News

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)

APT, Cisco, Don't miss, firewall, Hot stuff, News, Ransomware, vulnerability /

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) 2026-09-10 at 14:22 By Zeljka Zorz State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple Cisco Secure Firewall devices across a network. Two FMC vulnerabilities under […]

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) Read More »

WordPress adds automated security checks to block risky plugin releases

automation, cybersecurity, News, plugin, WordPress /

WordPress adds automated security checks to block risky plugin releases 2026-09-10 at 13:06 By Anamarija Pogorelec WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API. Releases considered a potential security risk will be blocked automatically. “A plugin can be secure today and introduce a vulnerability, […]

WordPress adds automated security checks to block risky plugin releases Read More »

Fake GTA 6 download delivers malware-packed bundle to impatient gamers

cybercrime, Don't miss, game, Hot stuff, Huntress, Malware, News, scams /

Fake GTA 6 download delivers malware-packed bundle to impatient gamers 2026-09-10 at 12:51 By Sinisa Markovic Grand Theft Auto VI (GTA 6) is still three months from release, but cybercriminals are not waiting for the launch date. Security firm Huntress found malware disguised as a leaked copy of the game, aimed at fans hoping to […]

Fake GTA 6 download delivers malware-packed bundle to impatient gamers Read More »

Apple is building photo verification for the people who need it most

apple, cybersecurity, Don't miss, hardware, iPhone, News /

Apple is building photo verification for the people who need it most 2026-09-10 at 11:18 By Anamarija Pogorelec Apple has introduced Apple Reference Image, an opt-in feature designed to verify the authenticity of photos taken with iPhone 18 Pro models. Apple Reference Image provides users with an unalterable reference photo, visually confirming what the sensor […]

Apple is building photo verification for the people who need it most Read More »

Cybercriminals are building phishing pages that exist only inside victims’ browsers

Barracuda Networks, cybercrime, Microsoft Teams, News, phishing /

Cybercriminals are building phishing pages that exist only inside victims’ browsers 2026-09-10 at 10:14 By Sinisa Markovic A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a […]

Cybercriminals are building phishing pages that exist only inside victims’ browsers Read More »

Product showcase: GitGuardian Honeytoken catches credential theft as it happens

credentials, Don't miss, GitGuardian, Hot stuff, News, Product showcase /

Product showcase: GitGuardian Honeytoken catches credential theft as it happens 2026-09-10 at 08:30 By Help Net Security Credential harvesting on developer machines has widened. Earlier infostealers worked from a short list of known targets, mostly browser stores and a few cloud credential paths. The families active now cast a much wider net. Shai-Hulud, for instance, […]

Product showcase: GitGuardian Honeytoken catches credential theft as it happens Read More »

AI adoption brings new security headaches for already stretched CISOs

AI, boardroom, CISO, cybersecurity, identity protection, News, Proofpoint, report /

AI adoption brings new security headaches for already stretched CISOs 2026-09-10 at 07:30 By Anamarija Pogorelec CISOs are taking on AI governance without a matching increase in resources or expertise, adding to an already broad remit spanning data protection, identity, resilience and compliance, according to Proofpoint’s 2026 Voice of the CISO report. The Al mandate […]

AI adoption brings new security headaches for already stretched CISOs Read More »

A new open standard locks AI weights to approved hardware

AI, enterprise, hardware, News, Opaque, open source, Python, standards /

A new open standard locks AI weights to approved hardware 2026-09-10 at 07:10 By Anamarija Pogorelec OPAQUE, a confidential computing company that runs AI workloads inside hardware-isolated environments so operators cannot inspect them, released an open standard that lets AI model builders decide when and where their weights can be decrypted once those weights leave […]

A new open standard locks AI weights to approved hardware Read More »

Kevin Mandia joins the Amazon board with 30-plus years in cybersecurity

Amazon, boardroom, CXO, Mandiant, News /

Kevin Mandia joins the Amazon board with 30-plus years in cybersecurity 2026-09-10 at 07:03 By Mirko Zorz Amazon elected Kevin Mandia to its Board of Directors on September 8. Mandia founded Mandiant and served as its CEO before Google acquired the firm in September 2022, and he has worked against cyber threats in the public […]

Kevin Mandia joins the Amazon board with 30-plus years in cybersecurity Read More »

OpenSSL’s new alpha build speeds up post-quantum crypto

Encryption, News, open source, OpenSSL, software, SSL/TLS /

OpenSSL’s new alpha build speeds up post-quantum crypto 2026-09-10 at 01:15 By Sinisa Markovic The OpenSSL project released the first alpha of OpenSSL 4.1.0, giving developers an early look at a version built for encrypted communication over unreliable connections and faster post-quantum cryptography. This marks the opening test build for a version still months from […]

