Hot stuff

Quarantined, but still on your calendar: The explosion of invite-based attacks

Check Point, Don't miss, email security, Hot stuff, News, phishing, Sublime Security /

Quarantined, but still on your calendar: The explosion of invite-based attacks 2026-10-20 at 15:18 By Zeljka Zorz There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers Check Point and Sublime Security have warned. Sublime recorded a 1,216% month-over-month increase in August 2026, and the first […]

Quarantined, but still on your calendar: The explosion of invite-based attacks Read More »

US Army is developing AI agents that could strike enemy networks and vanish without a trace

agentic AI, AI, cybersecurity, Don't miss, Hot stuff, News, USA /

US Army is developing AI agents that could strike enemy networks and vanish without a trace 2026-10-20 at 13:03 By Sinisa Markovic The US Army is looking for AI agents that can slip into an adversary’s network, find their target, copy themselves onto nearby tablets and computers, and then erase themselves before anyone notices. Over […]

US Army is developing AI agents that could strike enemy networks and vanish without a trace Read More »

ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access

backup, ConnectWise, Don't miss, Hot stuff, Huntress, Microsoft, Microsoft 365, MSP, News /

ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access 2026-10-19 at 16:58 By Zeljka Zorz American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging to the ConnectWise […]

ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access Read More »

With open-weight AI, more of the security burden falls on enterprises

AI, cyber risk, Don't miss, F5 Networks, Fujitsu, Hot stuff, Microsoft, News, NVIDIA, ProjectDiscovery /

With open-weight AI, more of the security burden falls on enterprises 2026-10-19 at 14:04 By Sinisa Markovic Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provider would otherwise handle for them, Microsoft and NVIDIA warn in a joint paper on managing the […]

With open-weight AI, more of the security burden falls on enterprises Read More »

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

cybersecurity, Don't miss, Hot stuff, Malware, News /

Fake Arch Linux AUR packages exploit typos to run malware with root privileges 2026-10-16 at 12:58 By Sinisa Markovic Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source […]

Fake Arch Linux AUR packages exploit typos to run malware with root privileges Read More »

Why Active Directory weaknesses stay open for years in teams with one or two admins

Active Directory, auditing, CXO, Don't miss, EU, Europe, Features, Government, Hot stuff, News, opinion, security auditing, strategy, tips, Windows Server /

Why Active Directory weaknesses stay open for years in teams with one or two admins 2026-10-16 at 09:00 By Mirko Zorz David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a […]

Why Active Directory weaknesses stay open for years in teams with one or two admins Read More »

The cyber talent shortage? Job postings just hit a four-year low

CISO, cybersecurity jobs, Don't miss, Features, GRC, Hot stuff, News, report, USA /

The cyber talent shortage? Job postings just hit a four-year low 2026-10-16 at 08:30 By Mirko Zorz US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job […]

The cyber talent shortage? Job postings just hit a four-year low Read More »

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CISA, Cisco, CVE, Don't miss, firewall, Hot stuff, News, Palo Alto Networks, vulnerability /

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products 2026-10-15 at 13:43 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, […]

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries

Don't miss, FBI, Hot stuff, Insider Threat, law enforcement, News, North Korea, remote working, US DoJ, USA /

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries 2026-10-14 at 16:00 By Sinisa Markovic North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued laptops running from their homes, according to the US Department […]

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries Read More »

Download: The IT and security field guide to AI adoption

Don't miss, Hot stuff, News, Tines, Whitepapers and webinars /

Download: The IT and security field guide to AI adoption 2026-10-14 at 16:00 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of […]

Download: The IT and security field guide to AI adoption Read More »

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

0-day, CISA, Defused, Don't miss, Hot stuff, Ivanti, News, security update, Volexity /

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances 2026-10-14 at 11:59 By Zeljka Zorz A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October […]

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances Read More »

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

0-day, CVE, Don't miss, Hot stuff, News, security update, SharePoint, Tenable, Trend Micro, Windows, Windows Server /

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) 2026-10-14 at 10:53 By Zeljka Zorz In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be […]

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet

data, data center, Don't miss, Hot stuff, News, Russian Federation, Ukraine /

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet 2026-10-13 at 16:15 By Sinisa Markovic Russian tech giant Yandex confirmed that drones hit three of its data centers, shutting down the facilities in Sasovo and Vladimir and knocking out part of the infrastructure in Kaluga. On October 11, Yandex Cloud […]

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet Read More »

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

CVE, Don't miss, GitLab, Hot stuff, News, vulnerability /

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) 2026-10-13 at 12:19 By Sinisa Markovic GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in […]

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) Read More »

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover

Don't miss, GitHub, Hot stuff, News, research, supply chain compromise, vulnerability disclosure /

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover 2026-10-13 at 12:00 By Mirko Zorz Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom […]

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover Read More »

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

Claroty, cyberattack, cybersecurity, Don't miss, Europe, France, hardware, Hot stuff, News, PLC, Retail /

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted 2026-10-12 at 19:07 By Zeljka Zorz European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned […]

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted Read More »

Low-cost Android phones are arriving with malware that owners can’t uninstall

Android, Bitdefender, Don't miss, Hot stuff, Malware, mobile apps, mobile security, News /

Low-cost Android phones are arriving with malware that owners can’t uninstall 2026-10-12 at 13:53 By Sinisa Markovic People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different […]

Low-cost Android phones are arriving with malware that owners can’t uninstall Read More »

Hidden implant in Ledger hardware wallets linked to $93M theft

Cryptocurrency, digital wallet, Don't miss, Hot stuff, Ledger, News, supply chain compromise /

Hidden implant in Ledger hardware wallets linked to $93M theft 2026-10-12 at 12:46 By Zeljka Zorz Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed […]

Hidden implant in Ledger hardware wallets linked to $93M theft Read More »

Scroll to Top