cybersecurity

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

AI, authentication, cybersecurity, financial industry, fraud, identity protection, News, report, scams, TransUnion /

Synthetic identities leave US lenders with $2.4 billion in fraud exposure 2026-10-26 at 07:00 By Anamarija Pogorelec Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first […]

Synthetic identities leave US lenders with $2.4 billion in fraud exposure Read More »

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

cybersecurity, Encryption, News, open source, OpenSSL, software /

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken 2026-10-26 at 01:33 By Anamarija Pogorelec The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version […]

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken Read More »

Google opens its cloud to rival OpenAI, promises business data won’t train models

agentic AI, AI, cybersecurity, Google, Google Cloud, News, OpenAI /

Google opens its cloud to rival OpenAI, promises business data won’t train models 2026-10-23 at 09:32 By Anamarija Pogorelec Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, […]

Google opens its cloud to rival OpenAI, promises business data won’t train models Read More »

Drone program compliance: What a CTO says most agencies get wrong

cybersecurity, Don't miss, drones, Features, Government, hardware, Hot stuff, News, opinion, regulation /

Drone program compliance: What a CTO says most agencies get wrong 2026-10-23 at 08:30 By Mirko Zorz In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody […]

Drone program compliance: What a CTO says most agencies get wrong Read More »

AI is taking cybersecurity jobs at junior and experienced levels alike

AI, automation, Barracuda Networks, cybersecurity, cybersecurity jobs, News, report /

AI is taking cybersecurity jobs at junior and experienced levels alike 2026-10-23 at 07:30 By Anamarija Pogorelec Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided […]

AI is taking cybersecurity jobs at junior and experienced levels alike Read More »

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, PHP, PHP2Shell, scanner, Searchlight Cyber, software /

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 2026-10-22 at 15:03 By Mirko Zorz Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP […]

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 Read More »

Claude Security can now spot vulnerabilities that reappear in code

agentic AI, AI, Anthropic, cybersecurity, monitoring, News, scanning, threat modeling, vulnerability management /

Claude Security can now spot vulnerabilities that reappear in code 2026-10-22 at 14:02 By Anamarija Pogorelec Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans codebases for vulnerabilities and suggests patches for review. It is powered by the company’s […]

Claude Security can now spot vulnerabilities that reappear in code Read More »

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Cisco, cybersecurity, Don't miss, Fortinet, Hot stuff, News, Palo Alto Networks, patch, PHP, security update, VulnCheck, vulnerability, vulnerability management /

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »

Anthropic finds 94 cases where open-source projects drop security controls without warning

agentic AI, AI, Anthropic, cybersecurity, News, open source, report, security controls, software development /

Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and […]

Anthropic finds 94 cases where open-source projects drop security controls without warning Read More »

AI-found bugs are expected to rise, and OpenAI has a five-stage response plan

cybersecurity, News, OpenAI, vulnerability disclosure /

AI-found bugs are expected to rise, and OpenAI has a five-stage response plan 2026-10-22 at 10:35 By Mirko Zorz OpenAI has proposed a five-stage process for handling critical vulnerabilities in widely used software. The process grew out of a two-month response to flaws in PHP, the open-source language that runs websites and web applications. Calif […]

AI-found bugs are expected to rise, and OpenAI has a five-stage response plan Read More »

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question

boardroom, CISO, Cloud, cloud computing, cybersecurity, data, data security, Don't miss, EU, Europe, Features, Government, Hot stuff, Microsoft, News, opinion, regulation, strategy, tips /

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question Read More »

AI agent permissions are outrunning security

agentic AI, AI, automation, CISO, cybersecurity, data, data security, Don't miss, Features, Hot stuff, Illumio, News, regulation, report /

AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. […]

AI agent permissions are outrunning security Read More »

AI coding boom exposes cracks in cloud development

agentic AI, AI, Cloud, code, cybersecurity, News, report, software development /

AI coding boom exposes cracks in cloud development 2026-10-22 at 07:30 By Anamarija Pogorelec Developers are encountering bugs, testing delays and disruptions in shared cloud environments as AI increases the volume of code they produce, according to LocalStack’s 2026 State of AI in Cloud Development report. More code adds to the testing workload Sixty-five percent […]

AI coding boom exposes cracks in cloud development Read More »

Chrome puts insecure sites behind a permission prompt

browser, Chrome, cybersecurity, Google, News, traffic monitoring /

Chrome puts insecure sites behind a permission prompt 2026-10-22 at 01:30 By Anamarija Pogorelec Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, following its introduction earlier this year for users of Safe Browsing’s Enhanced […]

Chrome puts insecure sites behind a permission prompt Read More »

NVIDIA unveils security architecture that can stop AI agents crossing set boundaries

agentic AI, AI, cybersecurity, News, NVIDIA /

NVIDIA unveils security architecture that can stop AI agents crossing set boundaries 2026-10-21 at 16:52 By Anamarija Pogorelec NVIDIA’s OpenShell Reference Architecture is designed to help businesses control AI agents operating across enterprise infrastructure and local computing systems. It builds on NVIDIA’s existing OpenShell security software, combining it with hardware for running AI models, managing […]

NVIDIA unveils security architecture that can stop AI agents crossing set boundaries Read More »

PHP2Shell: Critical PHP vulnerabilities patched, update now!

Cloudflare, CVE, CVSS, cybersecurity, Don't miss, Hot stuff, News, patch, PHP, security update, UK NCSC, vulnerability /

PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and […]

PHP2Shell: Critical PHP vulnerabilities patched, update now! Read More »

Why security tools lose sight of the credential

AI, credentials, cybersecurity, Don't miss, Expert analysis, GitGuardian, News, opinion /

Why security tools lose sight of the credential 2026-10-21 at 10:02 By Help Net Security Security teams have tools for code, endpoints, cloud infrastructure, identity, and secrets management. Credentials cut across all of them. A developer finds an AWS key in a repository. The first step is obvious: remove it. But that does not answer […]

Why security tools lose sight of the credential Read More »

DevGuard: Open-source vulnerability management for the software supply chain

cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, News, open source, software, supply chain, vulnerability management /

DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]

DevGuard: Open-source vulnerability management for the software supply chain Read More »

Chrome flags malicious commands that scammers pass off as fixes

browser, Chrome, cybersecurity, Google, News, scams /

Chrome flags malicious commands that scammers pass off as fixes 2026-10-20 at 20:00 By Anamarija Pogorelec Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for Chrome’s Safe Browsing feature in 2020 to address online […]

Chrome flags malicious commands that scammers pass off as fixes Read More »

US Army is developing AI agents that could strike enemy networks and vanish without a trace

agentic AI, AI, cybersecurity, Don't miss, Hot stuff, News, USA /

US Army is developing AI agents that could strike enemy networks and vanish without a trace 2026-10-20 at 13:03 By Sinisa Markovic The US Army is looking for AI agents that can slip into an adversary’s network, find their target, copy themselves onto nearby tablets and computers, and then erase themselves before anyone notices. Over […]

US Army is developing AI agents that could strike enemy networks and vanish without a trace Read More »

Scroll to Top