Hot stuff

A hardware security AI assistant that checks chips for hidden backdoors

agentic AI, AI, backdoor, cybersecurity, Don't miss, hardware, Hot stuff, News, research /

A hardware security AI assistant that checks chips for hidden backdoors 2026-07-13 at 08:00 By Sinisa Markovic Chip designers license blocks of circuitry from outside vendors and drop them into larger products. A single processor can carry components from a range of suppliers, each written by a company the buyer may never deal with directly. […]

A hardware security AI assistant that checks chips for hidden backdoors Read More »

July 2026 Patch Tuesday forecast: Is CVE tracking still practical?

CVE, Don't miss, Expert analysis, Expert corner, Hot stuff, Ivanti, Microsoft, News, Patch Tuesday /

July 2026 Patch Tuesday forecast: Is CVE tracking still practical? 2026-07-10 at 10:30 By Help Net Security I was off by a month in my forecast of record-setting CVE releases from Microsoft. In June, we saw the deluge of over 200 reported CVEs that I expected in May. There were 116 CVEs for Windows 11

July 2026 Patch Tuesday forecast: Is CVE tracking still practical? Read More »

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)

Don't miss, exploit, Hot stuff, Microsoft, Microsoft Defender, News, security update, vulnerability disclosure /

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) 2026-07-09 at 15:14 By Zeljka Zorz Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) Read More »

Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)

AI, CISA, Don't miss, enterprise, exploit, Hot stuff, News, SentinelOne, Sysdig, vulnerability /

Attackers using Langflow flaw for credential harvesting (CVE-2026-55255) 2026-07-08 at 17:03 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) is warning about yet another Langflow vulnerability (CVE-2026-55255) leveraged by attackers in the wild. The flaw was added to the agency’s Known Exploited Vulnerabilities catalog on Tuesday, July 7, nearly two weeks after

Attackers using Langflow flaw for credential harvesting (CVE-2026-55255) Read More »

Accenture acknowledges security incident following 35GB data theft claim

Accenture, data breach, Don't miss, Hot stuff, News /

Accenture acknowledges security incident following 35GB data theft claim 2026-07-08 at 14:28 By Zeljka Zorz Accenture appears to have suffered a data breach, the extent of which is currently unknown. On Monday, a threat actor going by the handle “888” posted on the cybercrime forum PwnForums, claiming to have breached the technology consulting company and

Accenture acknowledges security incident following 35GB data theft claim Read More »

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure

CISO, cyber risk, cybersecurity, digital transformation, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips /

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure 2026-07-08 at 09:00 By Mirko Zorz In this interview with Help Net Security, Miranda Ritchie, CISO at Orbia, talks about protecting industrial systems where software runs water, chemical and manufacturing processes. She explains why a cyber incident in these settings can harm people, equipment and

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure Read More »

20 open-source cybersecurity tools to keep your team ready for anything

agentic AI, AI, Application Security, containers, cybersecurity, Don't miss, Endpoint Security, Exabeam, firewall, GitHub, Hot stuff, LLMs, Microsoft, News, open source, OWASP, penetration testing, scanner, security telemetry, software, vulnerability assessment, Windows /

20 open-source cybersecurity tools to keep your team ready for anything 2026-07-08 at 08:30 By Anamarija Pogorelec AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model exposure discovery. This roundup covers recent

20 open-source cybersecurity tools to keep your team ready for anything Read More »

macOS is becoming a proving ground for AI agents

agentic AI, AI, apple, automation, Don't miss, Hot stuff, macOS, News, operating system, research /

macOS is becoming a proving ground for AI agents 2026-07-08 at 08:00 By Sinisa Markovic Somewhere right now, a Mac Mini is sitting on a shelf doing someone’s chores. Nobody’s watching it. It reads a version number out of Terminal, hops over to Safari, digs up a release year, then quietly files a reminder, the

macOS is becoming a proving ground for AI agents Read More »

How to implement a continuous offensive security testing program

Don't miss, Expert analysis, Expert corner, Hot stuff, News, Picus Security /

How to implement a continuous offensive security testing program 2026-07-08 at 07:30 By Help Net Security The hard part was never finding the exposure. It was deciding what to do about it: whether to patch, mitigate, monitor, or accept, and banking that that decision would still hold tomorrow. A penetration test answers this question for

How to implement a continuous offensive security testing program Read More »

OpenAI and Anthropic are pulling in different directions

agentic AI, AI, Anthropic, Don't miss, Features, Hot stuff, infosec jobs, News, OpenAI, report /

