Hot stuff

Linux users targeted by crypto thieves via hijacked apps on Snap Store

Canonical, Cryptocurrency, digital wallet, Don't miss, Hot stuff, Linux, Malware, malware detection, News, Snap Store, software protection /

Linux users targeted by crypto thieves via hijacked apps on Snap Store 2026-01-21 at 12:17 By Zeljka Zorz Cryptocurrency thieves have found a new way to turn trusted software packages for Linux on the Snap Store into crypto-stealing malware, Ubuntu contributor and former Canonical developer Alan Pope warned. SnapScope web app identifies malicious snaps (Source: […]

Linux users targeted by crypto thieves via hijacked apps on Snap Store Read More »

The 2026 State of Pentesting: Why delivery and follow-through matter more than ever

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, penetration testing, PlexTrac, remediation, vulnerability management /

The 2026 State of Pentesting: Why delivery and follow-through matter more than ever 2026-01-21 at 07:34 By Help Net Security Penetration testing has evolved significantly over the past several years. While uncovering exploitable vulnerabilities remains the core goal, the real differentiator today is how findings are handled after the testing concludes. The method of reporting, […]

The 2026 State of Pentesting: Why delivery and follow-through matter more than ever Read More »

Initial access broker pleads guilty to selling access to 50 corporate networks

CloudSEK, court, cybercrime, cybercriminals, Don't miss, FBI, Hot stuff, initial access broker, News /

Initial access broker pleads guilty to selling access to 50 corporate networks 2026-01-20 at 15:43 By Zeljka Zorz A 40-year-old Jordanian man has admitted to selling unauthorized access to computer networks of at least 50 companies, the US Attorney’s Office of the District of New Jersey has announced. Feras Khalil Ahmad Albashiti has pleaded guilty […]

Initial access broker pleads guilty to selling access to 50 corporate networks Read More »

Confusion and fear send people to Reddit for cybersecurity advice

Don't miss, Europol, Features, Google, Hot stuff, Incogni, Malwarebytes, News, Privacy, research, scams /

Confusion and fear send people to Reddit for cybersecurity advice 2026-01-20 at 09:00 By Sinisa Markovic A strange charge appears on a bank account. An email claims a package is on the way. A social media account stops accepting a password that worked yesterday. When these moments hit, many people do the same thing. They […]

Confusion and fear send people to Reddit for cybersecurity advice Read More »

Fake browser crash alerts turn Chrome extension into enterprise backdoor

browser, Chrome, Chrome Web Store, Don't miss, enterprise, extension, Hot stuff, Huntress, Microsoft Edge, News, Remote Access Trojan, social engineering, Socket /

Fake browser crash alerts turn Chrome extension into enterprise backdoor 2026-01-19 at 17:21 By Zeljka Zorz Browser extensions are a high-risk attack vector for enterprises, allowing threat actors to bypass traditional security controls and gain a foothold on corporate endpoints. Case in point: A recently identified malicious extension called NexShield proves that a single user […]

Fake browser crash alerts turn Chrome extension into enterprise backdoor Read More »

Global tensions are pushing cyber activity toward dangerous territory

critical infrastructure, cybersecurity, disinformation, Don't miss, Features, Hot stuff, News, strategy, World Economic Forum /

Global tensions are pushing cyber activity toward dangerous territory 2026-01-19 at 09:48 By Sinisa Markovic Cybersecurity is inseparable from geopolitics. Ongoing conflicts, sanctions, trade wars, geoeconomic rivalry, and technological competition have pushed state competition into cyberspace. States use cyber operations to exert pressure on rivals, enabling disruption without resorting to conventional weapons. Infrastructure vulnerabilities in […]

Global tensions are pushing cyber activity toward dangerous territory Read More »

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)

APT, backdoor, China, Cisco, cyber espionage, Don't miss, email security, enterprise, Hot stuff, News /

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393) 2026-01-16 at 17:05 By Zeljka Zorz Cisco has finally shipped security updates for its Email Security Gateway and Secure Email and Web Manager devices, which fix CVE-2025-20393, a vulnerability in the devices’ AsyncOS that has been exploited as a zero-day by suspected Chinese attackers since at […]

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393) Read More »

Sensitive data of Eurail, Interrail travelers compromised in data breach

data breach, Don't miss, EU, Europe, Hot stuff, News, transportation /

Sensitive data of Eurail, Interrail travelers compromised in data breach 2026-01-15 at 17:04 By Zeljka Zorz A data breach at the Netherlands-based company that sells Eurail (Interrail) train passes resulted in the compromise of personal and sensitive information belonging to an as-yet unknown number of travelers. What data was accessed? Eurail B.V. operates on behalf […]

Sensitive data of Eurail, Interrail travelers compromised in data breach Read More »

PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155)

Don't miss, Fortinet, Horizon3.ai, Hot stuff, News, PoC, SIEM, Tenable, vulnerability /

PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155) 2026-01-15 at 15:27 By Zeljka Zorz A critical vulnerability (CVE-2025-64155) in Fortinet’s FortiSIEM security platform has now been accompanied by publicly released proof-of-concept (PoC) exploit code, raising the urgency for organizations to patch immediately. About CVE-2025-64155 CVE-2025-64155 may allow unauthenticated, remote attackers to execute unauthorized code or […]

PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155) Read More »

LinkedIn wants to make verification a portable trust signal

cybersecurity, Don't miss, Features, generative AI, Hot stuff, identity verification, LinkedIn, News, scams, social media /

LinkedIn wants to make verification a portable trust signal 2026-01-15 at 08:34 By Mirko Zorz In this Help Net Security interview, Oscar Rodriguez, VP Trust Product at LinkedIn, discusses how verification is becoming a portable trust signal across the internet. He explains how LinkedIn is extending professional identity beyond its platform to address rising AI-driven […]