OpenSSL’s new alpha build speeds up post-quantum crypto Read More »

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle

Cryptocurrency, cybercrime, News, social engineering, US DoJ, USA /

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle 2026-09-09 at 15:11 By Sinisa Markovic A 22-year-old man built his fortune by breaking into strangers’ digital wallets, then spent it on nightclub tabs, private jets, and a fleet of cars worth millions. Malone Lam, a Singapore citizen, pleaded guilty this week in a Washington […]

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle Read More »

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory

F5 Networks, Malware, News, rootkits, Sophos /

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory 2026-09-09 at 14:05 By Sinisa Markovic A rootkit found on hacked F5 BIG-IP APM devices skips the usual step of writing a web shell to disk, hiding it in memory instead, according to Sophos. F5 BIG-IP APM provides access policy enforcement […]

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory Read More »

Chinese AI firms are siphoning capabilities from American models, CISA warns

AI, China, CISA, cybersecurity, FBI, Government, guidelines, News, NSA /

Chinese AI firms are siphoning capabilities from American models, CISA warns 2026-09-09 at 12:55 By Anamarija Pogorelec China-based AI companies are using large-scale knowledge distillation campaigns to copy capabilities from leading U.S. AI models, according to a joint cybersecurity advisory from the CISA, NSA, and FBI. Knowledge distillation is a standard AI training technique that […]

Chinese AI firms are siphoning capabilities from American models, CISA warns Read More »

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

0-day, CISO, CrowdStrike, CSO, Don't miss, Fortra, Hot stuff, Microsoft, Microsoft Exchange, News, Patch Tuesday, patching, Proofpoint, SharePoint, Tenable, Trend Micro, Windows, Windows Defender, Windows Server /

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor 2026-09-09 at 12:04 By Zeljka Zorz September 2026 Patch Tuesday is here, with Microsoft delivering another record-breaking number of patches, including those for two vulnerabilities that have been exploited as zero-days. Another “new normal” is the anonymous security researcher Nightmare Eclipse publishing […]

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor Read More »

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)

Chrome, Don't miss, exploit, Google, Hot stuff, News, vulnerability /

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491) 2026-09-09 at 10:53 By Sinisa Markovic Google has fixed 230 vulnerabilities in Chrome, including a zero-day flaw, CVE-2026-87491, with an in-the-wild exploit. “Google is aware that an exploit for CVE-2026-87491 exists in the wild,” the company said in a Tuesday security advisory. The fix has been […]

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491) Read More »

AI-Infra-Guard: Open-source security scanner for AI systems

AI, Don't miss, GitHub, Hot stuff, LLMs, News, open source, red team, scanner, software, Tencent /

AI-Infra-Guard: Open-source security scanner for AI systems 2026-09-09 at 10:13 By Mirko Zorz Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them against more than 1,600 known CVEs, inspects MCP servers and agent skills across 14 categories of risk, […]

AI-Infra-Guard: Open-source security scanner for AI systems Read More »

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results

agentic AI, AI, cybersecurity, Don't miss, Expert analysis, Hot stuff, News, opinion, Prophet Security, SOC /

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results 2026-09-09 at 08:00 By Help Net Security In the Gartner report Validate the Promises of AI SOC Agents With These Key Questions, analysts Craig Lawson and Andrew Davies posit that “By 2028, 70% of large SOCs will pilot AI agents to augment […]

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results Read More »

AWS spent years rebuilding its routing control plane without taking the network down

AWS, cloud computing, DevOps, networking, News /

AWS spent years rebuilding its routing control plane without taking the network down 2026-09-09 at 07:52 By Anamarija Pogorelec Every AWS API call, CloudFront video stream, and Route 53 lookup crosses the same infrastructure, which AWS calls its border network. It now runs on a routing system rebuilt from scratch over several years. The system […]

AWS spent years rebuilding its routing control plane without taking the network down Read More »

What breach and attack simulation needs to become in the AI era

AI, cybersecurity, Don't miss, Expert analysis, Hot stuff, News, opinion, Picus Security, supply chain /

What breach and attack simulation needs to become in the AI era 2026-09-09 at 07:30 By Help Net Security Breach and attack simulation (BAS) has always had a supply chain. Somebody has to read the threat report, pull out the techniques, and turn them into something that will actually run against your controls. That somebody […]

What breach and attack simulation needs to become in the AI era Read More »

BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows

data security, News, open source, software /

BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows 2026-09-09 at 07:00 By Anamarija Pogorelec The open source cleaner BleachBit reached version 6.0.4 this week, erasing caches, browser traces, and files on Windows, Linux, and now macOS. If you shredded a sensitive file on Windows with an earlier build, parts of it may still […]

BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows Read More »

Scroll to Top