DreamHost incident triggers password resets, locks customers out of email and FTP accounts 2026-10-27 at 12:19 By Sinisa Markovic DreamHost has brought its File Manager back online after an incident that disrupted several of its services, though some of its customers still can’t get into their email or FTP accounts until someone sets a new […]
Several AI security market categories are headed for bigger platforms 2026-10-27 at 08:30 By Mirko Zorz In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as […]
Several AI security market categories are headed for bigger platforms Read More »
AI coding agents fall for malicious instructions planted in the Downloads folder 2026-10-26 at 13:26 By Sinisa Markovic A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login token when they’re opened in that folder, Forever […]
AI coding agents fall for malicious instructions planted in the Downloads folder Read More »
Fortinet patches critical FortiOS flaws found with AI help 2026-10-26 at 13:22 By Zeljka Zorz Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The vulnerabilities were uncovered with the help of AI models […]
Fortinet patches critical FortiOS flaws found with AI help Read More »
Microsoft 365 accounts compromised at 79 organizations, no passwords needed 2026-10-23 at 14:45 By Sinisa Markovic An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers […]
Microsoft 365 accounts compromised at 79 organizations, no passwords needed Read More »
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense 2026-10-23 at 11:21 By Sinisa Markovic An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction […]
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense Read More »
Drone program compliance: What a CTO says most agencies get wrong 2026-10-23 at 08:30 By Mirko Zorz In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody […]
Drone program compliance: What a CTO says most agencies get wrong Read More »
LiteLLM hit by second supply chain attack this year, users urged to rotate credentials 2026-10-22 at 16:10 By Sinisa Markovic A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got […]
LiteLLM hit by second supply chain attack this year, users urged to rotate credentials Read More »
OpenAI’s coding agents talked themselves out of being monitored 2026-10-22 at 15:47 By Zeljka Zorz Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such thing. OpenAI disclosed both episodes in a misalignment report released […]
OpenAI’s coding agents talked themselves out of being monitored Read More »
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 2026-10-22 at 15:03 By Mirko Zorz Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP […]
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 Read More »
What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]
What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »
Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]
AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. […]
AI agent permissions are outrunning security Read More »
PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and […]
PHP2Shell: Critical PHP vulnerabilities patched, update now! Read More »
Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June 2026-10-21 at 14:13 By Sinisa Markovic Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the […]
Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June Read More »
Info-stealing malware slipped into OVHcloud CLI releases on GitHub 2026-10-21 at 11:59 By Sinisa Markovic OVHcloud, the French cloud computing and web hosting company, alerted customers that a hacker tampered with its open-source command-line interface (CLI) tool to spread information-stealing malware. OVHcloud CEO Octave Klaba disclosed the incident on X, warning users who downloaded the […]
Info-stealing malware slipped into OVHcloud CLI releases on GitHub Read More »
Privacy-preserving AI can protect your heart data, the bill is the problem 2026-10-21 at 10:02 By Mirko Zorz A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care […]
Privacy-preserving AI can protect your heart data, the bill is the problem Read More »
DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]
DevGuard: Open-source vulnerability management for the software supply chain Read More »
AOMEI Backupper servers hijacked for minutes at a time to push backdoor 2026-10-20 at 18:14 By Zeljka Zorz An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. Between April and July 2026, attackers repeatedly altered configuration files on AOMEI’s own […]
AOMEI Backupper servers hijacked for minutes at a time to push backdoor Read More »
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign 2026-10-20 at 15:23 By Sinisa Markovic Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its security advisory on 15 October 2026, giving the […]
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign Read More »