LinkedIn wants to make verification a portable trust signal Read More »

Webinar: Beyond the Quadrant: An Analyst’s Guide to Evaluating Email Security in 2026

Abnormal AI, Don't miss, Hot stuff, News, Whitepapers and webinars /

Webinar: Beyond the Quadrant: An Analyst’s Guide to Evaluating Email Security in 2026 2026-01-14 at 16:03 By Help Net Security Join former Gartner analyst Ravisha Chugh and Abnormal’s Director of Product Marketing, Lane Billings, on January 20th for an exclusive insider look at how email security vendors will be evaluated in 2026. Backed by years […]

Webinar: Beyond the Quadrant: An Analyst’s Guide to Evaluating Email Security in 2026 Read More »

CISO Assistant: Open-source cybersecurity management and GRC

CISO, Compliance, cybersecurity, DevSecOps, Don't miss, framework, GitHub, GRC, Hot stuff, News, open source, Risk Management, software, strategy /

CISO Assistant: Open-source cybersecurity management and GRC 2026-01-14 at 13:25 By Mirko Zorz CISO Assistant is an open-source governance, risk, and compliance (GRC) platform designed to help security teams document risks, controls, and framework alignment in a structured system. The community edition is maintained as a self-hosted tool for organizations that want direct access to […]

CISO Assistant: Open-source cybersecurity management and GRC Read More »

Firmware scanning time, cost, and where teams run EMBA

cybersecurity, Don't miss, Features, firmware, hardware, Hot stuff, Internet of Things, News, open source, research, scanning, software /

Firmware scanning time, cost, and where teams run EMBA 2026-01-14 at 13:25 By Mirko Zorz Security teams that deal with connected devices often end up running long firmware scans overnight, checking progress in the morning, and trying to explain to colleagues why a single image consumed a workday of compute time. That routine sets the […]

Firmware scanning time, cost, and where teams run EMBA Read More »

Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience

Artificial Intelligence, backup, cybersecurity, Don't miss, Encryption, Features, Hot stuff, Incident Response, messaging, News, Rakuten Viber, security controls, social engineering /

Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience 2026-01-13 at 09:01 By Mirko Zorz In this Help Net Security interview, Liad Shnell, CISO and CTO at Rakuten Viber, discusses how messaging platforms have become critical infrastructure during crises and conflicts. He explains how it influences cybersecurity priorities, from encryption and abuse prevention […]

Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience Read More »

Teaching cybersecurity by letting students break things

cybersecurity, Don't miss, Features, Hot stuff, News, online gaming, rersearch, skill development, strategy /

Teaching cybersecurity by letting students break things 2026-01-13 at 09:01 By Sinisa Markovic Cybersecurity students show higher engagement when the work feels tangible. A new study from Airbus Cybersecurity and Dauphine University describes what happens when courses move beyond lectures and place students inside structured hacking scenarios, social engineering exercises, and competitive games. From theory […]

Teaching cybersecurity by letting students break things Read More »

There was no data breach, Instagram says

dark web, data breach, Data leak, Don't miss, Hot stuff, Instagram, Malwarebytes, Meta, News /

There was no data breach, Instagram says 2026-01-12 at 13:20 By Zeljka Zorz News of a possible Instagram data breach spread over the weekend after Malwarebytes reported that cybercriminals had stolen sensitive information from 17.5 million Instagram accounts, potentially leading to a surge in password reset requests. Users have been complaining last week about receiving […]

There was no data breach, Instagram says Read More »

Rethinking OT security for project heavy shipyards

access control, access management, cyber resilience, cybersecurity, Damen, Don't miss, Features, Hot stuff, maritime industry, News, threat /

Rethinking OT security for project heavy shipyards 2026-01-12 at 09:09 By Mirko Zorz In this Help Net Security interview, Hans Quivooij, CISO at Damen Shipyards Group, discusses securing OT and ICS in the shipyard. He outlines how project-based operations, rotating contractors, and temporary systems expand the threat surface and complicate access control. Quivooij also covers […]

Rethinking OT security for project heavy shipyards Read More »

pfSense: Open-source firewall and routing platform

cybersecurity, Don't miss, GitHub, Hot stuff, network, News, open source, software /

pfSense: Open-source firewall and routing platform 2026-01-12 at 08:33 By Sinisa Markovic Firewalls, VPN access, and traffic rules need steady attention, often with limited budgets and staff. In that context, the open source pfSense Community Edition (CE) continues to show up in production environments, supported by a long-standing user community. pfSense CE is the free, […]

pfSense: Open-source firewall and routing platform Read More »

What security teams can learn from torrent metadata

cybersecurity, data analysis, Don't miss, Features, Hot stuff, network analysis, News, research, Threat Intelligence, torrents /

What security teams can learn from torrent metadata 2026-01-12 at 08:10 By Mirko Zorz Security teams often spend time sorting through logs and alerts that point to activity happening outside corporate networks. Torrent traffic shows up in investigations tied to policy violations, insider risk, and criminal activity. A new research paper looks at that same […]

What security teams can learn from torrent metadata Read More »

January 2026 Patch Tuesday forecast: And so it continues

Adobe, apple, cybersecurity, Don't miss, Expert analysis, Expert corner, Google, Hot stuff, Ivanti, Microsoft, Mozilla, News, Patch Tuesday /

January 2026 Patch Tuesday forecast: And so it continues 2026-01-09 at 11:26 By Help Net Security Welcome to a new year of my Patch Tuesday forecast blog where I provide a summary of Microsoft and other vendor’s security patch activity (and reported issues) for the month, talk about some of the latest trends, processes, and […]

January 2026 Patch Tuesday forecast: And so it continues Read More »

Scroll to Top