cybersecurity

Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G

cybersecurity, mobile security, News, research, vulnerability /

Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G 2026-08-11 at 15:10 By Sinisa Markovic Researchers have found that compromised or malicious SIM cards can issue commands to some smartphones and cellular-connected devices, allowing attackers to steal information, disrupt communications, downgrade connections to 2G, and in some cases execute code. Tomasz Piotr […]

Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G Read More »

Who will be the Stanislav Petrov in your organization?

AI, BH Consulting, boardroom, Brian Honan, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion /

Who will be the Stanislav Petrov in your organization? 2026-08-11 at 09:00 By Help Net Security The recent news coverage of “rogue AI” systems hacking innocent companies reminded me of one of the world’s most unsung heroes and genuinely someone who may well have saved the world. In 1983, the USSR’s early warning systems reported

Who will be the Stanislav Petrov in your organization? Read More »

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix

5G, AI, cybersecurity, Don't miss, Features, Hot stuff, networking, News, research /

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix 2026-08-11 at 08:30 By Mirko Zorz Researchers at Nanyang Technological University turned a set of AI agents loose on the software that runs 4G and 5G phone networks, and the agents came back with 84 security flaws

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix Read More »

Anthropic to put AI in charge of reviewing Claude Code actions by default

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Anthropic to put AI in charge of reviewing Claude Code actions by default 2026-08-10 at 12:13 By Anamarija Pogorelec Anthropic will make auto mode in Claude Code the default for new sessions on Pro, Max, and Team plans starting August 14. Users who previously selected a different default may receive a one-time prompt asking whether

Anthropic to put AI in charge of reviewing Claude Code actions by default Read More »

OpenAI locks down Astra over potential critical cyber capabilities

agentic AI, AI, cybersecurity, Don't miss, News, OpenAI /

OpenAI locks down Astra over potential critical cyber capabilities 2026-08-10 at 10:09 By Anamarija Pogorelec OpenAI’s internal evaluation of its upcoming model, Astra, found significant advances in agentic coding and cybersecurity, leading the company to conclude that it cannot rule out the model reaching the critical capability level for cybersecurity under its Preparedness Framework. The

OpenAI locks down Astra over potential critical cyber capabilities Read More »

Product showcase: Enpass Password Manager breaks away from the proprietary cloud model

credentials, cybersecurity, iOS, iPhone, News, password management, password manager, Privacy /

Product showcase: Enpass Password Manager breaks away from the proprietary cloud model 2026-08-10 at 08:00 By Anamarija Pogorelec Enpass is a password manager that stores passwords, passkeys, payment cards, identities, secure notes, software licenses, and other sensitive information in encrypted vaults. Vaults remain on the device or in a cloud storage service selected by the

Product showcase: Enpass Password Manager breaks away from the proprietary cloud model Read More »

Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors

APT, cyber news, cybersecurity, Dark Web Monitoring, Europe, Ransomware, Ransomware Attacks, Ransomware Insights, Ransomware Threats, Threat Actors, Threat Intelligence, Threat Landscape Reports /

Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors 2026-08-07 at 13:58 By Mihir Bagwe Europe faced a ransomware onslaught in the first half of 2026 that sets a troubling precedent for the remainder of the year. According to Cyble Research and Intelligence Labs (CRIL), the region

Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors Read More »

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers

Black Hat, Black Hat USA 2026, conferences, CVE, cybersecurity, Don't miss, Hot stuff, Java, News, Novee, research /

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers 2026-08-05 at 21:45 By Mirko Zorz An attacker sends a single web request to a Bonita server and lands inside an internal API that assumed nobody could reach it. The request arrives unauthenticated. From there the attacker runs code on the host. Bonita BPM handles

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers Read More »

INTERPOL flags AI as the new engine of African cybercrime

Africa, AI, cybercrime, cybersecurity, Interpol, law enforcement, News, report, threats /

INTERPOL flags AI as the new engine of African cybercrime 2026-08-05 at 15:24 By Anamarija Pogorelec Africa’s growing digital economy is exposing governments, businesses and internet users to a rising wave of cybercrime. The continent recorded more than 1.1 billion mobile subscriptions and over $1.1 trillion in digital transactions in 2025, while more than 570

INTERPOL flags AI as the new engine of African cybercrime Read More »

Code review used to be the only way to catch these bugs

cybersecurity, Don't miss, fuzzing, News, Palo Alto Networks, research, vulnerability assessment /

Code review used to be the only way to catch these bugs 2026-08-05 at 14:30 By Mirko Zorz An automated system called NOVA read the source code of 3,915 open-source projects over two months and came back with 14,090 vulnerabilities, each one confirmed through the system’s validation pipeline. Vulnerability researchers at Palo Alto Networks’ Unit

Code review used to be the only way to catch these bugs Read More »

Cloudflare gives AI agents wallets with built-in spending controls

agentic AI, AI, Cloudflare, cybersecurity, digital wallet, News, online payment /

Cloudflare gives AI agents wallets with built-in spending controls 2026-08-05 at 10:54 By Anamarija Pogorelec Cloudflare’s Wallets will give AI agents running on its platform a human-readable wallet handle for paying APIs and online content within limits set by their creator. Handle reservations have opened, while the service will become available in the coming months.

