Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]
Three questions a hospital CISO should ask a healthcare fintech vendor Read More »
Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]
Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »
How RMM abuse gives attackers a way in that looks like business as usual 2026-10-05 at 07:30 By Sinisa Markovic Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the first quarter of 2026. The security company also ranked 11 attack tactics by how […]
How RMM abuse gives attackers a way in that looks like business as usual Read More »
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited 2026-10-04 at 11:00 By Sinisa Markovic Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data A flaw in Titan, an internal […]
AI is giving attackers a head start, Microsoft warns 2026-10-02 at 15:47 By Sinisa Markovic Threat actors are using AI to find bugs, build malware and run intrusions faster than defenders can keep up. Microsoft’s 2026 Digital Defense Report, covering July 2025 to June 2026, describes a near-term period in which attackers collect the benefits […]
AI is giving attackers a head start, Microsoft warns Read More »
Chinese spies impersonate White House, Anthropic figures to phish AI policy experts 2026-10-02 at 13:21 By Sinisa Markovic A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, Proofpoint have found. The group, which the […]
Chinese spies impersonate White House, Anthropic figures to phish AI policy experts Read More »
Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) 2026-10-02 at 11:50 By Sinisa Markovic Fortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported to be exploited in the wild, and urges customers to apply the workaround it shared until […]
Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) Read More »
Criminal recruiters want people on your payroll 2026-10-02 at 09:00 By Anamarija Pogorelec Legitimate employee access can let criminals circumvent security controls that would be difficult to overcome from outside an organization. Routine actions such as information lookups, account resets, transaction approvals and shipment changes can become services sold to criminal customers, according to Intel […]
Criminal recruiters want people on your payroll Read More »
Android 17 makes it harder for spyware to cover its tracks 2026-10-02 at 08:30 By Anamarija Pogorelec When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in Android 17, including one that keeps a copy […]
Android 17 makes it harder for spyware to cover its tracks Read More »
Botnets, adversarial attacks and data poisoning top leaders’ AI threat list 2026-10-02 at 08:00 By Sinisa Markovic Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934 business and technology leaders in 71 countries between May and July 2026. Half […]
Botnets, adversarial attacks and data poisoning top leaders’ AI threat list Read More »
AI agents keep access to company data after their work is done 2026-10-02 at 07:30 By Anamarija Pogorelec IT teams responsible for identity security are concerned about AI agents’ ongoing access to company systems and the actions they take on users’ behalf, according to a Delinea’s 2026 Identity Security Report: The AI Enforcement Gap. “Written […]
AI agents keep access to company data after their work is done Read More »
New infosec products of the week: October 2, 2026 2026-10-02 at 07:00 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from BlackFog, Genea, Vega, and Thales. Vega II brings security-trained AI and lasting memory to the SOC Vega has introduced Vega II, its biggest platform release […]
New infosec products of the week: October 2, 2026 Read More »
16-year-old suspected leader of KillSec ransomware group arrested 2026-10-01 at 16:59 By Sinisa Markovic A 16-year-old is suspected of being the main operator of KillSec, a ransomware group that Eurojust says is responsible for almost 1,000 attacks worldwide. Seizure notice (Source: Eurojust) According to Eurojust, KillSec has been active since 2024. The group got into […]
16-year-old suspected leader of KillSec ransomware group arrested Read More »
New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) 2026-10-01 at 13:18 By Zeljka Zorz For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a […]
New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) Read More »
Some car apps are slipping owners’ data to big tech companies 2026-10-01 at 12:52 By Sinisa Markovic The app that comes with your car may be sharing what it knows about you with some of the biggest tech companies. Northeastern University researchers tested 21 vehicles and 30 carmaker apps and found some sending vehicle identification […]
Some car apps are slipping owners’ data to big tech companies Read More »
Many expect AI in the SOC to make entry jobs harder to get 2026-10-01 at 08:30 By Mirko Zorz A junior analyst in a security operations center, or SOC, has usually learned the job the slow way. You work the same phishing lure dozens of times, chase the same familiar malware pattern and write up […]
Many expect AI in the SOC to make entry jobs harder to get Read More »
Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators 2026-09-30 at 23:34 By Sean Shirley With contributions from James Rodriguez, Gus Staminatos, and Timmy Lister. This article is an excerpt from LevelBlue SpiderLabs Blog View Original Source
Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators Read More »
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772) 2026-09-30 at 15:33 By Zeljka Zorz “Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the two recently disclosed NetScaler vulnerabilities that have been exploited as zero-days, says Mandiant CTO Charles Carmakal. Mandiant and […]
AI coding agents leaked 13,000 internal company screenshots to public GitHub repos 2026-09-30 at 14:52 By Sinisa Markovic When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots […]
AI coding agents leaked 13,000 internal company screenshots to public GitHub repos Read More »
OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised 2026-09-30 at 13:39 By Zeljka Zorz Attackers have compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe, the regional hub of the OpenInfra Foundation warned in a security notice prominently displayed on its homepage. OpenInfra Europe’s security incident notice “Anyone who downloaded or installed artifacts […]
OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised Read More »