What human hackers still do better than AI, according to HackerOne’s CEO 2026-11-03 at 08:30 By Mirko Zorz AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, […]
What human hackers still do better than AI, according to HackerOne’s CEO Read More »
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up 2026-11-03 at 08:00 By Help Net Security HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late […]
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up Read More »
AI coding agents are installing MCP servers that will never be patched 2026-11-03 at 07:45 By Mirko Zorz When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository […]
AI coding agents are installing MCP servers that will never be patched Read More »
Fireperf: Open-source network testing tool for firewalls and routers 2026-11-03 at 07:30 By Mirko Zorz The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed at administrators, developers and testers who […]
Fireperf: Open-source network testing tool for firewalls and routers Read More »
Cybersecurity jobs available right now: November 3, 2026 2026-11-03 at 07:00 By Anamarija Pogorelec Cyber Security Architect Planck Technologies | Portugal | Remote – View job details As a Cyber Security Architect, you will design security architectures for telecommunications networks, platforms, and cloud environments. You will define security frameworks, assess risks, conduct threat modeling, and […]
Cybersecurity jobs available right now: November 3, 2026 Read More »
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) 2026-11-02 at 17:58 By Zeljka Zorz CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaws chained to gain a foothold […]
Google disrupts XCPE botnet, bans the company behind it 2026-11-02 at 17:50 By Mirko Zorz Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high confidence to Videostrong Technology, the company that manufactured many of those boxes. More […]
Google disrupts XCPE botnet, bans the company behind it Read More »
AI-powered infostealer picks out the most profitable parts of your stolen data 2026-11-02 at 16:47 By Sinisa Markovic A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found. “There is a new […]
AI-powered infostealer picks out the most profitable parts of your stolen data Read More »
Second wave of refrigeration cyberattacks hits European supermarkets 2026-11-02 at 16:28 By Zeljka Zorz Three weeks after the attack that turned refrigeration units in French supermarkets into ovens overnight, similar cyberattacks have hit shops in other European countries and again caused refrigerated food to be spoiled. Belgium, Luxembourg and Sweden affected “[In Belgium,] fridges and […]
Second wave of refrigeration cyberattacks hits European supermarkets Read More »
Trezor warns some of its wallets may hide a seed-stealing implant 2026-11-02 at 14:48 By Sinisa Markovic A Trezor Safe 5 sold by CryptoBilis, the reseller linked to the recent Ledger wallet drains, may contain a hidden implant that steals the owner’s recovery phrase, Trezor has warned. Trezor is a Czech company and part of […]
Trezor warns some of its wallets may hide a seed-stealing implant Read More »
Chainalysis breached using “offensive agentic techniques” 2026-11-02 at 13:40 By Zeljka Zorz Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the incident is unrelated to the recent Binance hack. What was accessed? In October, the company detected external attackers using “offensive agentic […]
Chainalysis breached using “offensive agentic techniques” Read More »
FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users 2026-11-02 at 12:12 By Sinisa Markovic North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of […]
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work 2026-11-02 at 09:09 By Anamarija Pogorelec Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for […]
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work Read More »
The first ten lines of a command policy for AI coding agents 2026-11-02 at 08:30 By Mirko Zorz In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity […]
The first ten lines of a command policy for AI coding agents Read More »
Byoky: Open-source wallet for AI API keys 2026-11-02 at 08:00 By Anamarija Pogorelec Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps […]
Byoky: Open-source wallet for AI API keys Read More »
Product showcase: Trust Onion uses rotating codewords to verify callers 2026-11-02 at 07:30 By Anamarija Pogorelec Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I […]
Product showcase: Trust Onion uses rotating codewords to verify callers Read More »
Ransomware gang talked AI agents into doing much of its dirty work 2026-11-02 at 07:00 By Sinisa Markovic The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, […]
Ransomware gang talked AI agents into doing much of its dirty work Read More »
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability 2026-11-01 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them Moderators of r/opensource, Reddit’s catch-all forum for open source […]
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability Read More »
Assad regime hacker who caused $136 billion market drop sentenced to 42 months 2026-10-30 at 15:00 By Sinisa Markovic A Syrian man who used a hijacked news agency Twitter account to post a fake report of explosions at the White House has been sentenced to 42 months in prison, the US Department of Justice has […]
Assad regime hacker who caused $136 billion market drop sentenced to 42 months Read More »
Claude Code extension poisoned with persistent SSH backdoor 2026-10-30 at 13:15 By Sinisa Markovic A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The company spotted the malicious package, version 2.1.313, on Open VSX, an open-source marketplace […]
Claude Code extension poisoned with persistent SSH backdoor Read More »