Don’t miss

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials

agentic AI, Black Hat, Black Hat USA 2026, cybersecurity, Don't miss, Hot stuff, News, security operations, SOC, Stellar Cyber /

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials 2026-08-04 at 08:00 By Mirko Zorz An analyst opening a queue on Monday morning will spend most of it on tickets that amount to nothing. Stellar Cyber’s Agentic Auto Triage closed 8,047 of those tickets on its own during customer trials, […]

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials Read More »

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)

Don't miss, Hot stuff, Huntress, MSP, N-able, News, remote management, vulnerability /

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577) 2026-08-03 at 17:33 By Zeljka Zorz Attackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution widely used by managed service providers, to gain access to managed endpoints. How the flaw was discovered “On July 31, 2026,

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577) Read More »

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)

Akamai, Don't miss, Ethiack, Hot stuff, News, Ruby on Rails, security update, tips, vulnerability, web application security /

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066) 2026-08-03 at 14:42 By Zeljka Zorz A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building websites and web apps, may allow attackers to read sensitive files off a server and, in some cases, take full control of

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066) Read More »

OpenAI reveals how criminals used ChatGPT to run scams

ChatGPT, cybercrime, Don't miss, LLMs, News, OpenAI, romance scams, scams, social media, threats /

OpenAI reveals how criminals used ChatGPT to run scams 2026-08-03 at 11:40 By Anamarija Pogorelec OpenAI banned a coordinated network of ChatGPT accounts that likely originated in Cambodia’s Preah Sihanouk province, a region reports have linked to online scam compounds and human trafficking operations. The network used the company’s models to create and manage fake

OpenAI reveals how criminals used ChatGPT to run scams Read More »

Mapping the malware blast radius a single alert won’t show you

agentic AI, AI, Black Hat, Black Hat USA 2026, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Stairwell /

Mapping the malware blast radius a single alert won’t show you 2026-08-03 at 09:00 By Mirko Zorz In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far a malware campaign spread. He walks through

Mapping the malware blast radius a single alert won’t show you Read More »

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills

agentic AI, Don't miss, GitHub, Hot stuff, LLMs, News, NVIDIA, open source, scanner, software /

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills 2026-08-03 at 08:30 By Anamarija Pogorelec SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills Read More »

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in

Don't miss, GlobalSign, News, Red Sift, Video /

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in 2026-08-03 at 08:00 By Help Net Security In this Help Net Security video, Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, unpack the evolution of email security and why it

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in Read More »

Aviation cyber risk sits on the ground, the blindness sits in the air

boardroom, CXO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips /

Aviation cyber risk sits on the ground, the blindness sits in the air 2026-07-31 at 08:30 By Mirko Zorz In this interview with Help Net Security, Eliran Almong, CEO of Cyviation, explains why airline cyber losses happen on the ground while the aircraft stays unmonitored. He walks through GNSS jamming that leaves no trace in

Aviation cyber risk sits on the ground, the blindness sits in the air Read More »

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)

APT, cyber espionage, Don't miss, government-backed attacks, Hot stuff, Microsoft Exchange, News, Proofpoint, Russian Federation, vulnerability /

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) 2026-07-30 at 17:23 By Zeljka Zorz Russia-affiliated cyber espionage group Laundry Bear (aka Void Blizzard, aka TA488) is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange, to target US and European government entities and a variety of private sector organizations via email. The

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) Read More »

Cisco FMC static credentials exploited by attackers (CVE-2026-20316)

CISA, Cisco, configuration management, Don't miss, Hot stuff, News, vulnerability /

Cisco FMC static credentials exploited by attackers (CVE-2026-20316) 2026-07-30 at 13:44 By Zeljka Zorz A static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws, one indicator of compromise CVE-2026-20316, reported

Cisco FMC static credentials exploited by attackers (CVE-2026-20316) Read More »

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher

agentic AI, AI, CISO, cyber risk, cybersecurity, data breach, Don't miss, Hot stuff, IBM, News, report /

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher 2026-07-30 at 09:15 By Mirko Zorz More than one in four organizations hit by a malicious attack over the past year say AI drove it. Those breaches averaged about $1 million above the malicious attacks that ran without AI. Defenders bought similar technology and

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher Read More »

200 new CVEs a day and no realistic way to patch them all

CISA, cybersecurity, Don't miss, Features, Hot stuff, KEVIntel, News, opinion, patching, vulnerability assessment, vulnerability management /

