News

Organizations struggle to prioritize known cyber risks

automation, cybersecurity, Filigran, News, report, Risk Management, Threat Intelligence /

Organizations struggle to prioritize known cyber risks 2026-07-03 at 07:30 By Anamarija Pogorelec Organizations collect more cyber risk data than ever, with many still struggling to build a unified view of their exposure. The latest State of Threat Management report from Filigran found that security teams continue to work across disconnected tools, leaving important context […]

Organizations struggle to prioritize known cyber risks Read More »

New infosec products of the week: July 3, 2026

Digi International, Jamf, News /

New infosec products of the week: July 3, 2026 2026-07-03 at 07:00 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from Digi International, iboss, Jamf, and Netzilo. Digi International’s DANI automates network diagnostics and device management Digi International has announced the launch of DANI, the Digi […]

New infosec products of the week: July 3, 2026 Read More »

Scattered Spider suspect extradited over $8 million ransom scheme

arrest, Cryptocurrency, cybercrime, fraud, News, Ransomware, US DoJ /

Scattered Spider suspect extradited over $8 million ransom scheme 2026-07-02 at 16:43 By Anamarija Pogorelec A suspected Scattered Spider member has been extradited to the United States to face charges linked to cyberattacks against U.S. companies, including the breach of a luxury jewelry retailer that led to an $8 million cryptocurrency ransom demand after attackers […]

Scattered Spider suspect extradited over $8 million ransom scheme Read More »

Cloudflare changes AI crawler access rules

access control, AI, bot, Cloudflare, cybersecurity, News, traffic monitoring /

Cloudflare changes AI crawler access rules 2026-07-02 at 15:21 By Anamarija Pogorelec Cloudflare introduced new controls that let website owners manage AI traffic across three categories: Search, Agent, and Training. The feature is available to all Cloudflare customers, including those on the Free plan, and gives website owners more control over how different types of […]

Cloudflare changes AI crawler access rules Read More »

The endpoint recovery gap many teams discover during an incident

backup, business continuity, cyber resilience, cybersecurity, disaster recovery, Don't miss, Endpoint Security, Features, Incident Response, News, opinion, strategy /

The endpoint recovery gap many teams discover during an incident 2026-07-02 at 09:00 By Mirko Zorz In this interview with Help Net Security, IGEL CTO Matthias Haas explains why backups alone do not equal recovery. He makes the case that endpoint recovery is often overlooked, leaving organizations exposed when thousands of devices go down at […]

The endpoint recovery gap many teams discover during an incident Read More »

Catching ransomware on the wire before it locks the file server

cybersecurity, Don't miss, framework, News, Ransomware, research, scanning /

Catching ransomware on the wire before it locks the file server 2026-07-02 at 08:00 By Sinisa Markovic Corporate networks keep sensitive files off individual workstations and store them on shared servers that staff reach through mapped network drives. That arrangement hands ransomware operators a target worth chasing. A single compromised laptop can begin encrypting files […]

Catching ransomware on the wire before it locks the file server Read More »

What the AI patch gap means for enterprise security

AI, cybersecurity, enterprise, News, open source, report /

What the AI patch gap means for enterprise security 2026-07-02 at 07:30 By Sinisa Markovic Open-source maintainers are receiving more vulnerability reports than they can act on, and a rising share now comes from an AI system working at machine speed. Over roughly two months this spring, Anthropic’s Claude Mythos Preview combed through more than […]

What the AI patch gap means for enterprise security Read More »

GitHub’s new tool helps prevent costly open-source license violations

Compliance, GitHub, News, open source, policy, software development /

GitHub’s new tool helps prevent costly open-source license violations 2026-07-02 at 07:00 By Anamarija Pogorelec GitHub’s Open Source Program Office (OSPO) uses the new GitHub License Compliance feature, now in public preview, to manage thousands of open-source dependencies and identify dependencies whose licenses require review. The feature is available to GitHub Advanced Security customers and […]

GitHub’s new tool helps prevent costly open-source license violations Read More »

The ARToken phishing panel targets Microsoft 365 accounts

Cisco, cybercrime, Don't miss, Microsoft 365, News, phishing, threats /

The ARToken phishing panel targets Microsoft 365 accounts 2026-07-01 at 13:00 By Sinisa Markovic Accounts-payable staff at U.S. companies keep receiving invoice emails that look like they come from vendors they already work with. One landed at a life-sciences company in April 2026, addressed to the person who handles payments and written in the voice […]

The ARToken phishing panel targets Microsoft 365 accounts Read More »

