Many expect AI in the SOC to make entry jobs harder to get 2026-10-01 at 08:30 By Mirko Zorz A junior analyst in a security operations center, or SOC, has usually learned the job the slow way. You work the same phishing lure dozens of times, chase the same familiar malware pattern and write up […]
Many expect AI in the SOC to make entry jobs harder to get Read More »
OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]
OWASP Noir: Open-source static analysis tool Read More »
Deepfakes become a board priority once an executive falls for one 2026-09-29 at 14:59 By Anamarija Pogorelec Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, according to Pindrop’s 2026 Deepfake Readiness Index. Real-time communications have become a target […]
Deepfakes become a board priority once an executive falls for one Read More »
Palo Alto Networks and NVIDIA want tighter control over AI agents 2026-09-29 at 13:21 By Anamarija Pogorelec Palo Alto Networks is expanding its work with NVIDIA to help companies control what AI agents can access and do. The collaboration covers agent activity, network traffic and identity management through NVIDIA’s Open Agent Safety Platform reference design. […]
Palo Alto Networks and NVIDIA want tighter control over AI agents Read More »
Claude Sonnet 5.5 gets faster without a price hike 2026-09-29 at 11:15 By Anamarija Pogorelec Anthropic has released Claude Sonnet 5.5, an AI model for coding and office work. The company says it responds more than 30% faster than its predecessor and uses fewer tokens to complete many tasks, reducing the cost per task without […]
Claude Sonnet 5.5 gets faster without a price hike Read More »
A four-week plan to tackle vendor concentration risk 2026-09-29 at 08:00 By Help Net Security In this Help Net Security video, Guilliano Molaire, founder of Skycloak, explains how to map vendor concentration risk. A company may pay 30 vendors and think its tools are spread out, but many of those vendors run on the same […]
A four-week plan to tackle vendor concentration risk Read More »
Hottest cybersecurity open-source tools of the month: September 2026 2026-09-29 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is […]
Hottest cybersecurity open-source tools of the month: September 2026 Read More »
NVIDIA wants AI agent safety enforced in silicon, not left to the agent 2026-09-28 at 18:22 By Anamarija Pogorelec NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that […]
NVIDIA wants AI agent safety enforced in silicon, not left to the agent Read More »
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day 2026-09-28 at 16:56 By Zeljka Zorz The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic […]
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day Read More »
LinkedIn tests a way for connections to verify your work history 2026-09-28 at 11:20 By Anamarija Pogorelec LinkedIn is testing a way for members to verify the work and education history of people they know. The platform prompts verified members to confirm that they worked or studied with a connection. Once that person receives enough […]
LinkedIn tests a way for connections to verify your work history Read More »
If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]
If you do one security check this quarter, make it agent memory Read More »
Authorizer: Open-source authentication and authorization for your apps 2026-09-28 at 08:30 By Mirko Zorz Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an interface […]
Authorizer: Open-source authentication and authorization for your apps Read More »
Product showcase: A photo can fool your eyes, Verdict checks the evidence 2026-09-28 at 07:30 By Anamarija Pogorelec Verdict is an AI image and video detector designed for iPhone. It works offline and requires no account. Choose a photo or video, run a scan, and the app returns a 0–100 score with a verdict and […]
Product showcase: A photo can fool your eyes, Verdict checks the evidence Read More »
Quantum random numbers can pass the tests and still leak clues to attackers 2026-09-28 at 07:00 By Anamarija Pogorelec The European Telecommunications Standards Institute’s (ETSI) technical report, ETSI TR 104 171, offers guidance on building and evaluating quantum random number generators (QRNGs). It focuses on weaknesses in the devices and their supporting systems that could […]
Quantum random numbers can pass the tests and still leak clues to attackers Read More »
Threat detection dashboards are masking security coverage gaps 2026-09-25 at 15:04 By Sinisa Markovic A detection rule can show up as deployed on a coverage dashboard and still never fire when an attacker uses the technique it was built to catch. Conifers assessed 14,652 detections in its customer base, including rules written by customers and […]
Threat detection dashboards are masking security coverage gaps Read More »
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions 2026-09-25 at 11:50 By Ashish Khaitan Nation-state operators rarely need a zero-day to get inside a carrier. Much of the telecom stack still runs protocols designed when every participant was a known, trusted operator. SS7 assumes that the node sending […]
Stop watching what AI agents say and start watching what they do 2026-09-25 at 08:30 By Mirko Zorz In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent […]
Stop watching what AI agents say and start watching what they do Read More »
Half of threat hunters say bad data is their biggest problem 2026-09-25 at 08:00 By Anamarija Pogorelec Half of security professionals name data quality or quantity as their biggest barrier to effective threat hunting, according to the SANS 2026 Threat Hunting Survey. Teams with working playbooks describe the logs as their ceiling, and gaps in […]
Half of threat hunters say bad data is their biggest problem Read More »
Your incident count is missing a few incidents 2026-09-25 at 07:30 By Anamarija Pogorelec If you run security for a brand with hundreds or thousands of locations, the tools you’ve bought may have little to do with whether an attack stays at one store. A new VikingCloud survey asked 200 security and IT leaders at […]
Your incident count is missing a few incidents Read More »
Meta locks itself out of user data on its AI glasses 2026-09-24 at 14:35 By Anamarija Pogorelec Meta is expanding Private Processing to its AI glasses, extending their security protections into cloud data centers. The system runs AI models inside confidential virtual machines (CVMs) designed to prevent Meta from accessing users’ data. Private Processing combines […]
Meta locks itself out of user data on its AI glasses Read More »