News

LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)

AI, CISA, Don't miss, Horizon3.ai, Hot stuff, LLMs, News, open source, Proxy, vulnerability /

LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271) 2026-06-09 at 15:21 By Zeljka Zorz A command injection vulnerability (CVE-2026-42271) in BerryAI’s LiteLLM open-source AI gateway is being exploited by attackers, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed by adding the flaw to its Known Exploited Vulnerabilities catalog on Monday. About CVE-2026-42271 LiteLLM is […]

LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271) Read More »

Apple Intelligence can now replace weak passwords without user intervention

agentic AI, apple, authentication, cybersecurity, iOS, iPad, iPhone, macOS, News, password management, Privacy /

Apple Intelligence can now replace weak passwords without user intervention 2026-06-09 at 15:21 By Anamarija Pogorelec Apple’s next generation of Apple Intelligence, the company’s personal intelligence system, expands its capabilities and introduces new security features in Passwords. Automatically Fix Passwords (Source: Apple) Introduced as a standalone app in 2024, Passwords gives users a central place […]

Apple Intelligence can now replace weak passwords without user intervention Read More »

Google patches Chrome zero-day exploited in the wild (CVE-2026-11645)

0-day, Chrome, Google, News, security update /

Google patches Chrome zero-day exploited in the wild (CVE-2026-11645) 2026-06-09 at 15:21 By Sinisa Markovic Google has fixed 74 vulnerabilities in Chrome, including a high-severity zero-day (CVE-2026-11645) that has been exploited in the wild. “Google is aware that an exploit for CVE-2026-11645 exists in the wild,” the company said in a Monday security advisory. The […]

Google patches Chrome zero-day exploited in the wild (CVE-2026-11645) Read More »

Mythos Preview can weaponize N-day vulnerabilities in hours

Anthropic, cybersecurity, News, vulnerability disclosure /

Mythos Preview can weaponize N-day vulnerabilities in hours 2026-06-09 at 13:39 By Sinisa Markovic Mythos Preview can develop working exploits from newly disclosed software vulnerabilities in hours, cutting down a process that has historically taken days or weeks, according to Anthropic. Anthropic’s recent cybersecurity research has largely focused on zero-days, vulnerabilities unknown to software vendors. […]

Mythos Preview can weaponize N-day vulnerabilities in hours Read More »

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic

CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, strategy /

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic 2026-06-09 at 09:42 By Help Net Security The advent of AI-assisted vulnerability discovery and autonomous exploit development has brought about a new age in cybersecurity—one in which we can no longer rely on patching as a primary defense mechanism. […]

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic Read More »

The security questions around Chinese AI coding models in U.S. software

AI, Booz Allen Hamilton, China, code, code analysis, cybersecurity, LLMs, News, report, USA /

The security questions around Chinese AI coding models in U.S. software 2026-06-09 at 08:46 By Anamarija Pogorelec Software developers across the United States are using AI models built in China to write, debug, and review code, drawn by prices below those of American alternatives. These models carry risks for the security of American software, according […]

The security questions around Chinese AI coding models in U.S. software Read More »

Malware ships with bugs that defenders could use against it

Don't miss, Features, Hot stuff, Malware, News, research /

Malware ships with bugs that defenders could use against it 2026-06-09 at 08:46 By Anamarija Pogorelec Static analysis tools have spent years scanning legitimate software for security bugs before it goes out the door. The same scanners work on malware, and malware carries a steady supply of its own bugs. Researchers ran four of these […]

Malware ships with bugs that defenders could use against it Read More »

Treating AI agents like service accounts for federated query security

access control, agentic AI, AI, CISO, cybersecurity, Don't miss, Features, LLMs, News, opinion, strategy /

Treating AI agents like service accounts for federated query security 2026-06-09 at 08:46 By Mirko Zorz In this interview with Help Net Security, Paras Malhotra, CISO at Starburst, explains how the company handles data governance across federated query environments. Topics include layering Starburst’s access controls above native source permissions, tiering vendor risk across more than […]

Treating AI agents like service accounts for federated query security Read More »

Cybersecurity jobs available right now: June 9, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: June 9, 2026 2026-06-09 at 08:46 By Anamarija Pogorelec Application Security Architect INTENSITY Global Group | Israel | Hybrid – View job details As an Application Security Architect, you will design secure application architectures, perform threat modeling and security assessments, define security standards and controls, integrate security into the SDLC […]

Cybersecurity jobs available right now: June 9, 2026 Read More »

