Hot stuff

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034)

CISA, Don't miss, Fortinet, Hot stuff, NCSC-NL, News, Trend Micro, vulnerability /

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034) 2025-11-19 at 13:47 By Zeljka Zorz Attackers are actively exploiting another FortiWeb vulnerability (CVE-2025-58034) that Fortinet fixed without making its existence public at the time. About CVE-2025-58034 CVE-2025-58034 is an OS Command Injection flaw caused by improper neutralization of special elements. It allows authenticated attackers to execute unauthorized […]

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034) Read More »

The long conversations that reveal how scammers work

cybercrime, cybersecurity, Don't miss, fraud, Hot stuff, LLMs, messaging, News, research, scams, social engineering, WhatsApp /

The long conversations that reveal how scammers work 2025-11-19 at 09:08 By Sinisa Markovic Online scammers often take weeks to build trust before making a move, which makes their work hard to study. A research team from UC San Diego built a system that does the patient work of talking to scammers at scale, and […]

The long conversations that reveal how scammers work Read More »

Internet slowly recovers after far-reaching Cloudflare outage

Cloudflare, critical infrastructure, Don't miss, Hot stuff, News /

Internet slowly recovers after far-reaching Cloudflare outage 2025-11-18 at 17:16 By Zeljka Zorz A currently undisclosed issue has crippled Cloudflare’s network and has rendered a large swathe of internet’s most popular sites and services temporily inaccessible today. Some of the sites and services affected by the Cloudflare outage (Source: Down Detector) What happened? Cloudflare is […]

Internet slowly recovers after far-reaching Cloudflare outage Read More »

Google patches yet another exploited Chrome zero-day (CVE-2025-13223)

0-day, Chrome, Don't miss, Hot stuff, News, security update, Vivaldi /

Google patches yet another exploited Chrome zero-day (CVE-2025-13223) 2025-11-18 at 14:13 By Zeljka Zorz Google has shipped an emergency fix for a Chrome vulnerability (CVE-2025-13223) reported as actively exploited in the wild by its Threat Analysis Group (TAG). About CVE-2025-13223 CVE-2025-13223 is a type confusion vulnerability in V8, the JavaScript and WebAssembly engine used by […]

Google patches yet another exploited Chrome zero-day (CVE-2025-13223) Read More »

What security pros should know about insurance coverage for AI chatbot wiretapping claims

Artificial Intelligence, Don't miss, Features, Hot stuff, law, law firms, News, Privacy, strategy, tips /

What security pros should know about insurance coverage for AI chatbot wiretapping claims 2025-11-18 at 08:44 By Mirko Zorz AI-powered chatbots raise profound concerns under federal and state wiretapping and eavesdropping statutes that is being tested by recent litigation, creating greater exposure to the companies and developers that use this technology. Security professionals that integrate […]

What security pros should know about insurance coverage for AI chatbot wiretapping claims Read More »

How attackers use patience to push past AI guardrails

Artificial Intelligence, Cisco, CISO, Don't miss, Hot stuff, News, prompt injection, research /

How attackers use patience to push past AI guardrails 2025-11-18 at 08:44 By Anamarija Pogorelec Most CISOs already assume that prompt injection is a known risk. What may come as a surprise is how quickly those risks grow once an attacker is allowed to stay in the conversation. A new study from Cisco AI Defense […]

How attackers use patience to push past AI guardrails Read More »

Logitech confirms data breach

data breach, Don't miss, Hot stuff, Logitech, News /

Logitech confirms data breach 2025-11-18 at 00:20 By Zeljka Zorz Logitech, the Swiss multinational electronics and technology company best known for marketing computer peripherals and hardware, has suffered a data breach. “While the investigation is ongoing, at this time Logitech believes that the unauthorized third party used a zero-day vulnerability in a third-party software platform […]

Logitech confirms data breach Read More »

Strix: Open-source AI agents for penetration testing

Don't miss, GitHub, Hot stuff, News, open source, penetration testing, software /

Strix: Open-source AI agents for penetration testing 2025-11-17 at 16:32 By Sinisa Markovic Security teams know that application flaws tend to show up at the worst time. Strix presents itself as an open source way to catch them earlier by using autonomous agents that behave like human attackers. These agents run code, explore an application, […]

Strix: Open-source AI agents for penetration testing Read More »

The tech that turns supply chains from brittle to unbreakable

cyber risk, cybersecurity, Don't miss, Features, Hot stuff, monitoring, News, resilience, security ROI, strategy, supply chain, Tecsys /

The tech that turns supply chains from brittle to unbreakable 2025-11-17 at 16:32 By Mirko Zorz In this Help Net Security interview, Sev Kelian, CISO and VP of Security at Tecsys, discusses how organizations can strengthen supply chain resilience through a more unified and forward-looking strategy. Kelian also shares how new technologies and a blended […]

The tech that turns supply chains from brittle to unbreakable Read More »

Five men admit helping North Korean IT workers infiltrate US companies

Cryptocurrency, Don't miss, fraud, Hot stuff, News, North Korea, theft, US DoJ /

Five men admit helping North Korean IT workers infiltrate US companies 2025-11-17 at 14:59 By Zeljka Zorz US federal prosecutors have secured guilty pleas from five men who helped North Korean IT workers get hired by companies in the United States. This group of domestic facilitators helped a sanctioned government move money, slip past hiring […]

Five men admit helping North Korean IT workers infiltrate US companies Read More »

Chinese cyber spies used Claude AI to automate 90% of their attack campaign, Anthropic claims

agentic AI, Anthropic, Artificial Intelligence, automation, cyber espionage, Don't miss, Hot stuff, LLMs, News /