Claude Sonnet 5 includes safeguards against dangerous cyber use

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Claude Sonnet 5 includes safeguards against dangerous cyber use 2026-07-01 at 11:45 By Anamarija Pogorelec Anthropic has introduced Claude Sonnet 5, the latest version of its general-purpose AI model, with improved reasoning, coding, tool use, and knowledge work capabilities. The model can make plans, use tools such as browsers and terminals, and complete tasks autonomously. […]

Claude Sonnet 5 includes safeguards against dangerous cyber use Read More »

What a financial planner taught me about cybersecurity

BH Consulting, Brian Honan, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, security awareness /

What a financial planner taught me about cybersecurity 2026-07-01 at 09:30 By Help Net Security When I spoke at a recent cybersecurity awareness event for financial planners and tax advisors, the audience really engaged with the subject. As happens at conferences the world over, people often come up to speakers to ask follow-up questions, or […]

What a financial planner taught me about cybersecurity Read More »

Nika: Open-source code analysis tool

Application Security, code analysis, code review, Don't miss, GitHub, microservices, News, open source, scanner, software /

Nika: Open-source code analysis tool 2026-07-01 at 09:00 By Mirko Zorz Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and turns dangerous only when it reaches a sensitive operation such as a database query or a file […]

Nika: Open-source code analysis tool Read More »

This supercomputer encrypts your data even while it’s running it

Amd, data, data analysis, Data Protection, Don't miss, Encryption, News, Privacy, research /

This supercomputer encrypts your data even while it’s running it 2026-07-01 at 08:30 By Sinisa Markovic Most people who handle sensitive data already encrypt it in two places. They lock it down when it sits on a hard drive, and they lock it down when it moves across a network. There has always been a […]

This supercomputer encrypts your data even while it’s running it Read More »

AI-generated code risks reach security, legal, and compliance teams

AI, code, cybersecurity, Don't miss, News, programming, report /

AI-generated code risks reach security, legal, and compliance teams 2026-07-01 at 08:00 By Mirko Zorz Most engineering organizations write code with AI, and a good number of them keep that code away from customers. A Flux survey of engineering leaders and practitioners found that nearly half run AI-generated code in production. Almost every company in […]

AI-generated code risks reach security, legal, and compliance teams Read More »

Microsoft wants to stop unwanted bots from entering Teams meetings

bot, identity verification, Microsoft, Microsoft Teams, News, policy /

Microsoft wants to stop unwanted bots from entering Teams meetings 2026-07-01 at 07:30 By Anamarija Pogorelec A new Microsoft Teams admin policy, Manage external bots and their access to meetings, gives organizations greater visibility and control over external bots in meetings. The policy identifies bots and applies safeguards before they are admitted. Microsoft will begin […]

Microsoft wants to stop unwanted bots from entering Teams meetings Read More »

Getting boards to fund ERM means speaking their currency

boardroom, Compliance, cybersecurity, News, Trend Micro, Video /

Getting boards to fund ERM means speaking their currency 2026-07-01 at 07:00 By Help Net Security In this Help Net Security video, Greg Young, VP Cybersecurity and Corporate Development at TrendAI, explains how to build Enterprise Risk Management that a board will pay for. Drawing on nearly four decades in cybersecurity, including time as a […]

Getting boards to fund ERM means speaking their currency Read More »

Proton’s pitch for Lumo 2.0: Frontier AI without the data grab

AI, News, Privacy, Proton /

Proton’s pitch for Lumo 2.0: Frontier AI without the data grab 2026-07-01 at 01:15 By Anamarija Pogorelec Proton has unveiled Lumo 2.0, a major upgrade to its zero-access encrypted AI assistant. Built on a new architecture, the release brings the assistant closer to frontier AI models with new AI models, multimodal capabilities, Memory, improved web […]

Proton’s pitch for Lumo 2.0: Frontier AI without the data grab Read More »

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)

Defused, Don't miss, Hot stuff, News, Oracle, PoC, vulnerability /

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817) 2026-06-30 at 16:58 By Zeljka Zorz Exploitation attempts targeting a critical vulnerability (CVE-2026-46817) in Oracle Payments, the payment-processing module within Oracle’s E-Business Suite (EBS), have been spotted over the weekend, threat intelligence company Defused warned on Monday. The detected exploitation attempts (Source: Defused) “On 27 June 2026 […]

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817) Read More »

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Blackpoint Cyber, CISA, credentials, data theft, Don't miss, Horizon3.ai, Hot stuff, Linux, macOS, Malware, MSP, News, remote management, SimpleHelp, vulnerability, Windows /

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) 2026-06-30 at 13:25 By Zeljka Zorz Attackers are exploiting CVE-2026-48558, a recently patched authentication bypass vulnerability in SimpleHelp RMM, to drop the novel Djinn Stealer malware on victim computers. The malware is capable of targeting Windows, macOS, and Linux systems, and “collects credentials associated with cloud […]

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) Read More »

Scroll to Top