cybersecurity

Fake IT help desk callers got by on little more than names and email addresses

attack, Cisco, Claude Code, cybercrime, cybersecurity, Don't miss, Malware, Microsoft Teams, News, Ransomware, report, scams, social engineering, threats, vishing, voice recognition /

Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]

Fake IT help desk callers got by on little more than names and email addresses Read More »

Smart TVs can harbor unpatched security flaws and track what you watch

Bitdefender, cybersecurity, Internet of Things, News, report, smart home, smart tv /

Smart TVs can harbor unpatched security flaws and track what you watch 2026-10-30 at 07:00 By Anamarija Pogorelec Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and […]

Smart TVs can harbor unpatched security flaws and track what you watch Read More »

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI

AI, cybersecurity, Election, Featured, Government, voting /

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI 2026-10-29 at 17:00 By Kevin Townsend Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure. The post How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI appeared first on SecurityWeek. This […]

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI Read More »

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws

agentic AI, AI, cybersecurity, Google, News, Wiz /

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws 2026-10-29 at 14:44 By Anamarija Pogorelec Google’s Gemini 4 Carbon is a frontier AI model designed for software engineering and cybersecurity tasks, with safeguards built on those of its predecessor, Argon. SEC-bench Pro (Source: Google) Google says its teams have seen […]

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

automation, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, Qualys, strategy, tips, vulnerability management /

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

Stolen staff logins are spreading attacks between K-12 school districts

Center for Internet Security, cybersecurity, education, Government, News, report, USA /

Stolen staff logins are spreading attacks between K-12 school districts 2026-10-29 at 07:00 By Mirko Zorz Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces. That’s 808 of the center’s […]

Stolen staff logins are spreading attacks between K-12 school districts Read More »

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA, cybersecurity, GitHub, Google Workspace, Government, Microsoft 365, News, open source, software, USA /

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to […]

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster Read More »

Bellini Capital CISO on AI security governance and the limits of patching faster

AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, strategy, tips /

Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams […]

Bellini Capital CISO on AI security governance and the limits of patching faster Read More »

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records

cybersecurity, Don't miss, GitHub, News, open source, software /

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records 2026-10-28 at 08:00 By Anamarija Pogorelec AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, […]

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records Read More »

NIST starts the countdown to retire quantum-vulnerable encryption

cybersecurity, Encryption, Government, News, NIST, quantum computing, report, security standard /

NIST starts the countdown to retire quantum-vulnerable encryption 2026-10-28 at 07:30 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need […]

NIST starts the countdown to retire quantum-vulnerable encryption Read More »

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

Aikido Security, CVE, cybersecurity, Google, Hot stuff, Imperva, News, Node.js, patch, Rapid7, Tenable, vulnerability /

Brotli bug reaches far beyond Node.js (CVE-2026-111497) 2026-10-27 at 19:38 By Zeljka Zorz A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js […]

Brotli bug reaches far beyond Node.js (CVE-2026-111497) Read More »

CISA lays out plan to push cyber adversaries out of US critical infrastructure

CISA, critical infrastructure, cybersecurity, News, quantum computing, Risk Management, strategy /

CISA lays out plan to push cyber adversaries out of US critical infrastructure 2026-10-27 at 14:14 By Anamarija Pogorelec The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA 2030: Defend, Harden, Prevail, a strategy to strengthen national security and the resilience of critical infrastructure. It addresses intersecting cyber, physical, and geopolitical threats that can […]

CISA lays out plan to push cyber adversaries out of US critical infrastructure Read More »

Private repos still leak secrets to Gheist, a stolen GitHub token campaign

cybercrime, cybersecurity, GitHub, News, research, Threat Intelligence, threats, Wiz /

Private repos still leak secrets to Gheist, a stolen GitHub token campaign 2026-10-27 at 12:58 By Mirko Zorz Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. The tool takes […]

Private repos still leak secrets to Gheist, a stolen GitHub token campaign Read More »

Several AI security market categories are headed for bigger platforms

AI, cybersecurity, Don't miss, Features, Gartner, Hot stuff, News, opinion, predictions, security startup, strategy, tips /

Several AI security market categories are headed for bigger platforms 2026-10-27 at 08:30 By Mirko Zorz In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as […]

Several AI security market categories are headed for bigger platforms Read More »

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3

cybersecurity, Kali Linux, Linux, News, OffSec, open source, operating system, penetration testing /

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 2026-10-26 at 19:34 By Anamarija Pogorelec The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so […]

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 Read More »

Security pros reckon the biggest AI risk comes with an employee badge

AI, cybersecurity, News, survey /

Security pros reckon the biggest AI risk comes with an employee badge 2026-10-26 at 15:16 By Sinisa Markovic Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, the attack they run into most often, made the list of top concerns […]

Security pros reckon the biggest AI risk comes with an employee badge Read More »

Anthropic details what stops Claude Duet from going rogue

agentic AI, AI, Anthropic, Claude Code, credentials, cybersecurity, News /

Anthropic details what stops Claude Duet from going rogue 2026-10-26 at 12:41 By Anamarija Pogorelec Anthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users are away. The safeguards include approval requirements, checks for sensitive information and infrastructure that keeps […]

Anthropic details what stops Claude Duet from going rogue Read More »

Witness: Open-source framework for verifying how your software was built

cybersecurity, DevSecOps, Don't miss, framework, GitHub, News, open source, software, supply chain /

Witness: Open-source framework for verifying how your software was built 2026-10-26 at 09:00 By Anamarija Pogorelec Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native […]

Witness: Open-source framework for verifying how your software was built Read More »

Forgotten AI agents may still access sensitive company data

agentic AI, AI, credentials, cybersecurity, identity management, News, report /

Forgotten AI agents may still access sensitive company data 2026-10-26 at 07:30 By Anamarija Pogorelec AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive […]

Forgotten AI agents may still access sensitive company data Read More »

Scroll to Top