AI vulnerability patching has a grading problem 2026-10-12 at 07:45 By Anamarija Pogorelec Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that […]
AI vulnerability patching has a grading problem Read More »
High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring 2026-10-09 at 16:27 By Sinisa Markovic Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the monitoring service and may disrupt AI workloads, according to Lava. Lava reported the flaw to […]
High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring Read More »
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »
What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]
What the BPFDoor backdoor tells us about attacks on the network edge Read More »
Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]
Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »
YouTubers targeted with fake sponsorships and “channel verification” phishing 2026-10-08 at 15:41 By Zeljka Zorz Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing fake collaboration platform, the fraudsters […]
YouTubers targeted with fake sponsorships and “channel verification” phishing Read More »
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers 2026-10-08 at 13:24 By Sinisa Markovic Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and […]
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Read More »
Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]
Pricing your bad days and how to build an economic model for security decisions Read More »
Who watches the AI watching your street? 2026-10-08 at 08:30 By Mirko Zorz Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting […]
Who watches the AI watching your street? Read More »
How AI can fix cybersecurity compliance: From dashboards to continuous execution 2026-10-08 at 08:00 By Help Net Security Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative controls, monitor their […]
How AI can fix cybersecurity compliance: From dashboards to continuous execution Read More »
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) 2026-10-07 at 17:21 By Zeljka Zorz One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have been spotted attempting to […]
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) Read More »
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) 2026-10-07 at 13:37 By Zeljka Zorz SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality […]
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) Read More »
ASOS confirms data breach after “hacked” app alert reaches shoppers 2026-10-07 at 12:29 By Sinisa Markovic UK fashion retailer ASOS has confirmed a data breach after a notification claiming hackers had broken into its data was sent to shoppers through its app. ASOS was founded in 2000 and has 16.5 million active customers in more […]
ASOS confirms data breach after “hacked” app alert reaches shoppers Read More »
AI Agent Gateway: Open-source tool keeps credentials out of agent configs 2026-10-07 at 08:30 By Anamarija Pogorelec Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model providers they send prompts to. […]
AI Agent Gateway: Open-source tool keeps credentials out of agent configs Read More »
AI endpoint management: Visibility, compliance, and remediation 2026-10-07 at 08:00 By Help Net Security Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and rising compliance pressure mean security teams manage more devices, more software, and more exceptions than a […]
AI endpoint management: Visibility, compliance, and remediation Read More »
Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]
Automation, AI agents or people? Sorting out who handles each security finding Read More »
U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]
U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »
NIS2 compliance: 7 low-cost steps to secure credentials 2026-10-06 at 08:00 By Help Net Security Security budgets rarely stretch to cover a full NIS2 programme in one pass. Credential controls are where a constrained team can start, because they make access visible, revocable, and reviewable without new infrastructure. NIS2 compliance rests on risk-management measures that […]
NIS2 compliance: 7 low-cost steps to secure credentials Read More »
CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779) 2026-10-05 at 17:53 By Zeljka Zorz CISA has added another Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on Sunday: CVE-2026-88779, a memory overflow bug that may cripple vulnerable NetScaler ADCs and Gateways. “Citrix has observed targeted attacks on unmitigated NetScaler deployments which […]
CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779) Read More »
Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940) 2026-10-05 at 13:38 By Zeljka Zorz Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access […]