News

Low-cost Android phones are arriving with malware that owners can’t uninstall

Android, Bitdefender, Don't miss, Hot stuff, Malware, mobile apps, mobile security, News /

Low-cost Android phones are arriving with malware that owners can’t uninstall 2026-10-12 at 13:53 By Sinisa Markovic People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different […]

Low-cost Android phones are arriving with malware that owners can’t uninstall Read More »

Hidden implant in Ledger hardware wallets linked to $93M theft

Cryptocurrency, digital wallet, Don't miss, Hot stuff, Ledger, News, supply chain compromise /

Hidden implant in Ledger hardware wallets linked to $93M theft 2026-10-12 at 12:46 By Zeljka Zorz Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed […]

Hidden implant in Ledger hardware wallets linked to $93M theft Read More »

Windows PCs missing key updates could lose security fixes in 2027

certificates, cybersecurity, Microsoft, News, security update, Windows /

Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]

Windows PCs missing key updates could lose security fixes in 2027 Read More »

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027

certificates, Encryption, Let's Encrypt, News /

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 2026-10-12 at 10:23 By Sinisa Markovic Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from […]

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

Strands Box: Open-source sandbox for AI agents

agentic AI, AWS, Don't miss, GitHub, Hot stuff, News, open source, software /

Strands Box: Open-source sandbox for AI agents 2026-10-12 at 08:30 By Mirko Zorz AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple […]

Strands Box: Open-source sandbox for AI agents Read More »

AI vulnerability patching has a grading problem

agentic AI, AI, cybersecurity, Don't miss, News, patching, research, vulnerability assessment /

AI vulnerability patching has a grading problem 2026-10-12 at 07:45 By Anamarija Pogorelec Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that […]

AI vulnerability patching has a grading problem Read More »

What makes some open source updates so difficult?

cybersecurity, Google, News, open source, report, software development /

What makes some open source updates so difficult? 2026-10-12 at 07:00 By Anamarija Pogorelec Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open […]

What makes some open source updates so difficult? Read More »

Week in review: FortiBleed is still active, Patch Tuesday forecast

News, Week in review /

Week in review: FortiBleed is still active, Patch Tuesday forecast 2026-10-11 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at […]

Week in review: FortiBleed is still active, Patch Tuesday forecast Read More »

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring

CVE, Don't miss, Hot stuff, News, NVIDIA, vulnerability /

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring 2026-10-09 at 16:27 By Sinisa Markovic Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the monitoring service and may disrupt AI workloads, according to Lava. Lava reported the flaw to […]

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring Read More »

Anthropic offers free AI security scans to open-source maintainers

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, open source, scanner /

Anthropic offers free AI security scans to open-source maintainers 2026-10-09 at 12:55 By Anamarija Pogorelec Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when […]

Anthropic offers free AI security scans to open-source maintainers Read More »

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks

botnet, China, CISA, critical infrastructure, cyber espionage, Don't miss, FBI, Hot stuff, News, USA /

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »

Product showcase: SimpleLogin keeps your email address private with aliases

email security, identity protection, News, Product showcase, Proton /

Product showcase: SimpleLogin keeps your email address private with aliases 2026-10-09 at 11:51 By Anamarija Pogorelec SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over where their primary email address is shared. The service is open source […]

Product showcase: SimpleLogin keeps your email address private with aliases Read More »

October 2026 Patch Tuesday forecast: Time for an Office cleanup

Adobe, apple, Expert analysis, Google, Ivanti, Microsoft, Mozilla, News, Patch Tuesday /

October 2026 Patch Tuesday forecast: Time for an Office cleanup 2026-10-09 at 09:32 By Help Net Security September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs […]

October 2026 Patch Tuesday forecast: Time for an Office cleanup Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

backdoor, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, Linux, Malware, News, opinion, Rapid7, Threat Intelligence /

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

CISO, critical infrastructure, cybersecurity, Don't miss, EU, Europe, Features, hardware, Hot stuff, ICS/SCADA, News, research, vulnerability assessment /

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

PCI SSC calls for human approval of AI agent actions involving cardholder data

AI, Encryption, guidelines, News, passwords, PCI SSC, security controls /

PCI SSC calls for human approval of AI agent actions involving cardholder data 2026-10-09 at 08:00 By Anamarija Pogorelec The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, […]

PCI SSC calls for human approval of AI agent actions involving cardholder data Read More »

Companies want autonomous IT operations but hesitate to let AI act alone

agentic AI, AI, automation, cybersecurity, News, Riverbed, security operations /

Companies want autonomous IT operations but hesitate to let AI act alone 2026-10-09 at 07:30 By Anamarija Pogorelec Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say […]

Companies want autonomous IT operations but hesitate to let AI act alone Read More »

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls

cybercrime, FBI, France, law enforcement, News, US DoJ /

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls 2026-10-08 at 15:51 By Sinisa Markovic The FBI and French law enforcement have seized two websites that sold hacked and stolen sexually explicit images and videos of young women and girls, and arrested their suspected administrator in northern France. Seizure notice (Source: […]

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls Read More »

Scroll to Top