News

Qodana 2026.2 adds post-quantum crypto checks for JVM code

Application Security, code, JetBrains, News, software, update /

Qodana 2026.2 adds post-quantum crypto checks for JVM code 2026-08-03 at 14:21 By Anamarija Pogorelec Qodana 2026.2 shipped with new security inspections, published benchmark results, post-quantum cryptography checks, and coverage reporting that no longer has to be pointed at the reports. The security work sits in the .NET linter and runs by default. Qodana tracks […]

Qodana 2026.2 adds post-quantum crypto checks for JVM code Read More »

OpenAI reveals how criminals used ChatGPT to run scams

ChatGPT, cybercrime, Don't miss, LLMs, News, OpenAI, romance scams, scams, social media, threats /

OpenAI reveals how criminals used ChatGPT to run scams 2026-08-03 at 11:40 By Anamarija Pogorelec OpenAI banned a coordinated network of ChatGPT accounts that likely originated in Cambodia’s Preah Sihanouk province, a region reports have linked to online scam compounds and human trafficking operations. The network used the company’s models to create and manage fake […]

OpenAI reveals how criminals used ChatGPT to run scams Read More »

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Arm, cybersecurity, Elastic, Endpoint Security, News /

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support 2026-08-03 at 11:31 By Mirko Zorz Attackers reaching for kernel access on a Windows machine bring a driver Microsoft already trusts. It is signed, it loads, and it carries a known flaw. That flaw gives them enough room to tamper with memory […]

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support Read More »

Mapping the malware blast radius a single alert won’t show you

agentic AI, AI, Black Hat, Black Hat USA 2026, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Stairwell /

Mapping the malware blast radius a single alert won’t show you 2026-08-03 at 09:00 By Mirko Zorz In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far a malware campaign spread. He walks through […]

Mapping the malware blast radius a single alert won’t show you Read More »

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills

agentic AI, Don't miss, GitHub, Hot stuff, LLMs, News, NVIDIA, open source, scanner, software /

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills 2026-08-03 at 08:30 By Anamarija Pogorelec SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of […]

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills Read More »

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in

Don't miss, GlobalSign, News, Red Sift, Video /

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in 2026-08-03 at 08:00 By Help Net Security In this Help Net Security video, Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, unpack the evolution of email security and why it […]

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in Read More »

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan

email security, iOS, iPhone, mobile security, network monitoring, News, scams /

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan 2026-08-03 at 07:30 By Anamarija Pogorelec Guardio Mobile Security brings several protection features to iPhone and Android, allowing users to monitor exposed personal information, identify phishing attempts, and receive alerts about emerging threats from a single application. It is available on smartphones and […]

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan Read More »

Buying TikTok followers can expose users to scams and account theft

ad, credentials, cybersecurity, identity, Malwarebytes, News, scams, social media, TikTok /

Buying TikTok followers can expose users to scams and account theft 2026-08-03 at 07:00 By Anamarija Pogorelec Buying TikTok followers, likes, or views could do more than inflate engagement metrics. According to Malwarebytes, many services selling social media growth operate through deceptive practices that can expose customers to scams, stolen accounts, and financial loss. The […]

Buying TikTok followers can expose users to scams and account theft Read More »

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

News, Week in review /

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released 2026-08-02 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents run with the same permissions as their users, meaning they […]

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released Read More »

Cybercrime goes subscription: AI, malware and infrastructure on demand

attack, BEC scams, cybercrime, cybersecurity, DNS, fraud, Infoblox, News, report /

Cybercrime goes subscription: AI, malware and infrastructure on demand 2026-07-31 at 16:55 By Anamarija Pogorelec Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enabling […]

Cybercrime goes subscription: AI, malware and infrastructure on demand Read More »

Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire

Android, BitSight, botnet, cybercrime, fraud, News /

Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire 2026-07-31 at 15:19 By Sinisa Markovic A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao apps ecosystem (Source: Bitsight) According to Bitsight, the operation, named Fuyao, uses […]

Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire Read More »

