News

Anthropic’s new budget model gets much better at ignoring hidden commands

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Anthropic’s new budget model gets much better at ignoring hidden commands 2026-10-08 at 14:24 By Anamarija Pogorelec Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4.5, though lighter […]

Anthropic’s new budget model gets much better at ignoring hidden commands Read More »

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers

AI, botnet, Don't miss, GitHub, Hot stuff, Malware, News /

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers 2026-10-08 at 13:24 By Sinisa Markovic Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and […]

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Read More »

GitHub adds AI to catch passwords before a code push

agentic AI, AI, code, credentials, cybersecurity, DevSecOps, GitHub, News /

GitHub adds AI to catch passwords before a code push 2026-10-08 at 12:02 By Anamarija Pogorelec GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can […]

GitHub adds AI to catch passwords before a code push Read More »

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

backdoor, critical infrastructure, cybercrime, ESET, Malware, News, Russian Federation, Ukraine /

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor 2026-10-08 at 12:00 By Mirko Zorz ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in […]

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor Read More »

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

FBI, law enforcement, News, Ransomware, US DoJ, USA /

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims 2026-10-08 at 11:00 By Sinisa Markovic The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ backs and billing them far more than the ransom. Zohar Pinhasi (aka “Zack Silver” and “Zack […]

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims Read More »

Pricing your bad days and how to build an economic model for security decisions

boardroom, CISO, CXO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, News, Risk Management, strategy, tips /

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

Who watches the AI watching your street?

AI, CCTV, Don't miss, Features, Hot stuff, News, Privacy, research, security cameras, surveillance /

Who watches the AI watching your street? 2026-10-08 at 08:30 By Mirko Zorz Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting […]

Who watches the AI watching your street? Read More »

How AI can fix cybersecurity compliance: From dashboards to continuous execution

AI, Compliance, cybersecurity, Don't miss, Hot stuff, News, opinion /

How AI can fix cybersecurity compliance: From dashboards to continuous execution 2026-10-08 at 08:00 By Help Net Security Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative controls, monitor their […]

How AI can fix cybersecurity compliance: From dashboards to continuous execution Read More »

The people who know passkeys best are still typing passwords

authentication, cybersecurity, News, Okta, passwordless, passwords, report, Yubico /

The people who know passkeys best are still typing passwords 2026-10-08 at 07:30 By Anamarija Pogorelec Yubico and Okta asked 1,890 technology and security professionals across nine countries how they sign in to work accounts. The most common answer was a username and password, at 43%, from a group in which 87% said they were […]

The people who know passkeys best are still typing passwords Read More »

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

enterprise, IBM, Java, News, open source, Red Hat, vulnerability assessment, vulnerability management /

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws 2026-10-08 at 07:18 By Anamarija Pogorelec IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source code that companies already run in production. Companies running the […]

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws Read More »

Cisco quantum network controller lets apps order entanglement on demand

Cisco, networking, News, quantum computing /

Cisco quantum network controller lets apps order entanglement on demand 2026-10-08 at 01:33 By Anamarija Pogorelec Cisco has built a Quantum Network Controller, a research prototype that lets an application ask a quantum network for entanglement and leaves the network to work out the delivery. Entanglement, a linked quantum state shared between distant points, is […]

Cisco quantum network controller lets apps order entanglement on demand Read More »

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)

Atlassian, Atlassian Confluence, Atlassian Jira, CVE, Don't miss, exploit, Hot stuff, News, Previdian, vulnerability, WatchTowr /

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) 2026-10-07 at 17:21 By Zeljka Zorz One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have been spotted attempting to […]

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) Read More »

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

enterprise, FBI, firewall, Fortinet, News, SOCRadar /

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls 2026-10-07 at 16:43 By Sinisa Markovic Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The […]

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls Read More »

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains

certificates, Google, News /

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains 2026-10-07 at 14:10 By Sinisa Markovic Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by other large organizations, Google disclosed on Tuesday. Attackers compromised the third-party […]

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains Read More »

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

Don't miss, enterprise, Hot stuff, MSP, News, security update, SonicWall, vulnerability /

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) 2026-10-07 at 13:37 By Zeljka Zorz SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality […]

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) Read More »

Your Windows PC can now reach other PCs through Windows App

Microsoft, News, remote access, Windows /

Your Windows PC can now reach other PCs through Windows App 2026-10-07 at 13:22 By Anamarija Pogorelec Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App brings remote Windows devices […]

Your Windows PC can now reach other PCs through Windows App Read More »

ASOS confirms data breach after “hacked” app alert reaches shoppers

breach, cybercrime, data breach, Don't miss, EU, Hot stuff, Malwarebytes, News, NowSecure, UK /

ASOS confirms data breach after “hacked” app alert reaches shoppers 2026-10-07 at 12:29 By Sinisa Markovic UK fashion retailer ASOS has confirmed a data breach after a notification claiming hackers had broken into its data was sent to shoppers through its app. ASOS was founded in 2000 and has 16.5 million active customers in more […]

ASOS confirms data breach after “hacked” app alert reaches shoppers Read More »

Anthropic loosens Claude’s cyber restrictions for verified defenders

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, security controls /

Anthropic loosens Claude’s cyber restrictions for verified defenders 2026-10-07 at 12:00 By Anamarija Pogorelec Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work The program now has three tiers based […]

Anthropic loosens Claude’s cyber restrictions for verified defenders Read More »

AI Agent Gateway: Open-source tool keeps credentials out of agent configs

agentic AI, Claude Code, Don't miss, GitHub, News, open source, software, Tuskira /

AI Agent Gateway: Open-source tool keeps credentials out of agent configs 2026-10-07 at 08:30 By Anamarija Pogorelec Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model providers they send prompts to. […]

AI Agent Gateway: Open-source tool keeps credentials out of agent configs Read More »

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing

Encryption, News, open source, OpenSSH, software /

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing 2026-10-07 at 08:12 By Sinisa Markovic The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of security reports, […]

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing Read More »

Scroll to Top