Hot stuff

Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)

Arctic Wolf Networks, Don't miss, exploit, Government, GreyNoise, Hot stuff, News, SMBs, Veeam Software, Zyxel /

Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273) 2026-09-22 at 13:42 By Zeljka Zorz A Chinese-speaking threat actor has exploited a vulnerability (CVE-2026-7273) in unpatched ZyXEL GS1900 Smart Managed Switches and has exfiltrated sensitive data from 996 devices across 48 countries, GreyNoise reported on Monday. The affected switches are predominantly located in Italy, the […]

Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273) Read More »

Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions

AI, Don't miss, fraud, Hot stuff, Malwarebytes, News, scams /

Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions 2026-09-22 at 11:54 By Sinisa Markovic Scammers are using a $249 website toolkit to sell unverified AI subscriptions worth up to $2,000 a year, and a genuine Google sign-in screen is what makes the sites convincing. Malwarebytes found more than 100 websites built this […]

Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions Read More »

Passwork NIS2 efficiency guide: Save your team hours before the 2026 audit

access control, auditing, Compliance, Don't miss, Hot stuff, News, Passwork /

Passwork NIS2 efficiency guide: Save your team hours before the 2026 audit 2026-09-22 at 08:00 By Help Net Security By the second half of 2026, national competent authorities across the EU are actively reviewing NIS2 compliance documentation. Under Article 20(1) of the directive, senior management at essential and important entities can be held personally liable […]

Passwork NIS2 efficiency guide: Save your team hours before the 2026 audit Read More »

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files

APT, attack tools, backdoor, cybersecurity, Don't miss, Hot stuff, Malware, News, PowerShell, research, Securonix, Threat Intelligence, Windows /

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files 2026-09-21 at 17:00 By Mirko Zorz Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi […]

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files Read More »

Hackers exploit Gyazo server flaw to steal 23.6 million user records

breach, cybercrime, data breach, Don't miss, Hot stuff, News /

Hackers exploit Gyazo server flaw to steal 23.6 million user records 2026-09-21 at 11:57 By Sinisa Markovic Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a vulnerability in its image upload server, stealing approximately 23.62 million user records and metadata tied to hundreds of millions […]

Hackers exploit Gyazo server flaw to steal 23.6 million user records Read More »

Bots with good manners are better at fooling people on social media

bot, Don't miss, Hot stuff, News, social media, Study, Surfshark /

Bots with good manners are better at fooling people on social media 2026-09-18 at 13:15 By Sinisa Markovic Most people can’t tell a bot from a human online, and the bots most likely to fool them are the polite ones, according to a new Surfshark study. The company analyzed 1,722 participants worldwide, testing their ability […]

Bots with good manners are better at fooling people on social media Read More »

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

agentic AI, AI, Claude Code, Don't miss, GitHub, Hot stuff, News, vulnerability /

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched 2026-09-18 at 11:49 By Sinisa Markovic Four major AI coding agents, Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an attacker the same reach into a company’s systems and data as the […]

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched Read More »

Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460)

access control, Cisco, Don't miss, enterprise, exploit, Hot stuff, identity verification, News /

Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460) 2026-09-17 at 13:24 By Zeljka Zorz Two days after it warned customers about an actively exploited email gateway zero-day, Cisco confirmed one more flaw is being targeted: CVE-2026-76460, an authentication bypass bug in an API of Cisco Identity Services Engine (ISE). About CVE-2026-76460 Cisco ISE is […]

Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460) Read More »

Scammers leave AI fingerprints all over fake antivirus renewal page

AI, cybercrime, Don't miss, fraud, Hot stuff, Malwarebytes, News, scams /

Scammers leave AI fingerprints all over fake antivirus renewal page 2026-09-17 at 13:10 By Sinisa Markovic AI appears to be helping scammers with little web development skill build convincing fake antivirus-renewal pages, Malwarebytes found. The researchers came across a scam page impersonating Avast, aimed at users in Belgium, that was more polished than most sites […]

Scammers leave AI fingerprints all over fake antivirus renewal page Read More »

The AI security question leaders should be asking instead

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Gremlin, Hot stuff, News, Risk Management, strategy, tips /