Chinese cyber spies used Claude AI to automate 90% of their attack campaign, Anthropic claims 2025-11-14 at 17:03 By Zeljka Zorz Anthropic threat researchers believe that they’ve uncovered and disrupted the first documented case of a cyberattack executed with the help of its agentic AI and minimal human intervention. “The threat actor manipulated [Anthropic’s large […]

Chinese cyber spies used Claude AI to automate 90% of their attack campaign, Anthropic claims Read More »

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn

Defused, Don't miss, Fortinet, Hot stuff, News, PoC, Rapid7, vulnerability, WatchTowr, web application security /

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn 2025-11-14 at 14:10 By Zeljka Zorz A suspected (but currently unidentified) zero-day vulnerability in Fortinet FortiWeb is being exploited by unauthenticated attackers to create new admin accounts on vulnerable, internet-facing devices. Whether intentionally or accidentally, the vulnerability (or this specific path for triggering it) has […]

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn Read More »

Why your security strategy is failing before it even starts

CISO, Compliance, cyber resilience, cybersecurity, Don't miss, Features, Hot stuff, News, Ornua, Risk Management, strategy, threats /

Why your security strategy is failing before it even starts 2025-11-14 at 09:25 By Mirko Zorz In this Help Net Security interview, Adnan Ahmed, CISO at Ornua, discusses how organizations can build a cybersecurity strategy that aligns with business goals. He explains why many companies stumble by focusing on technology before understanding risk and shares […]

Why your security strategy is failing before it even starts Read More »

Fake spam filter alerts are hitting inboxes

Don't miss, Hot stuff, Malwarebytes, News, Palo Alto Networks, phishing /

Fake spam filter alerts are hitting inboxes 2025-11-13 at 19:02 By Zeljka Zorz A new phishing campaign is attempting to trick users into believing they’ve missed important emails, security researchers are warning. The emails The bogus email alerts look like they are coming from the recipient’s email domain, and falsely claim that due to a […]

Fake spam filter alerts are hitting inboxes Read More »

“Patched” but still exposed: US federal agencies must remediate Cisco flaws (again)

CISA, Cisco, Don't miss, Government, Hot stuff, News, patching, vulnerability /

“Patched” but still exposed: US federal agencies must remediate Cisco flaws (again) 2025-11-13 at 17:14 By Zeljka Zorz CISA has ordered US federal agencies to fully address two actively exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362) in Cisco Adaptive Security Appliances (ASA) and Firepower firewalls. “In CISA’s analysis of agency-reported data, CISA has identified devices marked as ‘patched’ […]

“Patched” but still exposed: US federal agencies must remediate Cisco flaws (again) Read More »

Rhadamanthys infostealer operation disrupted by law enforcement

Don't miss, Europol, Hot stuff, law enforcement, Malware, News, Shadowserver /

Rhadamanthys infostealer operation disrupted by law enforcement 2025-11-13 at 14:05 By Zeljka Zorz The rumors were true: Operation Endgame, a joint effort between law enforcement and judicial authorities of several European countries, Australia, Canada, the UK and the US, has disrupted the infrastructure supporting the operation of the Rhadamanthys infostealer. “Between 10 and 14 November […]

Rhadamanthys infostealer operation disrupted by law enforcement Read More »

Healthcare security is broken because its systems can’t talk to each other

Compliance, cybersecurity, Don't miss, Features, framework, healthcare, Hot stuff, News, Prime Therapeutics, security controls, strategy, tips /

Healthcare security is broken because its systems can’t talk to each other 2025-11-13 at 09:39 By Mirko Zorz In this Help Net Security interview, Cameron Kracke, CISO at Prime Therapeutics, discusses how the healthcare ecosystem can achieve cohesive security visibility. With hospitals, clinics, telehealth, and cloud partners all in the mix, maintaining visibility remains a […]

Healthcare security is broken because its systems can’t talk to each other Read More »

UK’s new Cyber Security and Resilience Bill targets weak links in critical services

critical infrastructure, cyber resilience, data center, Don't miss, energy sector, healthcare, Hot stuff, legislation, MSP, News, public sector, transportation, UK /

UK’s new Cyber Security and Resilience Bill targets weak links in critical services 2025-11-12 at 18:17 By Zeljka Zorz The UK government has introduced the Cyber Security and Resilience Bill, a major piece of legislation designed to boost the country’s protection against cyber threats. The new law aims to strengthen the digital defenses of essential […]

UK’s new Cyber Security and Resilience Bill targets weak links in critical services Read More »

Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215)

Don't miss, Hot stuff, Immersive, Ivanti, Microsoft, MS Office, News, Patch Tuesday, Rapid7, security update, Trend Micro, Windows /

Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215) 2025-11-12 at 14:44 By Zeljka Zorz Microsoft has delivered a rather light load of patches for November 2025 Patch Tuesday: some 60+ vulnerabilities have received a fix, among them an actively exploited Windows Kernel flaw (CVE-2025-62215). CVE-2025-62215 CVE-2025-62215 is a memory corruption issue that stems […]

Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215) Read More »

Shadow AI risk: Navigating the growing threat of ungoverned AI adoption

Delinea, Don't miss, Hot stuff, News, report /

Shadow AI risk: Navigating the growing threat of ungoverned AI adoption 2025-11-12 at 10:44 By Help Net Security AI is transforming how businesses operate, but it’s also creating new, often hidden risks. As employees and business units eagerly embrace and experiment with AI solutions, many organizations are losing control over where and how AI is […]

Shadow AI risk: Navigating the growing threat of ungoverned AI adoption Read More »

Scroll to Top