cybersecurity

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed

agentic AI, AI, cybersecurity, News, OpenAI /

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed 2026-11-06 at 12:19 By Anamarija Pogorelec OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model is designed for authorized security testing of websites and applications. Vulnerability […]

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed Read More »

November 2026 Patch Tuesday forecast: Old software continues to bite

cybersecurity, Don't miss, Expert analysis, Hot stuff, Microsoft, News, opinion, Patch Tuesday, predictions /

November 2026 Patch Tuesday forecast: Old software continues to bite 2026-11-06 at 09:00 By Help Net Security How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly […]

November 2026 Patch Tuesday forecast: Old software continues to bite Read More »

Google puts new limits on AI agents that hunt threats and fix vulnerabilities

agentic AI, credentials, cybersecurity, Google, Google Cloud, identity management, Mandiant, News, security controls, Wiz /

Google puts new limits on AI agents that hunt threats and fix vulnerabilities 2026-11-05 at 13:02 By Anamarija Pogorelec Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target code scans more precisely. The updates let businesses verify vulnerabilities and […]

Google puts new limits on AI agents that hunt threats and fix vulnerabilities Read More »

A banking malware sample led researchers to an Android bug that can loop-crash phones

Android, Bitdefender, cybersecurity, Don't miss, Hot stuff, News, research, software, Zimperium /

A banking malware sample led researchers to an Android bug that can loop-crash phones 2026-11-05 at 11:00 By Mirko Zorz Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can take a factory reset to clear. […]

A banking malware sample led researchers to an Android bug that can loop-crash phones Read More »

AI agent detection signals that still work when agents look human

agentic AI, automation, bot, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, threat detection, tips, traffic monitoring /

AI agent detection signals that still work when agents look human 2026-11-05 at 08:45 By Mirko Zorz Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of Resemble AI explains how agents arrive as […]

AI agent detection signals that still work when agents look human Read More »

Healthcare can’t govern the AI tools it hasn’t found yet

cybersecurity, healthcare, News, Paubox, report, survey /

Healthcare can’t govern the AI tools it hasn’t found yet 2026-11-05 at 08:11 By Anamarija Pogorelec Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten have still found an AI-built tool handling that data without […]

Healthcare can’t govern the AI tools it hasn’t found yet Read More »

Companies are spending more on AI governance and getting less control

AI, cybersecurity, DNSFilter, generative AI, investment, News, report /

Companies are spending more on AI governance and getting less control 2026-11-05 at 07:30 By Anamarija Pogorelec Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud security, according to DNSFilter’s The Cost of Shadow AI report. Some 74.5% of respondents reported a larger cybersecurity […]

Companies are spending more on AI governance and getting less control Read More »

Most consumers aren’t ready to let AI agents shop unsupervised

agentic AI, cybersecurity, identity management, identity verification, News, Okta, report, Risk Management /

Most consumers aren’t ready to let AI agents shop unsupervised 2026-11-05 at 07:00 By Anamarija Pogorelec Customer control, account security and ease of use are influencing the adoption of AI agents that make purchases, book services and access personal information, according to Okta’s 2026 Customer Identity Trends Report. Consumers’ willingness to delegate depends on what […]

Most consumers aren’t ready to let AI agents shop unsupervised Read More »

What AI-generated malware looks like under the microscope

AI, code analysis, cybersecurity, Don't miss, Features, Hot stuff, HUMAN Security, News, opinion, strategy, tips /

What AI-generated malware looks like under the microscope 2026-11-04 at 09:00 By Mirko Zorz In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from […]

What AI-generated malware looks like under the microscope Read More »

Secure your containers without breaking what works

automation, containers, cybersecurity, DevSecOps, Don't miss, Expert analysis, Hot stuff, News, opinion, vulnerability management /

Secure your containers without breaking what works 2026-11-04 at 08:35 By Help Net Security Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include operating-system packages, development tools, debugging utilities and libraries that an application never uses. Each unnecessary component […]

Secure your containers without breaking what works Read More »

Ghostunnel: Open-source TLS proxy with mutual authentication

cybersecurity, DevSecOps, Don't miss, GitHub, News, open source, software, SSL/TLS /

Ghostunnel: Open-source TLS proxy with mutual authentication 2026-11-04 at 08:30 By Anamarija Pogorelec Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a backend, accepts TLS connections, checks the client’s certificate, then passes traffic to the […]

Ghostunnel: Open-source TLS proxy with mutual authentication Read More »

Companies going all in on AI could see their strategy backfire

AI, cybersecurity, Gartner, investment, News, report, Risk Management, strategy /

Companies going all in on AI could see their strategy backfire 2026-11-04 at 07:30 By Anamarija Pogorelec Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive displacement debuted at No. 3 and No. 4, respectively. The AI workforce preparedness gap held fifth place. […]

Companies going all in on AI could see their strategy backfire Read More »

NIST publishes cybersecurity guide for businesses too small to have IT staff

asset discovery, cybersecurity, framework, guidelines, News, NIST /

NIST publishes cybersecurity guide for businesses too small to have IT staff 2026-11-04 at 07:00 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other than their owners. These businesses include freelancers, sole proprietors, and independent contractors. About 82% of the 34.8 million […]

NIST publishes cybersecurity guide for businesses too small to have IT staff Read More »

Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware

APT, cybersecurity, Malware, News, Russian Federation, Threat Intelligence, Ukraine /

Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware 2026-11-03 at 12:00 By Anamarija Pogorelec ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing attachments and a stealer that erases itself once the data is gone. Spearphishing […]

Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware Read More »

What human hackers still do better than AI, according to HackerOne’s CEO

bug bounty, CXO, cybersecurity, Don't miss, Features, HackerOne, Hot stuff, News, opinion, strategy, tips /

What human hackers still do better than AI, according to HackerOne’s CEO 2026-11-03 at 08:30 By Mirko Zorz AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, […]

What human hackers still do better than AI, according to HackerOne’s CEO Read More »

Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up

cybersecurity, Don't miss, Hot stuff, News, patching, Product showcase, Sweet Security /

Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up 2026-11-03 at 08:00 By Help Net Security HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late […]

Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up Read More »

AI coding agents are installing MCP servers that will never be patched

Anthropic, Claude Code, Cursor, cybersecurity, News, OpenAI, research, software development /

AI coding agents are installing MCP servers that will never be patched 2026-11-03 at 07:45 By Mirko Zorz When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository […]

AI coding agents are installing MCP servers that will never be patched Read More »

Fireperf: Open-source network testing tool for firewalls and routers

cybersecurity, News, open source, software /

Fireperf: Open-source network testing tool for firewalls and routers 2026-11-03 at 07:30 By Mirko Zorz The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed at administrators, developers and testers who […]

Fireperf: Open-source network testing tool for firewalls and routers Read More »

The first ten lines of a command policy for AI coding agents

CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, tips /

The first ten lines of a command policy for AI coding agents 2026-11-02 at 08:30 By Mirko Zorz In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity […]

The first ten lines of a command policy for AI coding agents Read More »

What exactly is ISOC? And what does it mean for you?

AI, cybersecurity, Don't miss, Hot stuff, News, opinion, SIEM, SOC, Stellar Cyber /

What exactly is ISOC? And what does it mean for you? 2026-10-30 at 08:36 By Help Net Security Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected […]

What exactly is ISOC? And what does it mean for you? Read More »

Scroll to Top