Don’t miss

Detained ShinyHunters hacker reportedly helping FBI track down fellow members

cybercrime, Don't miss, FBI, hacker, Hot stuff, law enforcement, News /

Detained ShinyHunters hacker reportedly helping FBI track down fellow members 2026-10-05 at 13:36 By Sinisa Markovic A suspected ShinyHunters member known as Rey has been detained in Jordan and is reportedly helping the FBI track down the rest of the group. Reuters reports that Jordanian authorities detained Saif al-Din Khader, alias Rey, last week, with […]

Detained ShinyHunters hacker reportedly helping FBI track down fellow members Read More »

AI slop submissions force Google to freeze its open-source bug bounty

AI, bug bounty, Don't miss, Google, Hot stuff, News /

AI slop submissions force Google to freeze its open-source bug bounty 2026-10-05 at 10:37 By Sinisa Markovic Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who review them. The rules page […]

AI slop submissions force Google to freeze its open-source bug bounty Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

Keyorix: Open-source secrets management for teams that can’t use SaaS

cybersecurity, data management, DevOps, DevSecOps, Don't miss, GitHub, Hot stuff, News, open source, software /

Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]

Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »

AI is giving attackers a head start, Microsoft warns

AI, cybercrime, Don't miss, Hot stuff, Microsoft, News, report, survey /

AI is giving attackers a head start, Microsoft warns 2026-10-02 at 15:47 By Sinisa Markovic Threat actors are using AI to find bugs, build malware and run intrusions faster than defenders can keep up. Microsoft’s 2026 Digital Defense Report, covering July 2025 to June 2026, describes a near-term period in which attackers collect the benefits […]

AI is giving attackers a head start, Microsoft warns Read More »

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

0-day, Cisco, Don't miss, exploit, Hot stuff, News /

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) 2026-10-01 at 13:18 By Zeljka Zorz For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a […]

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) Read More »

Some car apps are slipping owners’ data to big tech companies

connected cars, data collection, Don't miss, Hot stuff, News, Privacy, research /

Some car apps are slipping owners’ data to big tech companies 2026-10-01 at 12:52 By Sinisa Markovic The app that comes with your car may be sharing what it knows about you with some of the biggest tech companies. Northeastern University researchers tested 21 vehicles and 30 carmaker apps and found some sending vehicle identification […]

Some car apps are slipping owners’ data to big tech companies Read More »

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)

Don't miss, education, Europe, financial industry, Google Cloud, Government, Hot stuff, Mandiant, NetScaler, News, telecommunications, USA, WatchTowr /

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772) 2026-09-30 at 15:33 By Zeljka Zorz “Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the two recently disclosed NetScaler vulnerabilities that have been exploited as zero-days, says Mandiant CTO Charles Carmakal. Mandiant and […]

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772) Read More »

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos

AI, code analysis, Don't miss, GitHub, Hot stuff, News /

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos 2026-09-30 at 14:52 By Sinisa Markovic When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots […]

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos Read More »

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised

breach, Don't miss, Hot stuff, JFrog, News, open source, OpenInfra, vulnerability /

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised 2026-09-30 at 13:39 By Zeljka Zorz Attackers have compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe, the regional hub of the OpenInfra Foundation warned in a security notice prominently displayed on its homepage. OpenInfra Europe’s security incident notice “Anyone who downloaded or installed artifacts […]

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised Read More »

OWASP Noir: Open-source static analysis tool

code analysis, cybersecurity, Don't miss, GitHub, News, open source, OWASP, software /

OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]

OWASP Noir: Open-source static analysis tool Read More »

EU Cyber Resilience Act requirements for containers and Kubernetes

cloud security, Compliance, containers, Don't miss, Hot stuff, Kubernetes, News, opinion /

EU Cyber Resilience Act requirements for containers and Kubernetes 2026-09-30 at 08:00 By Help Net Security Starting in full force on Dec. 10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations will begin on Sept. 11, 2026, […]

EU Cyber Resilience Act requirements for containers and Kubernetes Read More »

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

Censys, CERT-EU, Don't miss, GreyNoise, Hot stuff, Lupovis, NetScaler, News, PoC, vulnerability, WatchTowr /

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) 2026-09-29 at 17:59 By Zeljka Zorz The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit […]

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) Read More »

Webinar: Closing the accountability gap in AI-assisted delivery

Don't miss, News, Whitepapers and webinars /

Webinar: Closing the accountability gap in AI-assisted delivery 2026-09-29 at 16:00 By Help Net Security Source control records who committed code. It does not record who made the decisions behind it, and that gap is widening as AI agents take on more of the delivery process. This session explores how organisations can adapt accountability models […]

Webinar: Closing the accountability gap in AI-assisted delivery Read More »

Malicious Custom GPT on chatgpt.com lures users into installing a RAT

ChatGPT, Don't miss, Hot stuff, Huntress, malvertising, Malware, News, Remote Access Trojan /

Malicious Custom GPT on chatgpt.com lures users into installing a RAT 2026-09-29 at 14:55 By Zeljka Zorz Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named “Plus 5.6,” created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan […]

Malicious Custom GPT on chatgpt.com lures users into installing a RAT Read More »

A four-week plan to tackle vendor concentration risk

cybersecurity, Don't miss, News, strategy, tips, Video /

A four-week plan to tackle vendor concentration risk 2026-09-29 at 08:00 By Help Net Security In this Help Net Security video, Guilliano Molaire, founder of Skycloak, explains how to map vendor concentration risk. A company may pay 30 vendors and think its tools are spread out, but many of those vendors run on the same […]

A four-week plan to tackle vendor concentration risk Read More »

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day

cybersecurity, Don't miss, extortion, FBI, Hot stuff, News, Oracle /

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day 2026-09-28 at 16:56 By Zeljka Zorz The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic […]

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day Read More »

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

AI, Don't miss, Hot stuff, Microsoft, News, vulnerability disclosure /

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data 2026-09-28 at 16:50 By Sinisa Markovic A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found […]

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data Read More »

Other users can watch your browsing and time your keystrokes through OS file notifications

apple, Don't miss, Linux, macOS, News, Privacy, research, Windows /

Other users can watch your browsing and time your keystrokes through OS file notifications 2026-09-28 at 15:14 By Anamarija Pogorelec Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s […]

Other users can watch your browsing and time your keystrokes through OS file notifications Read More »

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

CISA, Citrix, Don't miss, Hot stuff, NCSC-NL, NetScaler, News, Tenable /

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) 2026-09-28 at 12:51 By Zeljka Zorz Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped […]

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) Read More »

Scroll to Top