Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed 2026-10-18 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Strands Box: Open-source sandbox for AI agents AWS released Strands Box, an open source sandbox for AI […]
Hackers disguise phishing as promising business opportunities 2026-10-16 at 15:45 By Sinisa Markovic Attackers are breaking into business email accounts with short messages asking whether a company can quote on an upcoming project, the kind of request sales and procurement staff answer every week. Cadence Riddle, a cybersecurity researcher at Fortra, tracked a 12-fold increase […]
Hackers disguise phishing as promising business opportunities Read More »
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns 2026-10-16 at 14:34 By Sinisa Markovic Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned. “The FBI warns the […]
Fake Arch Linux AUR packages exploit typos to run malware with root privileges 2026-10-16 at 12:58 By Sinisa Markovic Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source […]
Fake Arch Linux AUR packages exploit typos to run malware with root privileges Read More »
Android adds AI-powered scam alerts, hangs up on bank impostors 2026-10-16 at 11:53 By Anamarija Pogorelec Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users to catch […]
Android adds AI-powered scam alerts, hangs up on bank impostors Read More »
Why Active Directory weaknesses stay open for years in teams with one or two admins 2026-10-16 at 09:00 By Mirko Zorz David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a […]
Why Active Directory weaknesses stay open for years in teams with one or two admins Read More »
The cyber talent shortage? Job postings just hit a four-year low 2026-10-16 at 08:30 By Mirko Zorz US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job […]
The cyber talent shortage? Job postings just hit a four-year low Read More »
Stolen AI API keys are paying for hackers’ autonomous scans 2026-10-16 at 08:00 By Anamarija Pogorelec A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across […]
Stolen AI API keys are paying for hackers’ autonomous scans Read More »
DDoS attacks can knock services offline before links reach capacity 2026-10-16 at 07:30 By Anamarija Pogorelec More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses Attacks exceeding […]
DDoS attacks can knock services offline before links reach capacity Read More »
New infosec products of the week: October 16, 2026 2026-10-16 at 07:00 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution NinjaOne has announced Katana AI, an agentic AI […]
New infosec products of the week: October 16, 2026 Read More »
Fastfetch 2.70.0 changes how Disk free space is reported 2026-10-16 at 06:53 By Anamarija Pogorelec Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch project removed QuickJS scripting and changed what its Disk, Command and Shell modules report in […]
Fastfetch 2.70.0 changes how Disk free space is reported Read More »
KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims 2026-10-15 at 16:51 By Sinisa Markovic A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes with a set of features made […]
KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims Read More »
Fake CAPTCHAs are tricking users into running malware on their own devices 2026-10-15 at 16:29 By Anamarija Pogorelec Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are tricked […]
Fake CAPTCHAs are tricking users into running malware on their own devices Read More »
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products 2026-10-15 at 13:43 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, […]
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Read More »
Microsoft disrupts phishing network behind more than a billion scam messages 2026-10-15 at 13:10 By Anamarija Pogorelec Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT across Japan, the United States, Australia, and India. Phishing […]
Microsoft disrupts phishing network behind more than a billion scam messages Read More »
Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]
Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »
The internet’s attack surface moves at very different speeds 2026-10-15 at 08:00 By Anamarija Pogorelec Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026. Elsewhere in its scans, the internet-scanning company measured much slower movement. Exposed industrial […]
The internet’s attack surface moves at very different speeds Read More »
AI-generated changes create review bottlenecks in software delivery 2026-10-15 at 07:30 By Anamarija Pogorelec 83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD in 2026 report. Adoption exceeds that of containerisation and orchestration, infrastructure as code, GitOps […]
AI-generated changes create review bottlenecks in software delivery Read More »
Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content 2026-10-15 at 07:00 By Anamarija Pogorelec GuardOS is an iPhone application that combines device security checks, VPN access, Safari content filtering, QR link scanning, and storage cleanup. It is available through the App Store. Getting started The home dashboard organizes tools […]
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries 2026-10-14 at 16:00 By Sinisa Markovic North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued laptops running from their homes, according to the US Department […]
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries Read More »