Hot stuff

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

0-day, Fortinet, Hot stuff, News, vulnerability /

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) 2026-10-02 at 11:50 By Sinisa Markovic Fortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported to be exploited in the wild, and urges customers to apply the workaround it shared until […]

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) Read More »

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

0-day, Cisco, Don't miss, exploit, Hot stuff, News /

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) 2026-10-01 at 13:18 By Zeljka Zorz For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a […]

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) Read More »

Some car apps are slipping owners’ data to big tech companies

connected cars, data collection, Don't miss, Hot stuff, News, Privacy, research /

Some car apps are slipping owners’ data to big tech companies 2026-10-01 at 12:52 By Sinisa Markovic The app that comes with your car may be sharing what it knows about you with some of the biggest tech companies. Northeastern University researchers tested 21 vehicles and 30 carmaker apps and found some sending vehicle identification […]

Some car apps are slipping owners’ data to big tech companies Read More »

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)

Don't miss, education, Europe, financial industry, Google Cloud, Government, Hot stuff, Mandiant, NetScaler, News, telecommunications, USA, WatchTowr /

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772) 2026-09-30 at 15:33 By Zeljka Zorz “Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the two recently disclosed NetScaler vulnerabilities that have been exploited as zero-days, says Mandiant CTO Charles Carmakal. Mandiant and […]

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772) Read More »

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos

AI, code analysis, Don't miss, GitHub, Hot stuff, News /

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos 2026-09-30 at 14:52 By Sinisa Markovic When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots […]

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos Read More »

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised

breach, Don't miss, Hot stuff, JFrog, News, open source, OpenInfra, vulnerability /

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised 2026-09-30 at 13:39 By Zeljka Zorz Attackers have compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe, the regional hub of the OpenInfra Foundation warned in a security notice prominently displayed on its homepage. OpenInfra Europe’s security incident notice “Anyone who downloaded or installed artifacts […]

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised Read More »

EU Cyber Resilience Act requirements for containers and Kubernetes

cloud security, Compliance, containers, Don't miss, Hot stuff, Kubernetes, News, opinion /

EU Cyber Resilience Act requirements for containers and Kubernetes 2026-09-30 at 08:00 By Help Net Security Starting in full force on Dec. 10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations will begin on Sept. 11, 2026, […]

EU Cyber Resilience Act requirements for containers and Kubernetes Read More »

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

Censys, CERT-EU, Don't miss, GreyNoise, Hot stuff, Lupovis, NetScaler, News, PoC, vulnerability, WatchTowr /

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) 2026-09-29 at 17:59 By Zeljka Zorz The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit […]

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) Read More »

Malicious Custom GPT on chatgpt.com lures users into installing a RAT

ChatGPT, Don't miss, Hot stuff, Huntress, malvertising, Malware, News, Remote Access Trojan /

Malicious Custom GPT on chatgpt.com lures users into installing a RAT 2026-09-29 at 14:55 By Zeljka Zorz Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named “Plus 5.6,” created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan […]

Malicious Custom GPT on chatgpt.com lures users into installing a RAT Read More »

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day

cybersecurity, Don't miss, extortion, FBI, Hot stuff, News, Oracle /

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day 2026-09-28 at 16:56 By Zeljka Zorz The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic […]

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day Read More »

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

AI, Don't miss, Hot stuff, Microsoft, News, vulnerability disclosure /

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data 2026-09-28 at 16:50 By Sinisa Markovic A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found […]

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data Read More »

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

CISA, Citrix, Don't miss, Hot stuff, NCSC-NL, NetScaler, News, Tenable /

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) 2026-09-28 at 12:51 By Zeljka Zorz Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped […]

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) Read More »

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts

AT&T, cybercrime, Don't miss, Hot stuff, law enforcement, News, Snowflake, US DoJ, USA /

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts 2026-09-28 at 11:45 By Sinisa Markovic A former U.S. Army soldier who was part of a group that stole data from telecom companies, including AT&T, has been sentenced to 70 months in prison. Cameron John Wagenius, 22, was part of the group that […]

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts Read More »

If you do one security check this quarter, make it agent memory

agentic AI, CISO, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]

If you do one security check this quarter, make it agent memory Read More »

Fake payroll desktop apps hand attackers a route to company paychecks

Allure Security, cybercrime, Don't miss, Hot stuff, Malware, News /

Fake payroll desktop apps hand attackers a route to company paychecks 2026-09-25 at 10:52 By Sinisa Markovic An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone who runs the installer gets a copy of ScreenConnect, a legitimate remote access […]

Fake payroll desktop apps hand attackers a route to company paychecks Read More »

Stop watching what AI agents say and start watching what they do

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, security telemetry, strategy, tips /

Stop watching what AI agents say and start watching what they do 2026-09-25 at 08:30 By Mirko Zorz In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent […]

Stop watching what AI agents say and start watching what they do Read More »

OpenAI agent hacking spree widens to Australia, targeting government website

agentic AI, Australia, Don't miss, Government, Hot stuff, intrusion detection, News, OpenAI, Transluce, USA /

OpenAI agent hacking spree widens to Australia, targeting government website 2026-09-24 at 15:53 By Zeljka Zorz Before the Hugging Face and RubyGems hacks, autonomous OpenAI agents attempted to hack into three other websites, including an Australian government public health website, independent research lab Transluce revealed on Wednesday. “Notably, the tasks the agents were trying to […]

OpenAI agent hacking spree widens to Australia, targeting government website Read More »

New Android malware RemControl steals banking PINs and blocks removal attempts

Android, cybercrime, Don't miss, financial industry, Group-IB, Hot stuff, Malware, mobile security, News, online banking /

New Android malware RemControl steals banking PINs and blocks removal attempts 2026-09-24 at 12:40 By Sinisa Markovic A new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than […]

New Android malware RemControl steals banking PINs and blocks removal attempts Read More »

What to do first when you get 90 days to secure AI agent data

agentic AI, cybersecurity, data, Don't miss, Features, Hot stuff, News, opinion, strategy, tips /

What to do first when you get 90 days to secure AI agent data 2026-09-24 at 08:00 By Mirko Zorz In this interview with Help Net Security, Kelly Herrell, CEO at Nol8, explains where AI agents create exposure inside organizations. The first thing to examine is the data path: what an agent can reach, what […]

What to do first when you get 90 days to secure AI agent data Read More »

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

0-day, access management, Arista Networks, Check Point, CISA, CVE, Don't miss, F5 Networks, firewall, Hot stuff, MSP, News, SMBs /

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances 2026-09-23 at 13:22 By Zeljka Zorz Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The company also confirmed that a pre-authentication remote code […]

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances Read More »

Scroll to Top