cybersecurity

Anthropic offers free AI security scans to open-source maintainers

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, open source, scanner /

Anthropic offers free AI security scans to open-source maintainers 2026-10-09 at 12:55 By Anamarija Pogorelec Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when […]

Anthropic offers free AI security scans to open-source maintainers Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

backdoor, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, Linux, Malware, News, opinion, Rapid7, Threat Intelligence /

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

CISO, critical infrastructure, cybersecurity, Don't miss, EU, Europe, Features, hardware, Hot stuff, ICS/SCADA, News, research, vulnerability assessment /

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

Companies want autonomous IT operations but hesitate to let AI act alone

agentic AI, AI, automation, cybersecurity, News, Riverbed, security operations /

Companies want autonomous IT operations but hesitate to let AI act alone 2026-10-09 at 07:30 By Anamarija Pogorelec Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say […]

Companies want autonomous IT operations but hesitate to let AI act alone Read More »

Anthropic’s new budget model gets much better at ignoring hidden commands

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Anthropic’s new budget model gets much better at ignoring hidden commands 2026-10-08 at 14:24 By Anamarija Pogorelec Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4.5, though lighter […]

Anthropic’s new budget model gets much better at ignoring hidden commands Read More »

GitHub adds AI to catch passwords before a code push

agentic AI, AI, code, credentials, cybersecurity, DevSecOps, GitHub, News /

GitHub adds AI to catch passwords before a code push 2026-10-08 at 12:02 By Anamarija Pogorelec GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can […]

GitHub adds AI to catch passwords before a code push Read More »

How AI can fix cybersecurity compliance: From dashboards to continuous execution

AI, Compliance, cybersecurity, Don't miss, Hot stuff, News, opinion /

How AI can fix cybersecurity compliance: From dashboards to continuous execution 2026-10-08 at 08:00 By Help Net Security Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative controls, monitor their […]

How AI can fix cybersecurity compliance: From dashboards to continuous execution Read More »

The people who know passkeys best are still typing passwords

authentication, cybersecurity, News, Okta, passwordless, passwords, report, Yubico /

The people who know passkeys best are still typing passwords 2026-10-08 at 07:30 By Anamarija Pogorelec Yubico and Okta asked 1,890 technology and security professionals across nine countries how they sign in to work accounts. The most common answer was a username and password, at 43%, from a group in which 87% said they were […]

The people who know passkeys best are still typing passwords Read More »

Anthropic loosens Claude’s cyber restrictions for verified defenders

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, security controls /

Anthropic loosens Claude’s cyber restrictions for verified defenders 2026-10-07 at 12:00 By Anamarija Pogorelec Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work The program now has three tiers based […]

Anthropic loosens Claude’s cyber restrictions for verified defenders Read More »

AI endpoint management: Visibility, compliance, and remediation

AI, automation, cybersecurity, Don't miss, endpoint management, Hot stuff, News, opinion, patching /

AI endpoint management: Visibility, compliance, and remediation 2026-10-07 at 08:00 By Help Net Security Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and rising compliance pressure mean security teams manage more devices, more software, and more exceptions than a […]

AI endpoint management: Visibility, compliance, and remediation Read More »

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment

automation, critical infrastructure, cybersecurity, hardware, legacy technology, News, Palo Alto Networks, report, survey /

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment 2026-10-07 at 07:50 By Anamarija Pogorelec Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That is the picture from a Palo Alto Networks survey of more than […]

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment Read More »

Automation, AI agents or people? Sorting out who handles each security finding

ArmorCode, automation, boardroom, cybersecurity, Don't miss, Features, Hot stuff, News, report, strategy, survey, tips, vulnerability management /

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

Banks, CISO, cyber risk, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, opinion, Risk Management, strategy, tips /

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks

cybersecurity, iOS, iPhone, mobile security, News, Product showcase, scams, Webroot /

Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks 2026-10-06 at 07:30 By Anamarija Pogorelec Webroot Mobile Security combines device security checks, Safari protection, text scam filtering, and data breach monitoring. It is available for iPhone, iPad, and Android devices. The app requires an active Webroot subscription and is […]

Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

Keyorix: Open-source secrets management for teams that can’t use SaaS

cybersecurity, data management, DevOps, DevSecOps, Don't miss, GitHub, Hot stuff, News, open source, software /

Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]

Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »

How RMM abuse gives attackers a way in that looks like business as usual

cybersecurity, Endpoint Security, Huntress, News, report /

How RMM abuse gives attackers a way in that looks like business as usual 2026-10-05 at 07:30 By Sinisa Markovic Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the first quarter of 2026. The security company also ranked 11 attack tactics by how […]

How RMM abuse gives attackers a way in that looks like business as usual Read More »

Criminal recruiters want people on your payroll

cybercriminals, cybersecurity, fraud, Insider Threat, Intel 471, News, report, security controls /

Criminal recruiters want people on your payroll 2026-10-02 at 09:00 By Anamarija Pogorelec Legitimate employee access can let criminals circumvent security controls that would be difficult to overcome from outside an organization. Routine actions such as information lookups, account resets, transaction approvals and shipment changes can become services sold to criminal customers, according to Intel […]

Criminal recruiters want people on your payroll Read More »

Android 17 makes it harder for spyware to cover its tracks

Android, cybersecurity, Data Protection, Google, mobile security, News, Privacy /

Android 17 makes it harder for spyware to cover its tracks 2026-10-02 at 08:30 By Anamarija Pogorelec When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in Android 17, including one that keeps a copy […]

Android 17 makes it harder for spyware to cover its tracks Read More »

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list

AI, CISO, cybersecurity, News, PwC, report, survey /

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list 2026-10-02 at 08:00 By Sinisa Markovic Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934 business and technology leaders in 71 countries between May and July 2026. Half […]

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list Read More »

Scroll to Top