OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing 2026-10-07 at 08:12 By Sinisa Markovic The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of security reports, […]
AI endpoint management: Visibility, compliance, and remediation 2026-10-07 at 08:00 By Help Net Security Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and rising compliance pressure mean security teams manage more devices, more software, and more exceptions than a […]
AI endpoint management: Visibility, compliance, and remediation Read More »
Even with OT network visibility, critical infrastructure operators struggle with legacy equipment 2026-10-07 at 07:50 By Anamarija Pogorelec Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That is the picture from a Palo Alto Networks survey of more than […]
Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]
Automation, AI agents or people? Sorting out who handles each security finding Read More »
Rogue OpenAI agents made unauthorized Wikipedia edits and millions of requests to Wikimedia 2026-10-06 at 16:49 By Sinisa Markovic Rogue OpenAI agents made unauthorized edits on Wikimedia wikis and sent millions of automated requests to Wikimedia’s public APIs, traffic that may have contributed to a partial outage of the Wikidata Query Service in May, the […]
U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]
U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »
Reflection’s Beam trails top open models on coding tests but claims lower inference compute 2026-10-06 at 08:22 By Anamarija Pogorelec Reflection AI has built Beam, a 501-billion-parameter open-weight model for coding and agent tasks, and plans to publish the weights under an Apache 2.0 license later this month. Open-weight means developers can download the trained […]
NIS2 compliance: 7 low-cost steps to secure credentials 2026-10-06 at 08:00 By Help Net Security Security budgets rarely stretch to cover a full NIS2 programme in one pass. Credential controls are where a constrained team can start, because they make access visible, revocable, and reviewable without new infrastructure. NIS2 compliance rests on risk-management measures that […]
NIS2 compliance: 7 low-cost steps to secure credentials Read More »
Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks 2026-10-06 at 07:30 By Anamarija Pogorelec Webroot Mobile Security combines device security checks, Safari protection, text scam filtering, and data breach monitoring. It is available for iPhone, iPad, and Android devices. The app requires an active Webroot subscription and is […]
Cybersecurity jobs available right now: October 6, 2026 2026-10-06 at 07:00 By Anamarija Pogorelec Associate IAM Engineer New York City Office of Technology & Innovation | USA | On-site – View job details As an Associate IAM Engineer, you will support daily identity and access management operations in Microsoft Entra ID and related platforms. You […]
Cybersecurity jobs available right now: October 6, 2026 Read More »
CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779) 2026-10-05 at 17:53 By Zeljka Zorz CISA has added another Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on Sunday: CVE-2026-88779, a memory overflow bug that may cripple vulnerable NetScaler ADCs and Gateways. “Citrix has observed targeted attacks on unmitigated NetScaler deployments which […]
CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779) Read More »
Fake brand discounts on social media prey on shoppers’ fear of missing out 2026-10-05 at 16:55 By Sinisa Markovic Cybercriminals are using fake discounts posted on Facebook and TikTok to lure shoppers to phishing sites that steal their payment card details and one-time passwords, Group-IB has warned. The phishing kit called Milk Dragon (also known […]
Fake brand discounts on social media prey on shoppers’ fear of missing out Read More »
Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940) 2026-10-05 at 13:38 By Zeljka Zorz Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access […]
Detained ShinyHunters hacker reportedly helping FBI track down fellow members 2026-10-05 at 13:36 By Sinisa Markovic A suspected ShinyHunters member known as Rey has been detained in Jordan and is reportedly helping the FBI track down the rest of the group. Reuters reports that Jordanian authorities detained Saif al-Din Khader, alias Rey, last week, with […]
Detained ShinyHunters hacker reportedly helping FBI track down fellow members Read More »
MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board 2026-10-05 at 12:50 By Mirko Zorz CircuitMess, a Croatian electronics kit maker, is selling MAKERphone 2.0, a build-it-yourself 4G phone on Kickstarter that buyers program in MicroPython or Arduino C++ and extend with plug-in hardware. Insert a SIM and it makes real […]
MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board Read More »
Apple tightens macOS disk access as AI agents become more powerful 2026-10-05 at 11:11 By Anamarija Pogorelec Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company […]
Apple tightens macOS disk access as AI agents become more powerful Read More »
AI slop submissions force Google to freeze its open-source bug bounty 2026-10-05 at 10:37 By Sinisa Markovic Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who review them. The rules page […]
AI slop submissions force Google to freeze its open-source bug bounty Read More »
Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]
Three questions a hospital CISO should ask a healthcare fintech vendor Read More »
Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]
Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »
How RMM abuse gives attackers a way in that looks like business as usual 2026-10-05 at 07:30 By Sinisa Markovic Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the first quarter of 2026. The security company also ranked 11 attack tactics by how […]
How RMM abuse gives attackers a way in that looks like business as usual Read More »