Don’t miss

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

CVE, Don't miss, Hot stuff, Linux, News, OpenSSH, Previdian, SOCRadar, vulnerability /

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) 2026-11-06 at 14:49 By Sinisa Markovic An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was […]

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) Read More »

Residential proxy traffic caught leaving the White House network

Don't miss, Hot stuff, networking, News, Proxy, USA /

Residential proxy traffic caught leaving the White House network 2026-11-06 at 12:29 By Sinisa Markovic The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, […]

Residential proxy traffic caught leaving the White House network Read More »

US agencies warn attackers are targeting refrigeration systems that protect food and medicine

CISA, cyberattack, Don't miss, FBI, hardware, Hot stuff, monitoring, News /

US agencies warn attackers are targeting refrigeration systems that protect food and medicine 2026-11-06 at 11:04 By Sinisa Markovic Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous heating and defrost cycles, five US federal agencies warned […]

US agencies warn attackers are targeting refrigeration systems that protect food and medicine Read More »

November 2026 Patch Tuesday forecast: Old software continues to bite

cybersecurity, Don't miss, Expert analysis, Hot stuff, Microsoft, News, opinion, Patch Tuesday, predictions /

November 2026 Patch Tuesday forecast: Old software continues to bite 2026-11-06 at 09:00 By Help Net Security How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly […]

November 2026 Patch Tuesday forecast: Old software continues to bite Read More »

87% say their AI controls need to work better

agentic AI, AI, Don't miss, generative AI, LLMs, News, survey, Vanson Bourne /

87% say their AI controls need to work better 2026-11-06 at 08:15 By Anamarija Pogorelec The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than half of 3,600 business decision-makers say the systems their teams use can act within defined rules without […]

87% say their AI controls need to work better Read More »

Vercel ties login sessions to devices, rolls out AI security reviews in public beta

cloud-based, code review, Don't miss, Hot stuff, News, Vercel, web application security /

Vercel ties login sessions to devices, rolls out AI security reviews in public beta 2026-11-05 at 16:37 By Zeljka Zorz Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the launch of Vercel Security Review in public beta. Making stolen […]

Vercel ties login sessions to devices, rolls out AI security reviews in public beta Read More »

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)

0-day, Binarly, Don't miss, exploit, GreyNoise, Hot stuff, News, Zyxel /

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) 2026-11-05 at 14:06 By Zeljka Zorz Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers used, Binarly found. That’s because the patch fixed a […]

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) Read More »

A banking malware sample led researchers to an Android bug that can loop-crash phones

Android, Bitdefender, cybersecurity, Don't miss, Hot stuff, News, research, software, Zimperium /

A banking malware sample led researchers to an Android bug that can loop-crash phones 2026-11-05 at 11:00 By Mirko Zorz Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can take a factory reset to clear. […]

A banking malware sample led researchers to an Android bug that can loop-crash phones Read More »

AI agent detection signals that still work when agents look human

agentic AI, automation, bot, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, threat detection, tips, traffic monitoring /

AI agent detection signals that still work when agents look human 2026-11-05 at 08:45 By Mirko Zorz Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of Resemble AI explains how agents arrive as […]

AI agent detection signals that still work when agents look human Read More »

Cyberattack hits French blood banks

cyberattack, disruption, Don't miss, Europe, France, Hot stuff, Lupovis, monitoring, News /

Cyberattack hits French blood banks 2026-11-04 at 15:36 By Zeljka Zorz Three blood banks have detected and reversed a potentially destructive temperature spike in their cold rooms, following a cyberattack that targeted a refrigeration equipment provider of the French Blood Establishment (EFS), the only civilian blood collection and transfusion organization in France. Monitoring systems caught […]

Cyberattack hits French blood banks Read More »

Poisoned cPGuard update hits thousands of web hosting servers

data theft, Don't miss, Hot stuff, Linux, News, OpsShield, supply chain compromise, web hosting /

