Don’t miss

Why Active Directory weaknesses stay open for years in teams with one or two admins

Active Directory, auditing, CXO, Don't miss, EU, Europe, Features, Government, Hot stuff, News, opinion, security auditing, strategy, tips, Windows Server /

Why Active Directory weaknesses stay open for years in teams with one or two admins 2026-10-16 at 09:00 By Mirko Zorz David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a […]

Why Active Directory weaknesses stay open for years in teams with one or two admins Read More »

The cyber talent shortage? Job postings just hit a four-year low

CISO, cybersecurity jobs, Don't miss, Features, GRC, Hot stuff, News, report, USA /

The cyber talent shortage? Job postings just hit a four-year low 2026-10-16 at 08:30 By Mirko Zorz US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job […]

The cyber talent shortage? Job postings just hit a four-year low Read More »

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CISA, Cisco, CVE, Don't miss, firewall, Hot stuff, News, Palo Alto Networks, vulnerability /

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products 2026-10-15 at 13:43 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, […]

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries

Don't miss, FBI, Hot stuff, Insider Threat, law enforcement, News, North Korea, remote working, US DoJ, USA /

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries 2026-10-14 at 16:00 By Sinisa Markovic North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued laptops running from their homes, according to the US Department […]

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries Read More »

Download: The IT and security field guide to AI adoption

Don't miss, Hot stuff, News, Tines, Whitepapers and webinars /

Download: The IT and security field guide to AI adoption 2026-10-14 at 16:00 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of […]

Download: The IT and security field guide to AI adoption Read More »

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

0-day, CISA, Defused, Don't miss, Hot stuff, Ivanti, News, security update, Volexity /

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances 2026-10-14 at 11:59 By Zeljka Zorz A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October […]

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances Read More »

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

0-day, CVE, Don't miss, Hot stuff, News, security update, SharePoint, Tenable, Trend Micro, Windows, Windows Server /

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) 2026-10-14 at 10:53 By Zeljka Zorz In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be […]

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Meshery: Open-source cloud-native manager for Kubernetes

Don't miss, GitHub, News, open source, software /

Meshery: Open-source cloud-native manager for Kubernetes 2026-10-14 at 08:00 By Anamarija Pogorelec Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, […]

Meshery: Open-source cloud-native manager for Kubernetes Read More »

Most companies count AI agents as insiders, and CISOs worry about their own liability

agentic AI, CISO, Don't miss, Insider Threat, News, report, survey, Trellix /

Most companies count AI agents as insiders, and CISOs worry about their own liability 2026-10-14 at 07:30 By Anamarija Pogorelec Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked […]

Most companies count AI agents as insiders, and CISOs worry about their own liability Read More »

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet

data, data center, Don't miss, Hot stuff, News, Russian Federation, Ukraine /

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet 2026-10-13 at 16:15 By Sinisa Markovic Russian tech giant Yandex confirmed that drones hit three of its data centers, shutting down the facilities in Sasovo and Vladimir and knocking out part of the infrastructure in Kaluga. On October 11, Yandex Cloud […]

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet Read More »

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

CVE, Don't miss, GitLab, Hot stuff, News, vulnerability /

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) 2026-10-13 at 12:19 By Sinisa Markovic GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in […]

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) Read More »

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover

Don't miss, GitHub, Hot stuff, News, research, supply chain compromise, vulnerability disclosure /

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover 2026-10-13 at 12:00 By Mirko Zorz Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom […]

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover Read More »

Be a good AI ancestor: Cybersecurity already gave us the playbook

AI, automation, cybersecurity, Don't miss, Expert analysis, opinion, strategy /

Be a good AI ancestor: Cybersecurity already gave us the playbook 2026-10-13 at 08:30 By Help Net Security AI has brought us to a familiar inflection point in the story of privacy, cybersecurity, and online safety. We have an opportunity to apply decades of cybersecurity experience before the next generation of technology creates consequences we […]

Be a good AI ancestor: Cybersecurity already gave us the playbook Read More »

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

Claroty, cyberattack, cybersecurity, Don't miss, Europe, France, hardware, Hot stuff, News, PLC, Retail /

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted 2026-10-12 at 19:07 By Zeljka Zorz European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned […]

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted Read More »

Low-cost Android phones are arriving with malware that owners can’t uninstall

Android, Bitdefender, Don't miss, Hot stuff, Malware, mobile apps, mobile security, News /

Low-cost Android phones are arriving with malware that owners can’t uninstall 2026-10-12 at 13:53 By Sinisa Markovic People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different […]

Low-cost Android phones are arriving with malware that owners can’t uninstall Read More »

Hidden implant in Ledger hardware wallets linked to $93M theft

Cryptocurrency, digital wallet, Don't miss, Hot stuff, Ledger, News, supply chain compromise /

Hidden implant in Ledger hardware wallets linked to $93M theft 2026-10-12 at 12:46 By Zeljka Zorz Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed […]

Hidden implant in Ledger hardware wallets linked to $93M theft Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

Strands Box: Open-source sandbox for AI agents

agentic AI, AWS, Don't miss, GitHub, Hot stuff, News, open source, software /

Strands Box: Open-source sandbox for AI agents 2026-10-12 at 08:30 By Mirko Zorz AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple […]

Strands Box: Open-source sandbox for AI agents Read More »

Scroll to Top