News

Open-weight AI model GLM-5.3 cheated its way to correct answers

agentic AI, AI, Irregular, News, security testing /

Open-weight AI model GLM-5.3 cheated its way to correct answers 2026-10-30 at 11:23 By Anamarija Pogorelec Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints. The model refused none of the tasks and […]

Open-weight AI model GLM-5.3 cheated its way to correct answers Read More »

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record

Binance, Chainalysis, Crypto, Cryptocurrency, cyberattack, cybercrime, Don't miss, Hot stuff, News, North Korea /

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record 2026-10-30 at 10:26 By Sinisa Markovic About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s […]

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record Read More »

What exactly is ISOC? And what does it mean for you?

AI, cybersecurity, Don't miss, Hot stuff, News, opinion, SIEM, SOC, Stellar Cyber /

What exactly is ISOC? And what does it mean for you? 2026-10-30 at 08:36 By Help Net Security Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected […]

What exactly is ISOC? And what does it mean for you? Read More »

Fake IT help desk callers got by on little more than names and email addresses

attack, Cisco, Claude Code, cybercrime, cybersecurity, Don't miss, Malware, Microsoft Teams, News, Ransomware, report, scams, social engineering, threats, vishing, voice recognition /

Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]

Fake IT help desk callers got by on little more than names and email addresses Read More »

Smart TVs can harbor unpatched security flaws and track what you watch

Bitdefender, cybersecurity, Internet of Things, News, report, smart home, smart tv /

Smart TVs can harbor unpatched security flaws and track what you watch 2026-10-30 at 07:00 By Anamarija Pogorelec Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and […]

Smart TVs can harbor unpatched security flaws and track what you watch Read More »

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

0-day, China, CISA, Cisco, CrowdStrike, cyber espionage, Don't miss, DoS, Hot stuff, Linux, News, Palo Alto Networks, PHP2Shell, USA /

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 at 18:25 By Zeljka Zorz China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that […]

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls Read More »

Yoba malware hides in fake desktop versions of ChatGPT and Claude

ChatGPT, Claude Code, cybercrime, Malware, News /

Yoba malware hides in fake desktop versions of ChatGPT and Claude 2026-10-29 at 16:49 By Sinisa Markovic Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The researchers have been tracking the campaign, dubbed Yoba, […]

Yoba malware hides in fake desktop versions of ChatGPT and Claude Read More »

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

AI, Don't miss, Hot stuff, News, research, vulnerability /

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop 2026-10-29 at 16:10 By Mirko Zorz Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local […]

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop Read More »

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network

0-day, APT, attack tools, Cisco, critical infrastructure, cyber espionage, Don't miss, enterprise, Fortinet, government-backed attacks, Hot stuff, Internet of Things, Lumen, News, telecommunications, USA /

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network 2026-10-29 at 15:42 By Zeljka Zorz Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on […]

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network Read More »

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Defused, Don't miss, Hot stuff, News, Oracle, vulnerability /

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) 2026-10-29 at 15:12 By Sinisa Markovic Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote […]

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) Read More »

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws

agentic AI, AI, cybersecurity, Google, News, Wiz /

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws 2026-10-29 at 14:44 By Anamarija Pogorelec Google’s Gemini 4 Carbon is a frontier AI model designed for software engineering and cybersecurity tasks, with safeguards built on those of its predecessor, Argon. SEC-bench Pro (Source: Google) Google says its teams have seen […]

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws Read More »

Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop

Linux, News, Ubuntu /

Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop 2026-10-29 at 14:24 By Anamarija Pogorelec Canonical has restarted work on Ubuntu Core Desktop, the immutable and attestable version of Ubuntu that the company says will over time become the default Ubuntu desktop. Jon Seager, Canonical’s VP of engineering, laid out the plan […]

Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop Read More »

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents

data breach, Data leak, DHS, Don't miss, Hacktivism, Hot stuff, News, USA /

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents 2026-10-29 at 12:16 By Sinisa Markovic Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist group calling itself the Department of Peace. The group handed the data to the transparency collective […]

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

automation, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, Qualys, strategy, tips, vulnerability management /

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

IT bosses are confident they’ve found the certificates they don’t know about

authentication, certificates, Encryption, News, report, Sectigo, SSL/TLS /

IT bosses are confident they’ve found the certificates they don’t know about 2026-10-29 at 08:00 By Mirko Zorz Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere. […]

IT bosses are confident they’ve found the certificates they don’t know about Read More »

Shame and sleepless nights haunt scam victims long after the money is gone

cybercriminals, fraud, identity theft, Identity Theft Resource Center, News, report, scams /

Shame and sleepless nights haunt scam victims long after the money is gone 2026-10-29 at 07:30 By Anamarija Pogorelec Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims often struggle with shame and self-blame, while identity theft […]

Shame and sleepless nights haunt scam victims long after the money is gone Read More »

Stolen staff logins are spreading attacks between K-12 school districts

Center for Internet Security, cybersecurity, education, Government, News, report, USA /

Stolen staff logins are spreading attacks between K-12 school districts 2026-10-29 at 07:00 By Mirko Zorz Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces. That’s 808 of the center’s […]

Stolen staff logins are spreading attacks between K-12 school districts Read More »

GitHub’s npm package firewall can block brand-new versions before they install

Don't miss, firewall, GitHub, News, software development /

GitHub’s npm package firewall can block brand-new versions before they install 2026-10-28 at 19:09 By Mirko Zorz GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. […]

GitHub’s npm package firewall can block brand-new versions before they install Read More »

I underestimated how fast security teams would trust AI to act in the SOC

AI, CISO, Don't miss, Exaforce, Expert analysis, Hot stuff, News, opinion, SOC /

I underestimated how fast security teams would trust AI to act in the SOC 2026-10-28 at 17:25 By Help Net Security For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow […]

I underestimated how fast security teams would trust AI to act in the SOC Read More »

Scroll to Top