News

Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)

CISA, Don't miss, enterprise, Hot stuff, monitoring, News, Resecurity, SIEM, Splunk, vulnerability /

Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253) 2026-06-19 at 13:50 By Zeljka Zorz CISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploited Vulnerabilities catalog, and ordered US federal civilian agencies to apply mitigations by June 21, 2026. In-the-wild exploitation has also been confirmed by the vendor […]

Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253) Read More »

Forget traffic lights, Google’s reCAPTCHA may ask for hand gestures

data collection, fraud, Google, Google Cloud, identity protection, News /

Forget traffic lights, Google’s reCAPTCHA may ask for hand gestures 2026-06-19 at 13:46 By Anamarija Pogorelec Google has introduced hand gesture verification for reCAPTCHA, a new method for verifying that a user is human. Google’s reCAPTCHA is part of Google Cloud Fraud Defense, a fraud and abuse prevention platform for bot, account, and transaction protection. […]

Forget traffic lights, Google’s reCAPTCHA may ask for hand gestures Read More »

Mastodon 4.6 adds profile Collections and two-factor controls

News, social media, social networking /

Mastodon 4.6 adds profile Collections and two-factor controls 2026-06-19 at 12:54 By Anamarija Pogorelec People who run accounts on the open source social network Mastodon can now group profiles together and share those groups across the web. The 4.6 release centers on a feature called Collections, along with reworked profiles, email newsletters, server administration controls, […]

Mastodon 4.6 adds profile Collections and two-factor controls Read More »

Google sets timeline for Android developer verification enforcement

Android, Google, identity verification, News, software development /

Google sets timeline for Android developer verification enforcement 2026-06-19 at 12:10 By Anamarija Pogorelec Android’s developer verification protections will take effect on September 30, 2026, starting with users in Brazil, Indonesia, Singapore, and Thailand. Developers distributing apps through participating stores in those markets must complete the verification process by the deadline. Google Play, HONOR App […]

Google sets timeline for Android developer verification enforcement Read More »

Your browser tab could become encrypted storage for someone else’s files

browser, cybersecurity, data, Don't miss, Encryption, Features, Hot stuff, News, research, storage /

Your browser tab could become encrypted storage for someone else’s files 2026-06-19 at 08:30 By Mirko Zorz Decentralized storage networks already hand pieces of people’s data to strangers’ machines. The lasting question across these networks is whether the machine holding the data can read it. A research paper by Gregory Magarshak, a professor at IENYC, […]

Your browser tab could become encrypted storage for someone else’s files Read More »

Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned

Don't miss, Hot stuff, Infoblox, law enforcement, Malware, News, Proofpoint, WordPress /

Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned 2026-06-18 at 17:21 By Zeljka Zorz SocGholish, an operation that’s been delivering malware to users via fake software updates, has suffered a major blow: the international law enforcement coalition behind Operation Endgame has taken down 106 of its servers and domains, and cleaned up nearly […]

Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned Read More »

Malware attacks strip Roblox developers of entire games

cybercrime, Kaspersky, Malware, News, online gaming, social engineering /

Malware attacks strip Roblox developers of entire games 2026-06-18 at 15:41 By Sinisa Markovic Hackers who once focused on stealing valuable Roblox items are now taking over entire games. Although Roblox operates the service, users can create and publish their own games on it. Successful games can generate substantial revenue through in-game purchases. Some developers […]

Malware attacks strip Roblox developers of entire games Read More »

74,000 Fortinet firewall credentials exposed in FortiBleed data leak

credentials, critical infrastructure, Data leak, data theft, Don't miss, enterprise, firewall, Fortinet, Government, Hot stuff, Hudson Rock, News, VPN /

74,000 Fortinet firewall credentials exposed in FortiBleed data leak 2026-06-18 at 15:10 By Zeljka Zorz A Russian-speaking cybercriminal group has stolen credentials contained in the configuration files of nearly 74,000 Fortinet firewalls and VPN gateways around the world. The data was accidentally exposed by the group on a server, along with other artifacts and tools, […]

74,000 Fortinet firewall credentials exposed in FortiBleed data leak Read More »

GentleKiller targets more than 400 security processes across 48 products

cybercrime, Don't miss, Endpoint Security, ESET, Malware, News, Ransomware, research /

GentleKiller targets more than 400 security processes across 48 products 2026-06-18 at 12:00 By Anamarija Pogorelec Most ransomware operations leave the work of disabling endpoint security software to their affiliates. The ransomware-as-a-service gang Gentlemen runs a different model. Its operators develop and maintain a set of tools for shutting down endpoint detection and response (EDR) […]

GentleKiller targets more than 400 security processes across 48 products Read More »

Securing digital keys when your phone unlocks the car

authentication, automotive security, car, Car Connectivity Consortium, Don't miss, Features, hardware, Hot stuff, Internet of Things, News, opinion /

Securing digital keys when your phone unlocks the car 2026-06-18 at 09:00 By Mirko Zorz In this interview with Help Net Security, Alysia Johnson, President of the Car Connectivity Consortium (CCC), explains how the CCC Digital Key has grown from a single-brand feature into a standard meant to work across phones, automakers, and suppliers. She […]

