Hot stuff

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

cybersecurity, Don't miss, Hot stuff, Malware, News /

Fake Arch Linux AUR packages exploit typos to run malware with root privileges 2026-10-16 at 12:58 By Sinisa Markovic Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source […]

Fake Arch Linux AUR packages exploit typos to run malware with root privileges Read More »

Why Active Directory weaknesses stay open for years in teams with one or two admins

Active Directory, auditing, CXO, Don't miss, EU, Europe, Features, Government, Hot stuff, News, opinion, security auditing, strategy, tips, Windows Server /

Why Active Directory weaknesses stay open for years in teams with one or two admins 2026-10-16 at 09:00 By Mirko Zorz David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a […]

Why Active Directory weaknesses stay open for years in teams with one or two admins Read More »

The cyber talent shortage? Job postings just hit a four-year low

CISO, cybersecurity jobs, Don't miss, Features, GRC, Hot stuff, News, report, USA /

The cyber talent shortage? Job postings just hit a four-year low 2026-10-16 at 08:30 By Mirko Zorz US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job […]

The cyber talent shortage? Job postings just hit a four-year low Read More »

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CISA, Cisco, CVE, Don't miss, firewall, Hot stuff, News, Palo Alto Networks, vulnerability /

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products 2026-10-15 at 13:43 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, […]

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries

Don't miss, FBI, Hot stuff, Insider Threat, law enforcement, News, North Korea, remote working, US DoJ, USA /

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries 2026-10-14 at 16:00 By Sinisa Markovic North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued laptops running from their homes, according to the US Department […]

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries Read More »

Download: The IT and security field guide to AI adoption

Don't miss, Hot stuff, News, Tines, Whitepapers and webinars /

Download: The IT and security field guide to AI adoption 2026-10-14 at 16:00 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of […]

Download: The IT and security field guide to AI adoption Read More »

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

0-day, CISA, Defused, Don't miss, Hot stuff, Ivanti, News, security update, Volexity /

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances 2026-10-14 at 11:59 By Zeljka Zorz A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October […]

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances Read More »

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

0-day, CVE, Don't miss, Hot stuff, News, security update, SharePoint, Tenable, Trend Micro, Windows, Windows Server /

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) 2026-10-14 at 10:53 By Zeljka Zorz In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be […]

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet

data, data center, Don't miss, Hot stuff, News, Russian Federation, Ukraine /

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet 2026-10-13 at 16:15 By Sinisa Markovic Russian tech giant Yandex confirmed that drones hit three of its data centers, shutting down the facilities in Sasovo and Vladimir and knocking out part of the infrastructure in Kaluga. On October 11, Yandex Cloud […]

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet Read More »

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

CVE, Don't miss, GitLab, Hot stuff, News, vulnerability /

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) 2026-10-13 at 12:19 By Sinisa Markovic GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in […]

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) Read More »

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover

Don't miss, GitHub, Hot stuff, News, research, supply chain compromise, vulnerability disclosure /

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover 2026-10-13 at 12:00 By Mirko Zorz Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom […]

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover Read More »

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

Claroty, cyberattack, cybersecurity, Don't miss, Europe, France, hardware, Hot stuff, News, PLC, Retail /

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted 2026-10-12 at 19:07 By Zeljka Zorz European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned […]

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted Read More »

Low-cost Android phones are arriving with malware that owners can’t uninstall

Android, Bitdefender, Don't miss, Hot stuff, Malware, mobile apps, mobile security, News /

Low-cost Android phones are arriving with malware that owners can’t uninstall 2026-10-12 at 13:53 By Sinisa Markovic People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different […]

Low-cost Android phones are arriving with malware that owners can’t uninstall Read More »

Hidden implant in Ledger hardware wallets linked to $93M theft

Cryptocurrency, digital wallet, Don't miss, Hot stuff, Ledger, News, supply chain compromise /

Hidden implant in Ledger hardware wallets linked to $93M theft 2026-10-12 at 12:46 By Zeljka Zorz Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed […]

Hidden implant in Ledger hardware wallets linked to $93M theft Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

Strands Box: Open-source sandbox for AI agents

agentic AI, AWS, Don't miss, GitHub, Hot stuff, News, open source, software /

Strands Box: Open-source sandbox for AI agents 2026-10-12 at 08:30 By Mirko Zorz AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple […]

Strands Box: Open-source sandbox for AI agents Read More »

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring

CVE, Don't miss, Hot stuff, News, NVIDIA, vulnerability /

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring 2026-10-09 at 16:27 By Sinisa Markovic Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the monitoring service and may disrupt AI workloads, according to Lava. Lava reported the flaw to […]

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring Read More »

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks

botnet, China, CISA, critical infrastructure, cyber espionage, Don't miss, FBI, Hot stuff, News, USA /

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »

Scroll to Top