News

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

CVE, Don't miss, Hot stuff, Linux, News, OpenSSH, Previdian, SOCRadar, vulnerability /

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) 2026-11-06 at 14:49 By Sinisa Markovic An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was […]

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) Read More »

Residential proxy traffic caught leaving the White House network

Don't miss, Hot stuff, networking, News, Proxy, USA /

Residential proxy traffic caught leaving the White House network 2026-11-06 at 12:29 By Sinisa Markovic The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, […]

Residential proxy traffic caught leaving the White House network Read More »

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed

agentic AI, AI, cybersecurity, News, OpenAI /

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed 2026-11-06 at 12:19 By Anamarija Pogorelec OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model is designed for authorized security testing of websites and applications. Vulnerability […]

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed Read More »

US agencies warn attackers are targeting refrigeration systems that protect food and medicine

CISA, cyberattack, Don't miss, FBI, hardware, Hot stuff, monitoring, News /

US agencies warn attackers are targeting refrigeration systems that protect food and medicine 2026-11-06 at 11:04 By Sinisa Markovic Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous heating and defrost cycles, five US federal agencies warned […]

US agencies warn attackers are targeting refrigeration systems that protect food and medicine Read More »

November 2026 Patch Tuesday forecast: Old software continues to bite

cybersecurity, Don't miss, Expert analysis, Hot stuff, Microsoft, News, opinion, Patch Tuesday, predictions /

November 2026 Patch Tuesday forecast: Old software continues to bite 2026-11-06 at 09:00 By Help Net Security How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly […]

November 2026 Patch Tuesday forecast: Old software continues to bite Read More »

87% say their AI controls need to work better

agentic AI, AI, Don't miss, generative AI, LLMs, News, survey, Vanson Bourne /

87% say their AI controls need to work better 2026-11-06 at 08:15 By Anamarija Pogorelec The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than half of 3,600 business decision-makers say the systems their teams use can act within defined rules without […]

87% say their AI controls need to work better Read More »

99% of repository access tokens never expire

agentic AI, code analysis, identity management, News, Non Human Identities, report, software development /

99% of repository access tokens never expire 2026-11-06 at 07:30 By Anamarija Pogorelec Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State […]

99% of repository access tokens never expire Read More »

Rental phishing sites use live chat to win over hesitant travelers

cybercrime, Fortra, News, phishing, travel industry /

Rental phishing sites use live chat to win over hesitant travelers 2026-11-06 at 07:00 By Sinisa Markovic Holiday travelers looking for a place to stay are landing on copies of popular rental platforms, complete with host names, ratings and reviews, that ask for their passwords, personal details and credit card numbers. The sites, spotted and […]

Rental phishing sites use live chat to win over hesitant travelers Read More »

Vercel ties login sessions to devices, rolls out AI security reviews in public beta

cloud-based, code review, Don't miss, Hot stuff, News, Vercel, web application security /

Vercel ties login sessions to devices, rolls out AI security reviews in public beta 2026-11-05 at 16:37 By Zeljka Zorz Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the launch of Vercel Security Review in public beta. Making stolen […]

Vercel ties login sessions to devices, rolls out AI security reviews in public beta Read More »

Cyberattack on Norway’s aid agency may have swept up all user data

breach, cyberattack, data breach, EU, News, Norway /

Cyberattack on Norway’s aid agency may have swept up all user data 2026-11-05 at 15:56 By Sinisa Markovic The names and email addresses of 20,614 people registered on Norad’s Grants Portal may have ended up in the hands of attackers, Norway’s development aid agency has disclosed. Norad, short for the Norwegian Agency for Development Cooperation, […]

Cyberattack on Norway’s aid agency may have swept up all user data Read More »

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)

0-day, Binarly, Don't miss, exploit, GreyNoise, Hot stuff, News, Zyxel /

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) 2026-11-05 at 14:06 By Zeljka Zorz Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers used, Binarly found. That’s because the patch fixed a […]

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) Read More »

Scammers capitalize on GTA 6 hype to push malware and crypto cons

cybercrime, fraud, Netcraft, News, online gaming, scams /

Scammers capitalize on GTA 6 hype to push malware and crypto cons 2026-11-05 at 13:41 By Sinisa Markovic Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a new blog post. The company looked at GTA […]

Scammers capitalize on GTA 6 hype to push malware and crypto cons Read More »

Google puts new limits on AI agents that hunt threats and fix vulnerabilities

agentic AI, credentials, cybersecurity, Google, Google Cloud, identity management, Mandiant, News, security controls, Wiz /

Google puts new limits on AI agents that hunt threats and fix vulnerabilities 2026-11-05 at 13:02 By Anamarija Pogorelec Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target code scans more precisely. The updates let businesses verify vulnerabilities and […]

Google puts new limits on AI agents that hunt threats and fix vulnerabilities Read More »

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run

AI, Linux, News, OpenAI, vulnerability management /

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run 2026-11-05 at 11:05 By Sinisa Markovic An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch for each underlying flaw, OpenAI revealed […]

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run Read More »

A banking malware sample led researchers to an Android bug that can loop-crash phones

Android, Bitdefender, cybersecurity, Don't miss, Hot stuff, News, research, software, Zimperium /

A banking malware sample led researchers to an Android bug that can loop-crash phones 2026-11-05 at 11:00 By Mirko Zorz Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can take a factory reset to clear. […]

A banking malware sample led researchers to an Android bug that can loop-crash phones Read More »

AI agent detection signals that still work when agents look human

agentic AI, automation, bot, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, threat detection, tips, traffic monitoring /

AI agent detection signals that still work when agents look human 2026-11-05 at 08:45 By Mirko Zorz Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of Resemble AI explains how agents arrive as […]

AI agent detection signals that still work when agents look human Read More »

Healthcare can’t govern the AI tools it hasn’t found yet

cybersecurity, healthcare, News, Paubox, report, survey /

Healthcare can’t govern the AI tools it hasn’t found yet 2026-11-05 at 08:11 By Anamarija Pogorelec Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten have still found an AI-built tool handling that data without […]

Healthcare can’t govern the AI tools it hasn’t found yet Read More »

Companies are spending more on AI governance and getting less control

AI, cybersecurity, DNSFilter, generative AI, investment, News, report /

Companies are spending more on AI governance and getting less control 2026-11-05 at 07:30 By Anamarija Pogorelec Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud security, according to DNSFilter’s The Cost of Shadow AI report. Some 74.5% of respondents reported a larger cybersecurity […]

Companies are spending more on AI governance and getting less control Read More »

Most consumers aren’t ready to let AI agents shop unsupervised

agentic AI, cybersecurity, identity management, identity verification, News, Okta, report, Risk Management /

Most consumers aren’t ready to let AI agents shop unsupervised 2026-11-05 at 07:00 By Anamarija Pogorelec Customer control, account security and ease of use are influencing the adoption of AI agents that make purchases, book services and access personal information, according to Okta’s 2026 Customer Identity Trends Report. Consumers’ willingness to delegate depends on what […]

Most consumers aren’t ready to let AI agents shop unsupervised Read More »

Russian hackers target iOS and Android users with n-day exploits

Android, cyber espionage, iPhone, mobile devices, News, Russian Federation /

Russian hackers target iOS and Android users with n-day exploits 2026-11-04 at 16:38 By Sinisa Markovic Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering […]

Russian hackers target iOS and Android users with n-day exploits Read More »

Scroll to Top