Poisoned cPGuard update hits thousands of web hosting servers 2026-11-04 at 13:18 By Zeljka Zorz An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000 customer servers. OPSShield, the company behind the security suite, also confirmed that the attacker […]

Poisoned cPGuard update hits thousands of web hosting servers Read More »

Fake job interview opened the door to $6.34 billion Binance heist

Binance, Check Point, Crypto, Cryptocurrency, cyberattack, cybercrime, Don't miss, ESET, Fortra, Hot stuff, Microsoft, News, North Korea, social engineering /

Fake job interview opened the door to $6.34 billion Binance heist 2026-11-04 at 12:29 By Sinisa Markovic A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a single isolated breach or a simple phishing incident,” Binance […]

Fake job interview opened the door to $6.34 billion Binance heist Read More »

What AI-generated malware looks like under the microscope

AI, code analysis, cybersecurity, Don't miss, Features, Hot stuff, HUMAN Security, News, opinion, strategy, tips /

What AI-generated malware looks like under the microscope 2026-11-04 at 09:00 By Mirko Zorz In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from […]

What AI-generated malware looks like under the microscope Read More »

Secure your containers without breaking what works

automation, containers, cybersecurity, DevSecOps, Don't miss, Expert analysis, Hot stuff, News, opinion, vulnerability management /

Secure your containers without breaking what works 2026-11-04 at 08:35 By Help Net Security Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include operating-system packages, development tools, debugging utilities and libraries that an application never uses. Each unnecessary component […]

Secure your containers without breaking what works Read More »

Ghostunnel: Open-source TLS proxy with mutual authentication

cybersecurity, DevSecOps, Don't miss, GitHub, News, open source, software, SSL/TLS /

Ghostunnel: Open-source TLS proxy with mutual authentication 2026-11-04 at 08:30 By Anamarija Pogorelec Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a backend, accepts TLS connections, checks the client’s certificate, then passes traffic to the […]

Ghostunnel: Open-source TLS proxy with mutual authentication Read More »

Novee puts forgotten internet-facing assets through penetration testing

AI, asset discovery, Don't miss, Hot stuff, News, Novee, penetration testing, security testing, vulnerability management /

Novee puts forgotten internet-facing assets through penetration testing 2026-11-03 at 16:00 By Help Net Security Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) […]

Novee puts forgotten internet-facing assets through penetration testing Read More »

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

backdoor, CVE, Don't miss, Hot stuff, News, Siemens, VulnCheck, vulnerability /

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115) 2026-11-03 at 14:59 By Sinisa Markovic Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected servers, VulnCheck has found. Node-RED is a flow-based programming tool […]

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115) Read More »

AI agents scale and speed up Chinese-linked attacks

agentic AI, attack tools, China, CrowdStrike, cyber espionage, Don't miss, Hot stuff, Kaspersky, LLMs, News /

AI agents scale and speed up Chinese-linked attacks 2026-11-03 at 14:31 By Zeljka Zorz A China-nexus espionage group used AI agents to attack more than 200 organizations in 11 days, CrowdStrike said last week. On Monday, Kaspersky published details of a separate campaign against educational institutions in Africa and Latin America, mounted by Chinese-speaking operators. […]

AI agents scale and speed up Chinese-linked attacks Read More »

Opal’s agent.ID virtual event: Top security leaders on governing Al agents

Don't miss, Hot stuff, News, Opal Security, Whitepapers and webinars /

Opal’s agent.ID virtual event: Top security leaders on governing Al agents 2026-11-03 at 10:55 By Help Net Security Opal Security will host agent.ID, a free virtual event focused on adapting identity and access management (IAM) to AI agents, on November 5, 2026. The event will bring together CISOs and identity leaders from Elastic, Instacart, Notion, […]

Opal’s agent.ID virtual event: Top security leaders on governing Al agents Read More »

Scroll to Top