200 new CVEs a day and no realistic way to patch them all 2026-07-30 at 09:00 By Mirko Zorz Ryan Dewhurst, CEO at KEVIntel, explains how his team confirms exploitation that CISA’s catalog has not listed yet. He describes a global honeypot sensor network, AI triage, and human verification in a lab before a vulnerability

200 new CVEs a day and no realistic way to patch them all Read More »

Top companies to visit at Black Hat USA 2026

Black Hat, Black Hat USA 2026, BlackCloak, conferences, Don't miss, News, Novee, Stairwell, Stellar Cyber, Teleport /

Top companies to visit at Black Hat USA 2026 2026-07-30 at 08:30 By Mirko Zorz Black Hat USA 2026 returns to Mandalay Bay with a re-engineered six-day program designed to spark innovation, challenge assumptions, and unite the global security community. The event opens with four days of immersive, expert-led Trainings (August 1-4), continues with Summit

Top companies to visit at Black Hat USA 2026 Read More »

ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility

cybersecurity, Don't miss, Hot stuff, News, report /

ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility 2026-07-29 at 16:00 By Help Net Security Research from Aryon reveals that each year, 3,731,699 short-lived cloud resources containing highly sensitive information are publicly exposed. This impacts any organization using AWS services that support public sharing. These exposures often last only minutes or hours,

ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility Read More »

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced

Asimily, backup, CISO, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Dragos, Features, Hexnode, Hot stuff, Insurance, Internet of Things, News, opinion, Risk Management, strategy, supply chain, tips, Waterfall Security Solutions /

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced 2026-07-29 at 08:30 By Mirko Zorz A ransomware hit lands a chemical plant in a safe state. Nobody is hurt, the site holds steady, and the operators begin the restart. The systems stay down. Every attempt to bring them online meets

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced Read More »

Your AI agents can reach data no one approved

1Password, agentic AI, AI, cybersecurity, Don't miss, News, report, survey /

Your AI agents can reach data no one approved 2026-07-29 at 07:30 By Mirko Zorz A credential expired. An AI agent kept using it anyway, and a mid-sized company’s systems went down for a quarter’s worth of trouble before anyone traced the failure back to a non-human account no one had been logging. That agent

Your AI agents can reach data no one approved Read More »

Hugging Face breach reignites open-weights debate, raises liability questions

agentic AI, Anthropic, CISO, Cloud Security Alliance, Don't miss, Hot stuff, Hugging Face, LLMs, News, open source, OpenAI, policy /

Hugging Face breach reignites open-weights debate, raises liability questions 2026-07-28 at 18:55 By Zeljka Zorz The first publicly documented cyberattack run end-to-end by an autonomous AI was an OpenAI benchmark test that escaped its sandbox and breached Hugging Face. In an incident post-mortem compiled with the input from Hugging Face and several hundred members of

Hugging Face breach reignites open-weights debate, raises liability questions Read More »

Exposed BMCs hand out password hashes before login

authentication, Don't miss, hardware, HPE, News, passwords, research, Supermicro, vulnerability /

Exposed BMCs hand out password hashes before login 2026-07-28 at 15:00 By Sinisa Markovic An attacker who reaches UDP port 623 on a server’s baseboard management controller can ask it for a password hash and receive one before logging in. The exchange is part of the IPMI 2.0 handshake, built on an authentication protocol introduced

Exposed BMCs hand out password hashes before login Read More »

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)

continuous integration, Don't miss, enterprise, Hot stuff, JetBrains, News, software development, vulnerability /

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077) 2026-07-28 at 14:04 By Zeljka Zorz JetBrains has fixed a critical vulnerability (CVE-2026-63077) affecting TeamCity On-Premises and is urging admins to upgrade self-hosted servers as soon as possible. “For those who are unable to do so, we have released a security patch plugin,” noted Daniel Gallo,

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077) Read More »

Shadow AI incident response begins with logs that may already be gone

AI, CISO, Compliance, cybersecurity, Don't miss, Features, Hot stuff, LevelBlue, News, opinion, regulation, Shadow Brokers, strategy, tips /

Shadow AI incident response begins with logs that may already be gone 2026-07-28 at 09:00 By Mirko Zorz In this Help Net Security interview, Brandy Wityak, VP of Complex Matters at LevelBlue, explains what happens in the hours after a shadow AI incident. She describes how quickly logs roll over, why firewall records of outbound

Shadow AI incident response begins with logs that may already be gone Read More »

Scroll to Top