News

Fake Claude Opus 5 app delivers malware and wipes its own tracks

Anthropic, Claude Code, GitHub, Malware, Morphisec, News /

Fake Claude Opus 5 app delivers malware and wipes its own tracks 2026-09-01 at 15:21 By Sinisa Markovic A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login credentials, according to Morphisec. Repository README using […]

Fake Claude Opus 5 app delivers malware and wipes its own tracks Read More »

Berlin refuses to be blackmailed after network breach

breach, cyberattack, data breach, EU, Germany, News, Ransomware /

Berlin refuses to be blackmailed after network breach 2026-09-01 at 12:07 By Sinisa Markovic Berlin’s state government has confirmed an extortion attempt following a data theft from its administrative network in August. Governing Mayor Kai Wegner and Interior Senator Iris Spranger addressed the extortion attempt on Friday, following an emergency Senate session at the Rotes […]

Berlin refuses to be blackmailed after network breach Read More »

Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers

AI, cybersecurity, Don't miss, Europe, Hot stuff, News, security operations, SOC, Threat Intelligence /

Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers 2026-09-01 at 08:30 By Mirko Zorz Askeal takes the opposite approach to omniscient Gen AI: rather than pretending to know everything, it combines AI with community expertise. Vetted vendors, researchers, and practitioners contribute their intelligence and tools to help users conduct manual investigations. The startup, […]

Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers Read More »

Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes

GitHub, News, open source, software /

Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes 2026-09-01 at 08:04 By Anamarija Pogorelec Failed SSH logins pile up in an auth log, and a scanner walks a website looking for exposed admin paths. CrowdSec reads log sources and HTTP requests, works out which addresses are misbehaving, and hands the block to […]

Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes Read More »

NIS2 compliance: Fixing IAM and access control before the 2026 audit

access management, Compliance, credentials, Don't miss, Europe, Expert analysis, Hot stuff, MFA, News, opinion, Passwork, regulation /

NIS2 compliance: Fixing IAM and access control before the 2026 audit 2026-09-01 at 08:00 By Help Net Security The NIS2 Directive places direct obligations on organizations across supply chain risk management, incident reporting, and board-level accountability. October brings a new wave of legally binding deadlines across the EU, as member states move from transposition into […]

NIS2 compliance: Fixing IAM and access control before the 2026 audit Read More »

What your vendor says about PQC tells you if they are ready

5G, cybersecurity, Don't miss, Encryption, Features, Hot stuff, mobile security, networking, News, opinion, quantum computing, SSL/TLS, strategy, tips /

What your vendor says about PQC tells you if they are ready 2026-09-01 at 07:30 By Mirko Zorz In this interview with Help Net Security, Dr. Yaakov Stein, VP CTO of Allot, discusses what post-quantum readiness looks like inside a mobile network. The discussion covers which operator traffic stays sensitive for years, including subscriber identity […]

What your vendor says about PQC tells you if they are ready Read More »

Cybersecurity jobs available right now: September 1, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: September 1, 2026 2026-09-01 at 07:00 By Sinisa Markovic Security Engineer, PSO Google | USA | On-site – View job details As a Security Engineer, you will provide technical guidance to customers adopting Google Cloud Platform, helping them navigate their cloud journey with the Professional Services team. The role includes […]

Cybersecurity jobs available right now: September 1, 2026 Read More »

Attackers plant remote access tools on compromised PaperCut servers

0-day, Don't miss, education, enterprise, Hot stuff, Huntress, News, PaperCut, patch, Rapid7, remote access, SMBs, vulnerability, WatchTowr /

Attackers plant remote access tools on compromised PaperCut servers 2026-08-31 at 17:54 By Zeljka Zorz The threat actor targeting internet-facing PaperCut Application Servers is covertly installing legitimate remote access software on them, PaperCut Software shared in the most recent update on the ongoing attack campaign. PaperCut zero-days exploited to deploy remote access tools The vendor […]

Attackers plant remote access tools on compromised PaperCut servers Read More »

Threat actors are posing as AI crawlers to hunt for exposed credentials

AI, credentials, cybercrime, GreyNoise, News /

Threat actors are posing as AI crawlers to hunt for exposed credentials 2026-08-31 at 17:54 By Sinisa Markovic Attackers are disguising automated scanning as traffic from AI crawlers operated by OpenAI, Anthropic, Google, Perplexity and other companies while searching websites for exposed credentials and configuration files, according to GreyNoise. (Source: GreyNoise) “Every program that visits […]

Threat actors are posing as AI crawlers to hunt for exposed credentials Read More »