Securing digital keys when your phone unlocks the car Read More »

How security teams are getting credential visibility into developer endpoints

Don't miss, GitGuardian, News /

How security teams are getting credential visibility into developer endpoints 2026-06-18 at 08:30 By Help Net Security As we noted in our earlier analysis, attackers already know secrets are on your developers’ machines, the only question is whether security teams do. The supply chain attack calendar of 2026 has been relentless. Megalodon backdoored 5,500 GitHub […]

How security teams are getting credential visibility into developer endpoints Read More »

What happens to oversight when AI agents write a lab’s own code

agentic AI, AI, cybersecurity, Don't miss, News, research /

What happens to oversight when AI agents write a lab’s own code 2026-06-18 at 08:00 By Mirko Zorz Inside the labs building frontier AI, a growing share of the coding gets done by the AI itself. These agents write, edit, and run software with light human oversight between steps, and they reach into production infrastructure, […]

What happens to oversight when AI agents write a lab’s own code Read More »

AWS Continuum brings AI models to code vulnerability management

AI, AWS, News, vulnerability management /

AWS Continuum brings AI models to code vulnerability management 2026-06-18 at 07:33 By Sinisa Markovic AWS Continuum for code vulnerabilities, a system built to handle a vulnerability across its lifecycle, from discovery through to a fix, is now available in gated preview. It reasons over a customer’s environment, confirms which findings are real, and works […]

AWS Continuum brings AI models to code vulnerability management Read More »

Homebrew tightens tap security, begins work on its interface

News, open source, software /

Homebrew tightens tap security, begins work on its interface 2026-06-18 at 07:30 By Anamarija Pogorelec Anyone who installs software through a third-party Homebrew tap runs Ruby code written by people outside the project, and that code runs without a sandbox. That risk sits at the center of Homebrew 6.0.0. Tap trust Homebrew now requires a […]

Homebrew tightens tap security, begins work on its interface Read More »

Most agentic AI projects in production have stalled over data problems

AI, automation, Confluent, cybersecurity, data, LLMs, News, report /

Most agentic AI projects in production have stalled over data problems 2026-06-18 at 07:00 By Anamarija Pogorelec Enterprises are connecting AI agents to live data feeds and putting them to work on tasks that once required human review, from IT operations to software development. The number doing this in production reached 32 percent in 2026, […]

Most agentic AI projects in production have stalled over data problems Read More »

Low-skilled attacker used Claude, Codex to breach 14 companies

agentic AI, attack, attack tools, Claude Code, cybersecurity, Don't miss, Hot stuff, LLMs, News, research /

Low-skilled attacker used Claude, Codex to breach 14 companies 2026-06-17 at 18:43 By Zeljka Zorz Researchers have long warned that AI agents could lower the skill floor for offensive cyber operations, and a recent report by OALABS (Open Analysis) researchers bears that out. After recovering and analyzing over 1,000 agent sessions from a compromised server […]

Low-skilled attacker used Claude, Codex to breach 14 companies Read More »

Another healthcare firm attacked days after Novo Nordisk breach

breach, cyberattack, cybercrime, data theft, healthcare, News /

Another healthcare firm attacked days after Novo Nordisk breach 2026-06-17 at 17:51 By Sinisa Markovic Medical technology company iRhythm Holdings disclosed a cyberattack involving certain third-party-hosted business applications that resulted in the theft of patient protected health information, proprietary data, and other personal data. The company discovered unauthorized activity on June 8, 2026, and launched […]

Another healthcare firm attacked days after Novo Nordisk breach Read More »

Rokarolla Android trojan targets banking and crypto users, enables device takeover

Android, Cryptocurrency, cybercrime, mobile devices, mobile security, News, online banking, trojan, Zimperium /

Rokarolla Android trojan targets banking and crypto users, enables device takeover 2026-06-17 at 16:23 By Sinisa Markovic A newly discovered Android banking trojan, dubbed Rokarolla, targets 217 banking and cryptocurrency applications and can execute 137 commands on infected devices, according to researchers at Zimperium. Named after its command-and-control (C2) infrastructure, Rokarolla is primarily distributed through […]

Rokarolla Android trojan targets banking and crypto users, enables device takeover Read More »

Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656)

0-day, Don't miss, exploit, Hot stuff, Microsoft, Microsoft Defender, News, vulnerability disclosure /

Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) 2026-06-17 at 14:26 By Zeljka Zorz Microsoft has acknowledged the local elevation of privilege issue in Microsoft Defender that can be triggered via the “RoguePlanet” exploit, and is “working to provide a high quality security update that addresses this vulnerability.” The vulnerability, which has been assigned […]

Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) Read More »

What’s new in Android 17? Anti-theft tools, scam detection, and parental controls

Android, cybersecurity, Google, location tracking, News, Privacy, software development /

What’s new in Android 17? Anti-theft tools, scam detection, and parental controls 2026-06-17 at 13:40 By Anamarija Pogorelec The Android 17 rollout has started for supported Pixel devices, delivering new security and privacy capabilities before expanding to other devices later this year. Security and privacy updates Google has improved location privacy features so users can […]

What’s new in Android 17? Anti-theft tools, scam detection, and parental controls Read More »

Scroll to Top