What human hackers still do better than AI, according to HackerOne’s CEO 2026-11-03 at 08:30 By Mirko Zorz AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, […]
What human hackers still do better than AI, according to HackerOne’s CEO Read More »
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up 2026-11-03 at 08:00 By Help Net Security HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late […]
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up Read More »
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) 2026-11-02 at 17:58 By Zeljka Zorz CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaws chained to gain a foothold […]
Google disrupts XCPE botnet, bans the company behind it 2026-11-02 at 17:50 By Mirko Zorz Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high confidence to Videostrong Technology, the company that manufactured many of those boxes. More […]
Google disrupts XCPE botnet, bans the company behind it Read More »
Second wave of refrigeration cyberattacks hits European supermarkets 2026-11-02 at 16:28 By Zeljka Zorz Three weeks after the attack that turned refrigeration units in French supermarkets into ovens overnight, similar cyberattacks have hit shops in other European countries and again caused refrigerated food to be spoiled. Belgium, Luxembourg and Sweden affected “[In Belgium,] fridges and […]
Second wave of refrigeration cyberattacks hits European supermarkets Read More »
Trezor warns some of its wallets may hide a seed-stealing implant 2026-11-02 at 14:48 By Sinisa Markovic A Trezor Safe 5 sold by CryptoBilis, the reseller linked to the recent Ledger wallet drains, may contain a hidden implant that steals the owner’s recovery phrase, Trezor has warned. Trezor is a Czech company and part of […]
Trezor warns some of its wallets may hide a seed-stealing implant Read More »
Chainalysis breached using “offensive agentic techniques” 2026-11-02 at 13:40 By Zeljka Zorz Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the incident is unrelated to the recent Binance hack. What was accessed? In October, the company detected external attackers using “offensive agentic […]
Chainalysis breached using “offensive agentic techniques” Read More »
FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users 2026-11-02 at 12:12 By Sinisa Markovic North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of […]
The first ten lines of a command policy for AI coding agents 2026-11-02 at 08:30 By Mirko Zorz In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity […]
The first ten lines of a command policy for AI coding agents Read More »
Byoky: Open-source wallet for AI API keys 2026-11-02 at 08:00 By Anamarija Pogorelec Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps […]
Byoky: Open-source wallet for AI API keys Read More »
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record 2026-10-30 at 10:26 By Sinisa Markovic About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s […]
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record Read More »
What exactly is ISOC? And what does it mean for you? 2026-10-30 at 08:36 By Help Net Security Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected […]
What exactly is ISOC? And what does it mean for you? Read More »
Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]
Fake IT help desk callers got by on little more than names and email addresses Read More »
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 at 18:25 By Zeljka Zorz China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that […]
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop 2026-10-29 at 16:10 By Mirko Zorz Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local […]
Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network 2026-10-29 at 15:42 By Zeljka Zorz Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on […]
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) 2026-10-29 at 15:12 By Sinisa Markovic Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote […]
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents 2026-10-29 at 12:16 By Sinisa Markovic Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist group calling itself the Department of Peace. The group handed the data to the transparency collective […]
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents Read More »
Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]
Qualys CISO on what security teams can do as exploit campaigns grow Read More »
GitHub’s npm package firewall can block brand-new versions before they install 2026-10-28 at 19:09 By Mirko Zorz GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. […]
GitHub’s npm package firewall can block brand-new versions before they install Read More »