Anthropic’s Claude breached three companies during security tests

agentic AI, AI, Anthropic, Claude Code, cybersecurity, LLMs, News /

Anthropic’s Claude breached three companies during security tests 2026-07-31 at 12:41 By Sinisa Markovic Anthropic has disclosed that its AI model Claude gained unauthorized access to the systems of three different organizations during cybersecurity evaluations. The disclosure follows OpenAI’s July 21 announcement that some of its models had escaped an isolated testing environment by exploiting […]

Anthropic’s Claude breached three companies during security tests Read More »

Aviation cyber risk sits on the ground, the blindness sits in the air

boardroom, CXO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips /

Aviation cyber risk sits on the ground, the blindness sits in the air 2026-07-31 at 08:30 By Mirko Zorz In this interview with Help Net Security, Eliran Almong, CEO of Cyviation, explains why airline cyber losses happen on the ground while the aircraft stays unmonitored. He walks through GNSS jamming that leaves no trace in […]

Aviation cyber risk sits on the ground, the blindness sits in the air Read More »

Companies push AI, sysadmins keep it on a short leash

Action1, AI, automation, Compliance, cybersecurity, News, patching, report /

Companies push AI, sysadmins keep it on a short leash 2026-07-31 at 08:00 By Anamarija Pogorelec In 2024, sysadmins expected AI to automate patch management optimization, vulnerability prioritization, infrastructure monitoring, and incident response within two years. Action1’s 2026 Survey Report: AI Impact on Sysadmins found that those expectations proved overly optimistic. The largest shortfalls appeared […]

Companies push AI, sysadmins keep it on a short leash Read More »

AI agents are changing where cybersecurity seed funding lands

access management, AI, Cloudflare, cybersecurity, DataTribe, enterprise, investment, money, News, Palo Alto Networks, report, Zscaler /

AI agents are changing where cybersecurity seed funding lands 2026-07-31 at 07:30 By Anamarija Pogorelec Founders pitching a cybersecurity seed round this summer are joining a line that keeps getting longer. Product Hunt launches hit their highest level since late 2023 last quarter, and the Census Bureau’s count of high-propensity business applications kept climbing. Seed […]

AI agents are changing where cybersecurity seed funding lands Read More »

New infosec products of the week: July 31, 2026

BlackCloak, Contrast Security, Dropzone AI, News, PortSwigger, ZeroFOX /

New infosec products of the week: July 31, 2026 2026-07-31 at 07:00 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from BlackCloak, Contrast Security, Dropzone AI, PortSwigger, Realm Security, Reco, Root Evidence, and ZeroFox. BlackCloak extends deepfake protection to the executive’s trusted circle Deepfakes have made […]

New infosec products of the week: July 31, 2026 Read More »

AI takes on a bigger role in finding Chrome vulnerabilities

AI, Chrome, cybersecurity, Google, News, vulnerability management /

AI takes on a bigger role in finding Chrome vulnerabilities 2026-07-30 at 20:01 By Sinisa Markovic Google has expanded the use of AI in Chrome’s security workflow, using it to find vulnerabilities, triage bug reports, generate patches, and review code to shorten the time between discovering software flaws and delivering security updates. “Historically, triaging a […]

AI takes on a bigger role in finding Chrome vulnerabilities Read More »

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)

APT, cyber espionage, Don't miss, government-backed attacks, Hot stuff, Microsoft Exchange, News, Proofpoint, Russian Federation, vulnerability /

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) 2026-07-30 at 17:23 By Zeljka Zorz Russia-affiliated cyber espionage group Laundry Bear (aka Void Blizzard, aka TA488) is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange, to target US and European government entities and a variety of private sector organizations via email. The […]

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) Read More »

CISA sets a new SBOM baseline

AI, CISA, cybersecurity, News, open source, SaaS, software /

CISA sets a new SBOM baseline 2026-07-30 at 15:23 By Anamarija Pogorelec The US Cybersecurity and Infrastructure Security Agency (CISA), together with its co-authoring partners, has released the 2026 Minimum Elements for a Software Bill of Materials (SBOM), replacing the 2021 guidance published by the National Telecommunications and Information Administration (NTIA). An SBOM is a […]

CISA sets a new SBOM baseline Read More »

Scroll to Top