Meta claims NSO Group still targets WhatsApp users despite court order

Meta, News, nso group, spear-phishing, spyware, WhatsApp /

Meta claims NSO Group still targets WhatsApp users despite court order 2026-06-08 at 23:44 By Sinisa Markovic Meta claims it disrupted spear-phishing attempts linked to NSO Group and is asking a US federal court to hold the spyware vendor in contempt for allegedly violating an injunction that bars it from targeting WhatsApp and its users. […]

Meta claims NSO Group still targets WhatsApp users despite court order Read More »

Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows

cybersecurity, Endpoint Security, Microsoft, News, security update, update, Windows /

Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows 2026-06-08 at 20:33 By Sinisa Markovic Microsoft will distribute Defender for Endpoint EDR updates through Microsoft Update, enabling EDR security improvements to be released independently of monthly Windows operating system updates. The rollout started for Windows 10 devices in late May 2026 and […]

Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows Read More »

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)

0-day, Check Point, data theft, Don't miss, enterprise, Hot stuff, News, Ransomware, secure access, VPN, vulnerability /

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751) 2026-06-08 at 16:16 By Zeljka Zorz A Qilin ransomware affiliate is believed to be exploiting CVE-2026-50751, an authentication bypass vulnerability in Check Point VPN Remote Access and Mobile Access, the company announced on Monday. About CVE-2026-50751 Check Point Remote Access VPN enables and secures connections between […]

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751) Read More »

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)

CISA, Don't miss, enterprise, file transfer, Government, Hot stuff, News, SolarWinds, vulnerability /

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) 2026-06-08 at 14:07 By Zeljka Zorz A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers in the wild, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Friday. The agency has ordered US federal civilian […]

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) Read More »

OpenAI is locking down parts of ChatGPT to reduce data theft risks

AI, ChatGPT, cybersecurity, News, OpenAI, system hardening /

OpenAI is locking down parts of ChatGPT to reduce data theft risks 2026-06-08 at 13:09 By Anamarija Pogorelec OpenAI has started rolling out Lockdown Mode for ChatGPT, an optional security setting that restricts access to external resources and several product capabilities. It is available for personal accounts, including Free, Go, Plus, and Pro plans, as […]

OpenAI is locking down parts of ChatGPT to reduce data theft risks Read More »

When attacks spread too far: Lessons from real cyber attack case studies

attack, cybersecurity, Illumio, News, strategy, threats, tips, Video /

When attacks spread too far: Lessons from real cyber attack case studies 2026-06-08 at 13:09 By Help Net Security In this Help Net Security video, Michael Adjei, Director, Systems Engineering at Illumio, explains three real world cyber attacks and what went wrong during detection. Adjei walks through a collaboration tool scam that copied Microsoft Teams, […]

When attacks spread too far: Lessons from real cyber attack case studies Read More »

DockSec: Open-source AI-powered Docker security scanner

containers, Docker, Don't miss, GitHub, Hot stuff, News, open source, OWASP, scanner, software /

DockSec: Open-source AI-powered Docker security scanner 2026-06-08 at 13:09 By Mirko Zorz DockSec is an OWASP Incubator Project that combines three container security scanners with a language-model layer for explanation and remediation. Created by Advait Patel, the Python tool runs Trivy, Hadolint, and Docker Scout against a developer’s Dockerfile and image, correlates the findings, returns […]

DockSec: Open-source AI-powered Docker security scanner Read More »

Samsung just made Galaxy phones more secure in One UI 9 beta

Android, cybersecurity, mobile security, News, Samsung /

Samsung just made Galaxy phones more secure in One UI 9 beta 2026-06-08 at 12:13 By Anamarija Pogorelec Samsung’s One UI 9 beta integrates Lockdown mode into the power menu. This is the screen that contains Power off, Restart, and emergency options. Opening it initiates Lockdown mode, disabling biometric authentication. “We tried it out on […]

Samsung just made Galaxy phones more secure in One UI 9 beta Read More »

Google Colab CLI opens runtimes to Claude Code and Codex

GitHub, Google, News /

Google Colab CLI opens runtimes to Claude Code and Codex 2026-06-08 at 08:00 By Anamarija Pogorelec Google released the Google Colab Command-Line Interface, a tool that connects local terminals to remote Colab runtimes. The CLI provides an execution platform for developers and AI agents, letting users provision compute, run local Python scripts on remote runtimes, […]

Google Colab CLI opens runtimes to Claude Code and Codex Read More »

Scroll to Top