cybersecurity

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

cybersecurity, Don't miss, Hot stuff, Malware, News /

Fake Arch Linux AUR packages exploit typos to run malware with root privileges 2026-10-16 at 12:58 By Sinisa Markovic Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source […]

Fake Arch Linux AUR packages exploit typos to run malware with root privileges Read More »

DDoS attacks can knock services offline before links reach capacity

attack, bot, cybersecurity, DDoS, Netscout, News, report, traffic monitoring /

DDoS attacks can knock services offline before links reach capacity 2026-10-16 at 07:30 By Anamarija Pogorelec More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses Attacks exceeding […]

DDoS attacks can knock services offline before links reach capacity Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

The internet’s attack surface moves at very different speeds

Censys, cybersecurity, News, report, Threat Intelligence /

The internet’s attack surface moves at very different speeds 2026-10-15 at 08:00 By Anamarija Pogorelec Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026. Elsewhere in its scans, the internet-scanning company measured much slower movement. Exposed industrial […]

The internet’s attack surface moves at very different speeds Read More »

AI-generated changes create review bottlenecks in software delivery

agentic AI, AI, code, cybersecurity, DevOps, JetBrains, News, report, software development /

AI-generated changes create review bottlenecks in software delivery 2026-10-15 at 07:30 By Anamarija Pogorelec 83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD in 2026 report. Adoption exceeds that of containerisation and orchestration, infrastructure as code, GitOps […]

AI-generated changes create review bottlenecks in software delivery Read More »

Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content

cybersecurity, iOS, iPhone, mobile security, News, Privacy, Product showcase, QR codes /

Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content 2026-10-15 at 07:00 By Anamarija Pogorelec GuardOS is an iPhone application that combines device security checks, VPN access, Safari content filtering, QR link scanning, and storage cleanup. It is available through the App Store. Getting started The home dashboard organizes tools […]

Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content Read More »

GitHub adopts cheaper AI model to catch secrets developers leave in code

agentic AI, code, credentials, cybersecurity, DevSecOps, GitHub, News, scanning /

GitHub adopts cheaper AI model to catch secrets developers leave in code 2026-10-14 at 12:26 By Anamarija Pogorelec GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its […]

GitHub adopts cheaper AI model to catch secrets developers leave in code Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations

cyber news, cybersecurity /

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations 2026-10-13 at 17:10 By Ashish Khaitan A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations. The gathering, branded “Don’t Get Played,” was held as a side event during TOKEN2049 week in Singapore and co-hosted […]

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations Read More »

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser

AI, browser, cybersecurity, Firefox, Mozilla, News, Privacy, regulation, security controls /

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser 2026-10-13 at 14:21 By Anamarija Pogorelec Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an […]

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser Read More »

Meta outlines Muse Wonder safeguards for AI agents acting on your behalf

agentic AI, AI, cybersecurity, Meta, News /

Meta outlines Muse Wonder safeguards for AI agents acting on your behalf 2026-10-13 at 12:35 By Anamarija Pogorelec Meta’s Muse Wonder and Muse Wonder Full models are built for AI agents that handle tasks such as preparing insurance claims, reviewing leases and developing software. The models combine document analysis and tool use with the ability […]

Meta outlines Muse Wonder safeguards for AI agents acting on your behalf Read More »

Be a good AI ancestor: Cybersecurity already gave us the playbook

AI, automation, cybersecurity, Don't miss, Expert analysis, opinion, strategy /

Be a good AI ancestor: Cybersecurity already gave us the playbook 2026-10-13 at 08:30 By Help Net Security AI has brought us to a familiar inflection point in the story of privacy, cybersecurity, and online safety. We have an opportunity to apply decades of cybersecurity experience before the next generation of technology creates consequences we […]

Be a good AI ancestor: Cybersecurity already gave us the playbook Read More »

Frontier AI cleared every OT attack goal Booz Allen set in its lab

AI, Booz Allen Hamilton, critical infrastructure, cybersecurity, ICS/SCADA, News, report, security testing /

Frontier AI cleared every OT attack goal Booz Allen set in its lab 2026-10-13 at 08:00 By Anamarija Pogorelec Booz Allen set frontier AI models against an isolated industrial-control testbed in its Chantilly, Virginia lab and watched them clear all eight attack objectives it had defined. The Booz Allen frontier AI OT test architecture (Source: […]

Frontier AI cleared every OT attack goal Booz Allen set in its lab Read More »

Most high-severity cloud security findings are downgraded once an AI agent checks the environment

agentic AI, AI, cloud security, cybersecurity, News, research /

Most high-severity cloud security findings are downgraded once an AI agent checks the environment 2026-10-13 at 07:30 By Sinisa Markovic Cloud security platforms turn every failed rule into a finding, and those findings pile up in queues sorted by severity. Research from Sola Security tested what happens to that order when each finding gets checked […]

Most high-severity cloud security findings are downgraded once an AI agent checks the environment Read More »

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

Claroty, cyberattack, cybersecurity, Don't miss, Europe, France, hardware, Hot stuff, News, PLC, Retail /

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted 2026-10-12 at 19:07 By Zeljka Zorz European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned […]

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted Read More »

Microsoft’s new model helps AI agents judge their next move

agentic AI, AI, cybersecurity, Microsoft, News /

Microsoft’s new model helps AI agents judge their next move 2026-10-12 at 14:02 By Anamarija Pogorelec Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making […]

Microsoft’s new model helps AI agents judge their next move Read More »

Windows PCs missing key updates could lose security fixes in 2027

certificates, cybersecurity, Microsoft, News, security update, Windows /

Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]

Windows PCs missing key updates could lose security fixes in 2027 Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

AI vulnerability patching has a grading problem

agentic AI, AI, cybersecurity, Don't miss, News, patching, research, vulnerability assessment /

AI vulnerability patching has a grading problem 2026-10-12 at 07:45 By Anamarija Pogorelec Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that […]

AI vulnerability patching has a grading problem Read More »

What makes some open source updates so difficult?

cybersecurity, Google, News, open source, report, software development /

What makes some open source updates so difficult? 2026-10-12 at 07:00 By Anamarija Pogorelec Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open […]

What makes some open source updates so difficult? Read More »

Scroll to Top