AWS Console Private Access can block sign-ins to personal accounts

AWS, News /

AWS Console Private Access can block sign-ins to personal accounts 2026-08-31 at 14:57 By Anamarija Pogorelec The AWS Management Console now loads inside a network with no path to the public internet. Console Private Access became generally available on August 28 for virtual private clouds, the isolated networks customers run inside AWS, that have no […]

AWS Console Private Access can block sign-ins to personal accounts Read More »

ShinyHunters claims it stole 284 million patient records from McKesson

breach, cyberattack, data breach, healthcare, News /

ShinyHunters claims it stole 284 million patient records from McKesson 2026-08-31 at 14:57 By Sinisa Markovic Healthcare company McKesson disclosed a cybersecurity incident in which hackers got into third-party applications and stole data. McKesson is a major U.S. healthcare company that distributes pharmaceuticals, medical supplies and other healthcare products to pharmacies, hospitals and clinics. According […]

ShinyHunters claims it stole 284 million patient records from McKesson Read More »

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails

AI, ESET, Malware, News, Russian Federation, Ukraine /

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails 2026-08-31 at 12:45 By Sinisa Markovic Russian state hackers are trying to interfere with AI-assisted malware analysis in Ukraine by deliberately setting off AI safety mechanisms, ESET has found. The technique, named GuardBreaker by ESET, appeared in a malicious VBS script tied […]

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails Read More »

Debian developers rejected an LLM ban and left disclosure voluntary

Debian, generative AI, Linux, LLMs, News, open source /

Debian developers rejected an LLM ban and left disclosure voluntary 2026-08-31 at 11:08 By Anamarija Pogorelec A maintainer reading a merge request can’t tell whether a person or a model wrote the diff, and nobody has to say. Debian developers voted on that through August 28, and Kurt Roeckx, the project secretary, announced the result: […]

Debian developers rejected an LLM ban and left disclosure voluntary Read More »

The OpenClaw 2.0 release moves your sessions into SQLite

AI, automation, News, OpenClaw /

The OpenClaw 2.0 release moves your sessions into SQLite 2026-08-31 at 10:24 By Anamarija Pogorelec OpenClaw is open source software that hands an AI model small standing jobs across your accounts, the kind of chore where it watches a mailbox for vendor advisories and pings you on Telegram when one names a product you run. […]

The OpenClaw 2.0 release moves your sessions into SQLite Read More »

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree

CISO, Cohesity, CVSS, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, patching, SMBs, strategy, tips, vulnerability management /

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree 2026-08-31 at 09:00 By Mirko Zorz In this Help Net Security interview, Dr. Joye Purser, Global Field CISO at Cohesity, explains how to rank vulnerabilities when KEV, EPSS, and CVSS point in different directions. Active exploitation comes first, then exploit likelihood, then technical severity, […]

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree Read More »

Halo-record: Open-source audit trails for AI agents

agentic AI, Don't miss, GitHub, News, open source, software /

Halo-record: Open-source audit trails for AI agents 2026-08-31 at 08:30 By Mirko Zorz Brian Kuan wrote halo-record, a small Python package that sits inside an AI agent and writes down the moves it makes: tool calls, model calls, data access, approvals. Each action becomes one line in a file that only ever gets appended to, […]

Halo-record: Open-source audit trails for AI agents Read More »

AI AppSec tools agree on just 5% of security findings

AI, Application Security, Contrast Security, News, software /

AI AppSec tools agree on just 5% of security findings 2026-08-31 at 08:23 By Sinisa Markovic Software vulnerabilities are turning into exploits within hours, and application security teams carry patch backlogs that go back years. Top types of viable application attacks (Source: Contrast Security) Contrast Security’s AppSec Overflow 2026 report draws on telemetry collected from […]

AI AppSec tools agree on just 5% of security findings Read More »

Free ChatGPT users get ads picked from whatever they just asked about

AI, ChatGPT, News, OpenAI, Privacy /

Free ChatGPT users get ads picked from whatever they just asked about 2026-08-31 at 07:30 By Anamarija Pogorelec Say you’re on the free plan and you ask ChatGPT to help you pick a mattress. An ad may turn up next to the answer, and it got there because of what you just asked about, plus […]

Free ChatGPT users get ads picked from whatever they just asked about Read More »

Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited

News, Week in review /

Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited 2026-08-30 at 11:41 By Anamarija Pogorelec Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unpatched Zimbra servers are falling to CVE-2026-73570 attacks At least 274 internet-facing Zimbra instances have been compromised by unknown attackers via CVE-2026-73570, […]

Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited Read More »

Scroll to Top