News

Compromised camera management software gives attackers a way into corporate networks

Don't miss, Huntress, News, security cameras, SMBs /

Compromised camera management software gives attackers a way into corporate networks 2026-10-28 at 16:43 By Zeljka Zorz Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents in September and October back to a compromised application. An unidentified application The company’s analysts […]

Compromised camera management software gives attackers a way into corporate networks Read More »

345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD

breach, data breach, Data leak, Email, EU, Germany, News /

345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD 2026-10-28 at 16:28 By Sinisa Markovic Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October, […]

345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD Read More »

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police

Chainalysis, cybercrime, FBI, law enforcement, Lumen, National Crime Agency, News, Silent Push, US DoJ /

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police 2026-10-28 at 14:40 By Sinisa Markovic The FBI has seized virtualine.net, the domain of a bulletproof hosting provider that laundered money for its criminal customers and kept a forum trading in child sexual abuse material online despite repeated warnings from police and […]

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police Read More »

Tailscale fixes SSH flaws allowing lateral movement within tailnets

consumer, Don't miss, enterprise, Hot stuff, News, remote management, secure access, secure connectivity, SMBs, Tailscale, vulnerability /

Tailscale fixes SSH flaws allowing lateral movement within tailnets 2026-10-28 at 14:25 By Zeljka Zorz Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several vulnerabilities, including some in Tailscale SSH that could let an attacker who already had access to a device in […]

Tailscale fixes SSH flaws allowing lateral movement within tailnets Read More »

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator

arrest, cybercrime, law enforcement, News, Ransomware, US DoJ /

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator 2026-10-28 at 14:17 By Anamarija Pogorelec A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months in prison. Artem Stryzhak, 36, pleaded guilty in December 2025 to two counts of […]

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator Read More »

Data breach at Sony-owned internet provider compromises 2.6 million customer records

breach, data breach, Don't miss, Hot stuff, News, Sony /

Data breach at Sony-owned internet provider compromises 2.6 million customer records 2026-10-28 at 12:18 By Sinisa Markovic Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is […]

Data breach at Sony-owned internet provider compromises 2.6 million customer records Read More »

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA, cybersecurity, GitHub, Google Workspace, Government, Microsoft 365, News, open source, software, USA /

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to […]

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster Read More »

Bellini Capital CISO on AI security governance and the limits of patching faster

AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, strategy, tips /

Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams […]

Bellini Capital CISO on AI security governance and the limits of patching faster Read More »

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records

cybersecurity, Don't miss, GitHub, News, open source, software /

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records 2026-10-28 at 08:00 By Anamarija Pogorelec AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, […]

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records Read More »

NIST starts the countdown to retire quantum-vulnerable encryption

cybersecurity, Encryption, Government, News, NIST, quantum computing, report, security standard /

NIST starts the countdown to retire quantum-vulnerable encryption 2026-10-28 at 07:30 By Anamarija Pogorelec The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need […]

NIST starts the countdown to retire quantum-vulnerable encryption Read More »

Breach victims discover their data was held by companies they’ve never heard of

cyber insurance, data breach, financial industry, healthcare, Insurance, Kroll, News, report, supply chain /

Breach victims discover their data was held by companies they’ve never heard of 2026-10-28 at 07:00 By Anamarija Pogorelec Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and […]

Breach victims discover their data was held by companies they’ve never heard of Read More »

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

Aikido Security, CVE, cybersecurity, Google, Hot stuff, Imperva, News, Node.js, patch, Rapid7, Tenable, vulnerability /

Brotli bug reaches far beyond Node.js (CVE-2026-111497) 2026-10-27 at 19:38 By Zeljka Zorz A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js […]

Brotli bug reaches far beyond Node.js (CVE-2026-111497) Read More »

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support

Arctic Wolf Networks, cybercrime, email security, Microsoft Teams, News, social engineering /

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support 2026-10-27 at 16:16 By Sinisa Markovic Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more […]

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support Read More »

Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack

cyberattack, data breach, Don't miss, education, extortion, healthcare, Hot stuff, News, USA /

Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack 2026-10-27 at 14:24 By Zeljka Zorz University of New Mexico (UNM) Health Sciences Center (HSC), the academic medical arm of the University of New Mexico, has suffered a cyberattack that has temporarily disrupted the operation of its hospitals and may have resulted in a […]

Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack Read More »

CISA lays out plan to push cyber adversaries out of US critical infrastructure

CISA, critical infrastructure, cybersecurity, News, quantum computing, Risk Management, strategy /

CISA lays out plan to push cyber adversaries out of US critical infrastructure 2026-10-27 at 14:14 By Anamarija Pogorelec The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA 2030: Defend, Harden, Prevail, a strategy to strengthen national security and the resilience of critical infrastructure. It addresses intersecting cyber, physical, and geopolitical threats that can […]

CISA lays out plan to push cyber adversaries out of US critical infrastructure Read More »

Cyberattack on University of Copenhagen exposes data of 525,000 people

breach, cyberattack, data breach, education, EU, News /

Cyberattack on University of Copenhagen exposes data of 525,000 people 2026-10-27 at 13:39 By Sinisa Markovic The University of Copenhagen (UCPH) has ruled out a second cyberattack, saying the activity that led it to shut down several administrative systems on Monday is tied to the breach it disclosed last week, which exposed personal data belonging […]

Cyberattack on University of Copenhagen exposes data of 525,000 people Read More »

Private repos still leak secrets to Gheist, a stolen GitHub token campaign

cybercrime, cybersecurity, GitHub, News, research, Threat Intelligence, threats, Wiz /

Private repos still leak secrets to Gheist, a stolen GitHub token campaign 2026-10-27 at 12:58 By Mirko Zorz Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. The tool takes […]

Private repos still leak secrets to Gheist, a stolen GitHub token campaign Read More »

DreamHost incident triggers password resets, locks customers out of email and FTP accounts

Don't miss, Hot stuff, Incident Response, News, passwords, web hosting /

DreamHost incident triggers password resets, locks customers out of email and FTP accounts 2026-10-27 at 12:19 By Sinisa Markovic DreamHost has brought its File Manager back online after an incident that disrupted several of its services, though some of its customers still can’t get into their email or FTP accounts until someone sets a new […]

DreamHost incident triggers password resets, locks customers out of email and FTP accounts Read More »

Several AI security market categories are headed for bigger platforms

AI, cybersecurity, Don't miss, Features, Gartner, Hot stuff, News, opinion, predictions, security startup, strategy, tips /

Several AI security market categories are headed for bigger platforms 2026-10-27 at 08:30 By Mirko Zorz In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as […]

Several AI security market categories are headed for bigger platforms Read More »

Microsoft Authenticator vulnerability let rogue Android apps steal work account access

Android, Don't miss, Microsoft, News, security update, vulnerability disclosure /

Microsoft Authenticator vulnerability let rogue Android apps steal work account access 2026-10-27 at 08:14 By Mirko Zorz If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to […]

Microsoft Authenticator vulnerability let rogue Android apps steal work account access Read More »

Scroll to Top