Cloudflare gives AI agents wallets with built-in spending controls Read More »

What stops attackers wrecking industrial plants is knowing how

AI, Anthropic, Cato Networks, Check Point, CISA, critical infrastructure, cybercrime, cybersecurity, Darktrace, Don't miss, Dragos, FBI, Hot stuff, ICS/SCADA, Israel, Kaspersky, LLMs, News, report, SentinelOne, Symantec, Threat Intelligence /

What stops attackers wrecking industrial plants is knowing how 2026-08-05 at 07:30 By Mirko Zorz Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The

What stops attackers wrecking industrial plants is knowing how Read More »

Your enterprise AI footprint is about three times bigger than your model list

agentic AI, AI, cybersecurity, News, open source, report, Snyk /

Your enterprise AI footprint is about three times bigger than your model list 2026-08-05 at 07:00 By Anamarija Pogorelec Organizations are building AI systems that combine models, agents and external tools instead of relying on standalone AI, according to Snyk’s latest State of Agentic AI Adoption report. The study analyzed 3,044 enterprise environments and 1.39

Your enterprise AI footprint is about three times bigger than your model list Read More »

Digital executive protection is a strategic imperative for CEOs

Black Hat, Black Hat USA 2026, BlackCloak, CISO, CXO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Privacy, Risk Management, strategy, threats /

Digital executive protection is a strategic imperative for CEOs 2026-08-04 at 09:00 By Mirko Zorz In this interview with Help Net Security, Brian Hill, Field CISO, Client Advisory for BlackCloak, explains how attackers reach companies through the personal lives of executives. He describes a case where a draft report sat in an executive’s personal email

Digital executive protection is a strategic imperative for CEOs Read More »

OWASP’s subtractive security project measures the attack paths you erased

CISO, cybersecurity, Don't miss, Features, GitHub, Hot stuff, News, open source, OWASP /

OWASP’s subtractive security project measures the attack paths you erased 2026-08-04 at 08:30 By Mirko Zorz An attacker who talks a user into opening an attachment gets whatever that machine still permits: a service account with rights across the domain, an outbound route to anywhere, a scripting engine sitting there for the taking. Christopher Frenz

OWASP’s subtractive security project measures the attack paths you erased Read More »

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials

agentic AI, Black Hat, Black Hat USA 2026, cybersecurity, Don't miss, Hot stuff, News, security operations, SOC, Stellar Cyber /

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials 2026-08-04 at 08:00 By Mirko Zorz An analyst opening a queue on Monday morning will spend most of it on tickets that amount to nothing. Stellar Cyber’s Agentic Auto Triage closed 8,047 of those tickets on its own during customer trials,

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials Read More »

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Arm, cybersecurity, Elastic, Endpoint Security, News /

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support 2026-08-03 at 11:31 By Mirko Zorz Attackers reaching for kernel access on a Windows machine bring a driver Microsoft already trusts. It is signed, it loads, and it carries a known flaw. That flaw gives them enough room to tamper with memory

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support Read More »

Mapping the malware blast radius a single alert won’t show you

agentic AI, AI, Black Hat, Black Hat USA 2026, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Stairwell /

Mapping the malware blast radius a single alert won’t show you 2026-08-03 at 09:00 By Mirko Zorz In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far a malware campaign spread. He walks through

Mapping the malware blast radius a single alert won’t show you Read More »

Buying TikTok followers can expose users to scams and account theft

ad, credentials, cybersecurity, identity, Malwarebytes, News, scams, social media, TikTok /

Buying TikTok followers can expose users to scams and account theft 2026-08-03 at 07:00 By Anamarija Pogorelec Buying TikTok followers, likes, or views could do more than inflate engagement metrics. According to Malwarebytes, many services selling social media growth operate through deceptive practices that can expose customers to scams, stolen accounts, and financial loss. The

Buying TikTok followers can expose users to scams and account theft Read More »

Cybercrime goes subscription: AI, malware and infrastructure on demand

attack, BEC scams, cybercrime, cybersecurity, DNS, fraud, Infoblox, News, report /

Cybercrime goes subscription: AI, malware and infrastructure on demand 2026-07-31 at 16:55 By Anamarija Pogorelec Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enabling

Cybercrime goes subscription: AI, malware and infrastructure on demand Read More »

Scroll to Top