The AI security question leaders should be asking instead 2026-09-17 at 08:30 By Mirko Zorz In this Help Net Security interview, Frederic Bull, Security Officer at Gremlin, talks about what AI means for security teams. The conversation covers why asking what data a model was trained on is only part of the picture, and why […]

The AI security question leaders should be asking instead Read More »

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

Don't miss, exploit, Hot stuff, JFrog, macOS, News, PoC, virtualization /

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894) 2026-09-16 at 15:36 By Zeljka Zorz A newly disclosed vulnerability in Parallels Desktop, tracked as CVE-2026-90894 and dubbed “ParaShells,” can allow any local user on a Mac to gain root privileges on the host system. ParaShells PoC in action (Source: JFrog) The danger […]

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894) Read More »

What happens when AI agent governance is missing at scale

agentic AI, automation, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

What happens when AI agent governance is missing at scale 2026-09-16 at 09:00 By Mirko Zorz In this interview with Help Net Security, Gourab Basu, Global Head of Engineering at meshIQ, discusses governance in AI agent systems. He argues that instructions written into a prompt are not enough to control what an agent does, since […]

What happens when AI agent governance is missing at scale Read More »

The modern attack chain: Rethinking Google Workspace security in the age of AI

AI, attack, cybersecurity, Don't miss, Google Workspace, Hot stuff, Material Security, News, opinion /

The modern attack chain: Rethinking Google Workspace security in the age of AI 2026-09-16 at 08:00 By Help Net Security Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I keep coming back to the same […]

The modern attack chain: Rethinking Google Workspace security in the age of AI Read More »

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

0-day, Cisco, Don't miss, email security, enterprise, Hot stuff, News, SMBs /

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) 2026-09-15 at 14:09 By Zeljka Zorz Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed on Monday. The vendor’s Product Security Incident Response Team became aware of active exploitation of this vulnerability in September 2025, and has shared […]

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) Read More »

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz

cybercrime, Don't miss, Hot stuff, Hudson Rock, Malware, News, social engineering /

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz 2026-09-15 at 13:10 By Sinisa Markovic Attackers compromised the verified official HBO Max Reddit account, u/hbomax, and used its trusted advertising status to launch a ClickFix campaign targeting macOS and Windows devices with information-stealing malware. Screenshot of the fraudulent ad (Source: Alex Cutts) ClickFix has […]

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz Read More »

What we know about the Revolut data breach so far

cybercrime, data breach, Don't miss, EU, Hot stuff, News, Privacy, Revolut /

What we know about the Revolut data breach so far 2026-09-14 at 10:02 By Mirko Zorz Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. The bank confirmed the incident on Saturday, September 12. The London-based fintech told TechCrunch that a limited number of customers […]

What we know about the Revolut data breach so far Read More »

Turn it off and on again, but for critical infrastructure

agentic AI, critical infrastructure, cybersecurity, Don't miss, Hot stuff, ICS/SCADA, News, research /

Turn it off and on again, but for critical infrastructure 2026-09-14 at 09:00 By Anamarija Pogorelec Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used the captured traffic to train a defense agent that decides on its […]

Turn it off and on again, but for critical infrastructure Read More »

IDScan confirms breach after 153 million driver’s licenses leak on dark web

breach, cybercrime, data breach, Data leak, Don't miss, Hot stuff, News /

IDScan confirms breach after 153 million driver’s licenses leak on dark web 2026-09-11 at 11:39 By Sinisa Markovic Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed hackers accessed customer data stored on its cloud platform. The Louisiana-based firm, which […]

IDScan confirms breach after 153 million driver’s licenses leak on dark web Read More »

Getting a stranger’s phone kicked off the cellular network costs a few dollars

Don't miss, Features, GSMA, Hot stuff, mobile, News, research, Samsung, tracking /

Getting a stranger’s phone kicked off the cellular network costs a few dollars 2026-09-11 at 09:00 By Mirko Zorz Researchers at Michigan State University and three partner schools bought a Samsung Galaxy Z Fold 7, copied the identification number printed on the sealed box, and reported the phone to its carrier as lost. Then they […]

Getting a stranger’s phone kicked off the cellular network costs a few dollars Read More »

Scroll to Top