OpenAI and Anthropic are pulling in different directions 2026-07-08 at 07:00 By Mirko Zorz Companies are handing routine operational decisions to AI agents that plan, remember, and act on their behalf. These agents run on statistical models, and their behavior can drift across weeks and months. That drift opens a security gap outside the reach

OpenAI and Anthropic are pulling in different directions Read More »

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)

Adobe, Adobe ColdFusion, Don't miss, exploit, Hot stuff, KEVIntel, News, PoC, Resecurity, Shadowserver, vulnerability, WatchTowr /

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) 2026-07-07 at 15:03 By Zeljka Zorz CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers in the wild. Exploitation attempts were detected on July 2, through the honeypot sensors of cybersecurity threat-intelligence service KEVIntel, mere minutes after

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) Read More »

How to prioritize AI agent security by business impact

agentic AI, AI, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News /

How to prioritize AI agent security by business impact 2026-07-06 at 09:30 By Help Net Security Your CEO calls about an AI agent security incident in finance. He wants to know whether money moved, whether financial data was exposed, who owned the agent and why it had this level of access. The agent was connected

How to prioritize AI agent security by business impact Read More »

Securing the inbox: Where identity, brand and security meet

CISO, cybersecurity, DMARC, Don't miss, email security, Features, GlobalSign, Hot stuff, News, opinion, Red Sift, strategy, tips /

Securing the inbox: Where identity, brand and security meet 2026-07-06 at 09:00 By Mirko Zorz Getting a verified logo to appear next to your email has traditionally meant having to work with two separate entities. You have to work with a DMARC partner for setting up DMARC and BIMI, then use a trusted Certificate Authority

Securing the inbox: Where identity, brand and security meet Read More »

Omnigent: Open-source AI agent framework and meta-harness

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, software /

Omnigent: Open-source AI agent framework and meta-harness 2026-07-06 at 08:30 By Sinisa Markovic Plenty of developers now keep several coding agents close at hand, reaching for Claude Code on one task and Codex or Cursor on the next. Each tool arrives with its own command line, its own handling of credentials, and its own way

Omnigent: Open-source AI agent framework and meta-harness Read More »

Non-interactive SSH attacks dominate after login

authentication, bot, cybersecurity, device fingerprinting, Don't miss, honeypots, Hot stuff, LLMs, News, research, SSH, Threat Intelligence /

Non-interactive SSH attacks dominate after login 2026-07-03 at 08:30 By Sinisa Markovic Anyone who runs a server with SSH exposed to the internet sees the same pattern in the logs. A steady stream of automated scanners tries to log in, hour after hour, from addresses all over the world. The common picture of what comes

Non-interactive SSH attacks dominate after login Read More »

What a financial planner taught me about cybersecurity

BH Consulting, Brian Honan, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, security awareness /

What a financial planner taught me about cybersecurity 2026-07-01 at 09:30 By Help Net Security When I spoke at a recent cybersecurity awareness event for financial planners and tax advisors, the audience really engaged with the subject. As happens at conferences the world over, people often come up to speakers to ask follow-up questions, or

What a financial planner taught me about cybersecurity Read More »

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)

Defused, Don't miss, Hot stuff, News, Oracle, PoC, vulnerability /

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817) 2026-06-30 at 16:58 By Zeljka Zorz Exploitation attempts targeting a critical vulnerability (CVE-2026-46817) in Oracle Payments, the payment-processing module within Oracle’s E-Business Suite (EBS), have been spotted over the weekend, threat intelligence company Defused warned on Monday. The detected exploitation attempts (Source: Defused) “On 27 June 2026

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817) Read More »

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Blackpoint Cyber, CISA, credentials, data theft, Don't miss, Horizon3.ai, Hot stuff, Linux, macOS, Malware, MSP, News, remote management, SimpleHelp, vulnerability, Windows /

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) 2026-06-30 at 13:25 By Zeljka Zorz Attackers are exploiting CVE-2026-48558, a recently patched authentication bypass vulnerability in SimpleHelp RMM, to drop the novel Djinn Stealer malware on victim computers. The malware is capable of targeting Windows, macOS, and Linux systems, and “collects credentials associated with cloud

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) Read More »

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin

Android, apple, Don't miss, Features, file transfer, Google, Hot stuff, iOS, iPhone, macOS, News, Samsung, secure connectivity, vulnerability, Windows, wireless /

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin 2026-06-30 at 09:15 By Mirko Zorz Phones and laptops ship with a feature that sends files to nearby devices over the air, with no cables, accounts, or prior pairing. Apple calls its version AirDrop. Google and Samsung call theirs Quick Share.

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin Read More »

Scroll to Top