Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]
Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »
How RMM abuse gives attackers a way in that looks like business as usual 2026-10-05 at 07:30 By Sinisa Markovic Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the first quarter of 2026. The security company also ranked 11 attack tactics by how […]
How RMM abuse gives attackers a way in that looks like business as usual Read More »
Criminal recruiters want people on your payroll 2026-10-02 at 09:00 By Anamarija Pogorelec Legitimate employee access can let criminals circumvent security controls that would be difficult to overcome from outside an organization. Routine actions such as information lookups, account resets, transaction approvals and shipment changes can become services sold to criminal customers, according to Intel […]
Criminal recruiters want people on your payroll Read More »
Android 17 makes it harder for spyware to cover its tracks 2026-10-02 at 08:30 By Anamarija Pogorelec When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in Android 17, including one that keeps a copy […]
Android 17 makes it harder for spyware to cover its tracks Read More »
Botnets, adversarial attacks and data poisoning top leaders’ AI threat list 2026-10-02 at 08:00 By Sinisa Markovic Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934 business and technology leaders in 71 countries between May and July 2026. Half […]
Botnets, adversarial attacks and data poisoning top leaders’ AI threat list Read More »
Many expect AI in the SOC to make entry jobs harder to get 2026-10-01 at 08:30 By Mirko Zorz A junior analyst in a security operations center, or SOC, has usually learned the job the slow way. You work the same phishing lure dozens of times, chase the same familiar malware pattern and write up […]
Many expect AI in the SOC to make entry jobs harder to get Read More »
OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]
OWASP Noir: Open-source static analysis tool Read More »
Deepfakes become a board priority once an executive falls for one 2026-09-29 at 14:59 By Anamarija Pogorelec Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, according to Pindrop’s 2026 Deepfake Readiness Index. Real-time communications have become a target […]
Deepfakes become a board priority once an executive falls for one Read More »
Palo Alto Networks and NVIDIA want tighter control over AI agents 2026-09-29 at 13:21 By Anamarija Pogorelec Palo Alto Networks is expanding its work with NVIDIA to help companies control what AI agents can access and do. The collaboration covers agent activity, network traffic and identity management through NVIDIA’s Open Agent Safety Platform reference design. […]
Palo Alto Networks and NVIDIA want tighter control over AI agents Read More »
Claude Sonnet 5.5 gets faster without a price hike 2026-09-29 at 11:15 By Anamarija Pogorelec Anthropic has released Claude Sonnet 5.5, an AI model for coding and office work. The company says it responds more than 30% faster than its predecessor and uses fewer tokens to complete many tasks, reducing the cost per task without […]
Claude Sonnet 5.5 gets faster without a price hike Read More »
A four-week plan to tackle vendor concentration risk 2026-09-29 at 08:00 By Help Net Security In this Help Net Security video, Guilliano Molaire, founder of Skycloak, explains how to map vendor concentration risk. A company may pay 30 vendors and think its tools are spread out, but many of those vendors run on the same […]
A four-week plan to tackle vendor concentration risk Read More »
Hottest cybersecurity open-source tools of the month: September 2026 2026-09-29 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is […]
Hottest cybersecurity open-source tools of the month: September 2026 Read More »
NVIDIA wants AI agent safety enforced in silicon, not left to the agent 2026-09-28 at 18:22 By Anamarija Pogorelec NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that […]
NVIDIA wants AI agent safety enforced in silicon, not left to the agent Read More »
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day 2026-09-28 at 16:56 By Zeljka Zorz The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic […]
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day Read More »
LinkedIn tests a way for connections to verify your work history 2026-09-28 at 11:20 By Anamarija Pogorelec LinkedIn is testing a way for members to verify the work and education history of people they know. The platform prompts verified members to confirm that they worked or studied with a connection. Once that person receives enough […]
LinkedIn tests a way for connections to verify your work history Read More »
If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]
If you do one security check this quarter, make it agent memory Read More »
Authorizer: Open-source authentication and authorization for your apps 2026-09-28 at 08:30 By Mirko Zorz Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an interface […]
Authorizer: Open-source authentication and authorization for your apps Read More »
Product showcase: A photo can fool your eyes, Verdict checks the evidence 2026-09-28 at 07:30 By Anamarija Pogorelec Verdict is an AI image and video detector designed for iPhone. It works offline and requires no account. Choose a photo or video, run a scan, and the app returns a 0–100 score with a verdict and […]
Product showcase: A photo can fool your eyes, Verdict checks the evidence Read More »
Quantum random numbers can pass the tests and still leak clues to attackers 2026-09-28 at 07:00 By Anamarija Pogorelec The European Telecommunications Standards Institute’s (ETSI) technical report, ETSI TR 104 171, offers guidance on building and evaluating quantum random number generators (QRNGs). It focuses on weaknesses in the devices and their supporting systems that could […]
Quantum random numbers can pass the tests and still leak clues to attackers Read More »
Threat detection dashboards are masking security coverage gaps 2026-09-25 at 15:04 By Sinisa Markovic A detection rule can show up as deployed on a coverage dashboard and still never fire when an attacker uses the technique it was built to catch. Conifers assessed 14,652 detections in its customer base, including rules written by customers and […]
Threat detection dashboards are masking security coverage gaps Read More »