a defining moment with the first-ever orbital launch using Starship flight 14. The critical mission is also significant for NASA Artemis mission that could determine whether...

Sep 22, 2026

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition. Patches have been

Sep 22, 2026

Beyer calls on FAA to suspend AI system for DC-area airports: 'Guinea pigs'

A top Democrat is calling on the Trump administration to halt the implementation of a new artificial intelligence system designed to streamline air travel. Rep. Don Beyer (D-Va.) warned that the Federal Aviation Administration’s (FAA) new AI tool, which aims to eliminate flight delays and cancellations, is being launched without assurances of public safety. “The...

Sep 22, 2026

This major California river has gotten too warm for its salmon

The Sacramento River has gotten too warm for salmon eggs. Environmental advocates blame the Trump administration for taking too much water out of Shasta Lake.

Sep 22, 2026

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls. "Indexed-btree is a malicious npm package mimicking the legit sorted-btree package, an ordinary B-tree/indexing utility," Checkmarx said. "

Sep 22, 2026

Nothing to spin off CMF as standalone Indian business; Optiemus to acquire 51.1% controlling stake; details here

Nothing is expanding its partnership with Optiemus to turn CMF into an independent, majority Indian-owned smartphone brand. Optiemus will join CMF’s upcoming Series A funding round, while manufacturing, ownership and R&D will come under a single India-based entity.

Sep 22, 2026

AI Agents Are Rewriting the Rules of Lateral Movement

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

Googlebook laptops launched with Gemini AI, OLED display and Android app support: Check price and features

Starship flight 14: Why SpaceX's first-ever orbital test matters to NASA's Artemis

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Beyer calls on FAA to suspend AI system for DC-area airports: 'Guinea pigs'

This major California river has gotten too warm for its salmon

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Nothing to spin off CMF as standalone Indian business; Optiemus to acquire 51.1% controlling stake; details here

What to Know About Recent A.I. Hacks

How to Split Expenses on a Group Trip Without Fighting

As Computers Take the Driver’s Seat, Experts Worry About Safety

BTN EXCLUSIVE: Inside Etihad’s vision for the future at Arabian Travel Market