LevelBlue and rrelentless: Bringing Proactive Cyber Resilience to Cyber Insurance Policyholders 2026-11-04 at 16:16 By Cyber insurance has traditionally done its most important work after something goes wrong. We think it can do much more before an incident ever happens. This article is an excerpt from LevelBlue Blog View Original Source
Live Q&A: CISSP exam prep with ISC2 experts 2026-11-04 at 16:00 By Help Net Security Join ISC2 on November 6, 2026 at 7:00pm CET for a live Q&A about the CISSP exam. A panel of experts will answer your questions, explain what it takes to earn the certification, and walk through the exam domains. You’ll […]
Live Q&A: CISSP exam prep with ISC2 experts Read More »
Cyberattack hits French blood banks 2026-11-04 at 15:36 By Zeljka Zorz Three blood banks have detected and reversed a potentially destructive temperature spike in their cold rooms, following a cyberattack that targeted a refrigeration equipment provider of the French Blood Establishment (EFS), the only civilian blood collection and transfusion organization in France. Monitoring systems caught […]
Cyberattack hits French blood banks Read More »
Poisoned cPGuard update hits thousands of web hosting servers 2026-11-04 at 13:18 By Zeljka Zorz An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000 customer servers. OPSShield, the company behind the security suite, also confirmed that the attacker […]
Poisoned cPGuard update hits thousands of web hosting servers Read More »
Fake job interview opened the door to $6.34 billion Binance heist 2026-11-04 at 12:29 By Sinisa Markovic A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a single isolated breach or a simple phishing incident,” Binance […]
Fake job interview opened the door to $6.34 billion Binance heist Read More »
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw 2026-11-04 at 09:43 By Anamarija Pogorelec The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version also lets you push a transfer to the […]
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw Read More »
What AI-generated malware looks like under the microscope 2026-11-04 at 09:00 By Mirko Zorz In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from […]
What AI-generated malware looks like under the microscope Read More »
Secure your containers without breaking what works 2026-11-04 at 08:35 By Help Net Security Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include operating-system packages, development tools, debugging utilities and libraries that an application never uses. Each unnecessary component […]
Secure your containers without breaking what works Read More »
Ghostunnel: Open-source TLS proxy with mutual authentication 2026-11-04 at 08:30 By Anamarija Pogorelec Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a backend, accepts TLS connections, checks the client’s certificate, then passes traffic to the […]
Ghostunnel: Open-source TLS proxy with mutual authentication Read More »
Companies going all in on AI could see their strategy backfire 2026-11-04 at 07:30 By Anamarija Pogorelec Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive displacement debuted at No. 3 and No. 4, respectively. The AI workforce preparedness gap held fifth place. […]
Companies going all in on AI could see their strategy backfire Read More »
NIST publishes cybersecurity guide for businesses too small to have IT staff 2026-11-04 at 07:00 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other than their owners. These businesses include freelancers, sole proprietors, and independent contractors. About 82% of the 34.8 million […]
NIST publishes cybersecurity guide for businesses too small to have IT staff Read More »
Anthropic open-sources FlashProve, its provable inference prototype for MoE models 2026-11-04 at 06:36 By Anamarija Pogorelec Anthropic’s Frontier Red Team, with collaborators at EPFL, MIT and StarkWare, built FlashProve, a prototype that produces a cryptographic proof that one specific language model generated one specific reply. The prover, two verifiers, the formal proofs behind them and […]
Anthropic open-sources FlashProve, its provable inference prototype for MoE models Read More »
Police seize over 100 servers linked to investment fraud with more than €4 million in losses 2026-11-03 at 16:31 By Sinisa Markovic Seven people have been arrested and more than 100 servers seized in a coordinated law enforcement action against an investment fraud network that started unravelling after a complaint from a German couple. Seized […]
Novee puts forgotten internet-facing assets through penetration testing 2026-11-03 at 16:00 By Help Net Security Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) […]
Novee puts forgotten internet-facing assets through penetration testing Read More »
Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115) 2026-11-03 at 14:59 By Sinisa Markovic Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected servers, VulnCheck has found. Node-RED is a flow-based programming tool […]
AI agents scale and speed up Chinese-linked attacks 2026-11-03 at 14:31 By Zeljka Zorz A China-nexus espionage group used AI agents to attack more than 200 organizations in 11 days, CrowdStrike said last week. On Monday, Kaspersky published details of a separate campaign against educational institutions in Africa and Latin America, mounted by Chinese-speaking operators. […]
AI agents scale and speed up Chinese-linked attacks Read More »
Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware 2026-11-03 at 12:00 By Anamarija Pogorelec ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing attachments and a stealer that erases itself once the data is gone. Spearphishing […]
Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware Read More »
Stolen AI access leaves companies with cloud bills of up to $1 million 2026-11-03 at 11:39 By Sinisa Markovic Criminals who break into corporate cloud accounts are using the stolen access to run AI models at the victim’s expense, in some cases racking up more than $100,000 in charges in a single day, Google Threat […]
Stolen AI access leaves companies with cloud bills of up to $1 million Read More »
OpenAI raises top bug bounty payout to $172,000 with bonuses 2026-11-03 at 10:58 By Anamarija Pogorelec OpenAI increased its security bug bounties to encourage independent researchers to find vulnerabilities in its software. The program now offers bonuses for high-quality reports. The program encourages researchers to disclose vulnerabilities responsibly and complements OpenAI’s Defense Factory, where engineers […]
OpenAI raises top bug bounty payout to $172,000 with bonuses Read More »
Opal’s agent.ID virtual event: Top security leaders on governing Al agents 2026-11-03 at 10:55 By Help Net Security Opal Security will host agent.ID, a free virtual event focused on adapting identity and access management (IAM) to AI agents, on November 5, 2026. The event will bring together CISOs and identity leaders from Elastic, Instacart, Notion, […]
Opal’s agent.ID virtual event: Top security leaders on governing Al agents Read More »