Download: The IT and security field guide to AI adoption 2026-10-14 at 16:00 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of […]
Download: The IT and security field guide to AI adoption Read More »
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers 2026-10-14 at 13:48 By Sinisa Markovic People who have shopped with Phase Eight, Hobbs or Whistles will have to wait to find out whether their personal information was exposed in a cyberattack on the company behind the three UK fashion […]
GitHub adopts cheaper AI model to catch secrets developers leave in code 2026-10-14 at 12:26 By Anamarija Pogorelec GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its […]
GitHub adopts cheaper AI model to catch secrets developers leave in code Read More »
Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances 2026-10-14 at 11:59 By Zeljka Zorz A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October […]
Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances Read More »
OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings 2026-10-14 at 11:40 By Sinisa Markovic A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s engineers. Abdulrahman Alfozan, […]
OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings Read More »
Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) 2026-10-14 at 10:53 By Zeljka Zorz In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be […]
Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) Read More »
Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]
Patching and preventing issues: What are the lessons you can learn? Read More »
Meshery: Open-source cloud-native manager for Kubernetes 2026-10-14 at 08:00 By Anamarija Pogorelec Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, […]
Meshery: Open-source cloud-native manager for Kubernetes Read More »
Most companies count AI agents as insiders, and CISOs worry about their own liability 2026-10-14 at 07:30 By Anamarija Pogorelec Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked […]
Most companies count AI agents as insiders, and CISOs worry about their own liability Read More »
Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes 2026-10-14 at 07:00 By Anamarija Pogorelec Google is updating its Chrome Vulnerability Rewards Program (Chrome VRP), increasing payments for memory corruption vulnerabilities and expanding rewards for other security flaws, fixes and research tools. “A primary goal of the Chrome VRP has […]
Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes Read More »
Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet 2026-10-13 at 16:15 By Sinisa Markovic Russian tech giant Yandex confirmed that drones hit three of its data centers, shutting down the facilities in Sasovo and Vladimir and knocking out part of the infrastructure in Kaluga. On October 11, Yandex Cloud […]
Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser 2026-10-13 at 14:21 By Anamarija Pogorelec Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an […]
Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser Read More »
Meta outlines Muse Wonder safeguards for AI agents acting on your behalf 2026-10-13 at 12:35 By Anamarija Pogorelec Meta’s Muse Wonder and Muse Wonder Full models are built for AI agents that handle tasks such as preparing insurance claims, reviewing leases and developing software. The models combine document analysis and tool use with the ability […]
Meta outlines Muse Wonder safeguards for AI agents acting on your behalf Read More »
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) 2026-10-13 at 12:19 By Sinisa Markovic GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in […]
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) Read More »
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover 2026-10-13 at 12:00 By Mirko Zorz Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom […]
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover Read More »
Frontier AI cleared every OT attack goal Booz Allen set in its lab 2026-10-13 at 08:00 By Anamarija Pogorelec Booz Allen set frontier AI models against an isolated industrial-control testbed in its Chantilly, Virginia lab and watched them clear all eight attack objectives it had defined. The Booz Allen frontier AI OT test architecture (Source: […]
Frontier AI cleared every OT attack goal Booz Allen set in its lab Read More »
Most high-severity cloud security findings are downgraded once an AI agent checks the environment 2026-10-13 at 07:30 By Sinisa Markovic Cloud security platforms turn every failed rule into a finding, and those findings pile up in queues sorted by severity. Research from Sola Security tested what happens to that order when each finding gets checked […]
Cybersecurity jobs available right now: October 13, 2026 2026-10-13 at 07:00 By Anamarija Pogorelec CISO & Head of IT Trigo | Israel | On-site – View job details As a CISO & Head of IT, you will lead the IT and Information Security team, set strategy and priorities, manage budgets and report progress to management. […]
Cybersecurity jobs available right now: October 13, 2026 Read More »
Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted 2026-10-12 at 19:07 By Zeljka Zorz European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned […]
Microsoft’s new model helps AI agents judge their next move 2026-10-12 at 14:02 By Anamarija Pogorelec Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making […]
Microsoft’s new model helps AI agents judge their next move Read More »