News

Android developers just got a new verification layer

Android, Google, Google Play, identity verification, News, software development /

Android developers just got a new verification layer 2026-03-31 at 15:43 By Anamarija Pogorelec To help prevent malicious actors from spreading harmful apps while hiding behind anonymity, Google is rolling out developer verification to all Android developers. The company is also introducing app registration, which links apps to verified developer identities. Developers can still choose […]

Android developers just got a new verification layer Read More »

Axios npm packages backdoored in supply chain attack

Don't miss, Hot stuff, JavaScript, News, Step Security, supply chain attacks, supply chain compromise, Wiz /

Axios npm packages backdoored in supply chain attack 2026-03-31 at 15:43 By Zeljka Zorz An unknown attacker has compromised the GitHub and npm accounts of the main developer of Axios, a widely used HTTP client library, and published npm packages backdoored with a malicious dependency that triggered the installation of droppers and remote access trojans. […]

Axios npm packages backdoored in supply chain attack Read More »

Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step

GitHub, News, open source, software, spam /

Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step 2026-03-31 at 15:43 By Sinisa Markovic The open-source spam filtering platform Rspamd released version 4.0.0, delivering infrastructure changes across its scan protocol, memory model, hash storage, and configuration system. Several of the changes are breaking, and at least one requires a […]

Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step Read More »

Intel puts its data center performance knowledge on GitHub

chip, data center, DevOps, GitHub, hardware, Intel, News, open source /

Intel puts its data center performance knowledge on GitHub 2026-03-31 at 15:43 By Anamarija Pogorelec Intel engineers have published a centralized repository of data center performance knowledge on GitHub, giving practitioners direct access to tuning guides, configuration recommendations, and optimization recipes that previously required hunting across forums and scattered documentation. The repository, called Optimization Zone, […]

Intel puts its data center performance knowledge on GitHub Read More »

Google Drive now detects ransomware and helps restore affected files

Google, Google Drive, Google Workspace, News, Ransomware /

Google Drive now detects ransomware and helps restore affected files 2026-03-31 at 12:46 By Anamarija Pogorelec To help organizations minimize the impact of malware attacks on personal computers, Google launched ransomware detection and file restoration in beta in September 2025. These features are now generally available. End user alert in Drive for desktop when ransomware […]

Google Drive now detects ransomware and helps restore affected files Read More »

Why I’m done calling humans the weakest link

BH Consulting, Brian Honan, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, human error, News, opinion, security awareness, strategy, user behavior /

Why I’m done calling humans the weakest link 2026-03-31 at 11:22 By Help Net Security Cybersecurity has long suffered from a people problem, but not in the way we often hear about. As industry that is based on enabling communication across the globe via the internet and many types of devices, many of us practitioners […]

Why I’m done calling humans the weakest link Read More »

The art of making technical risk make sense to executives

boardroom, CISO, cybersecurity, how-to, News, Paessler, strategy, tips, Video /

The art of making technical risk make sense to executives 2026-03-31 at 11:21 By Help Net Security In this Help Net Security video, Jay Miller, CISO at Paessler, explains how security leaders can communicate technical risk to executives and board members in terms they understand. The focus is on business impact: financial loss, compliance fines, […]

The art of making technical risk make sense to executives Read More »

Hottest cybersecurity open-source tools of the month: March 2026

cybersecurity, GitHub, News, open source, software /

Hottest cybersecurity open-source tools of the month: March 2026 2026-03-31 at 07:37 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. BlacksmithAI: Open-source AI-powered penetration testing framework BlacksmithAI is an open-source penetration testing framework that uses […]

Hottest cybersecurity open-source tools of the month: March 2026 Read More »

Cybersecurity jobs available right now: March 31, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: March 31, 2026 2026-03-31 at 07:37 By Anamarija Pogorelec Android Malware Research Director Alice | Israel | On-site – View job details As an Android Malware Research Director, you will establish operational processes, workflows, and quality standards for the team, while integrating the function into existing infrastructure. You will act […]

Cybersecurity jobs available right now: March 31, 2026 Read More »

RSAC 2026 is back, and the certificate automation gap is impossible to ignore

451 Research, ABI Research, conferences, GlobalSign, News, Red Sift, RSAC 2026 /

RSAC 2026 is back, and the certificate automation gap is impossible to ignore 2026-03-30 at 20:14 By Help Net Security RSAC 2026 Conference marked a return to form, more vibrant and better attended than any show I can recall over the past decade. The audience was distinctly international, with strong representation from North America, Europe […]

RSAC 2026 is back, and the certificate automation gap is impossible to ignore Read More »

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot

Don't miss, GitGuardian, Hot stuff, News, SANS, supply chain compromise, Trend Micro /

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot 2026-03-30 at 18:52 By Zeljka Zorz TeamPCP’s destructive run of supply chain breaches has stopped, for now: it has been three days since the group published malicious versions of Telnyx’s SDK on PyPI, and there haven’t been reports of new open-source project compromises. Partnership with […]

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot Read More »

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)

Bishop Fox, Defused Cyber, Don't miss, enterprise, Fortinet, Hot stuff, News, vulnerability /

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643) 2026-03-30 at 15:37 By Zeljka Zorz A critical SQL injection vulnerability (CVE-2026-21643) in Fortinet FortiClient Endpoint Management Server (EMS), a management server for FortiClient endpoint agents on various platforms, is under active exploitation. The warning comes from Defused Cyber, which helps organizations deploy honeypots/fake assets, and […]

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643) Read More »

Android 17 tweaks location privacy with one-time access

Android, Google, location tracking, News, Privacy /

Android 17 tweaks location privacy with one-time access 2026-03-30 at 14:26 By Anamarija Pogorelec Google introduced a suite of location privacy features in Android 17 Beta 3 to give users more control and provide developers with tools for data minimization and product safety. Location button overview Android 17 introduces a new UI element called the […]

Android 17 tweaks location privacy with one-time access Read More »

Second data breach at European Commission this year leaves questions over resilience

breach, cybercrime, EU, European Commission, News /

Second data breach at European Commission this year leaves questions over resilience 2026-03-30 at 14:26 By Sinisa Markovic The European Commission confirmed that a cyberattack impacted cloud infrastructure hosting its web presence on the Europa.eu platform. Authorities said the cyberattack was discovered on 24 March, and early findings from the ongoing investigation suggest data were […]

Second data breach at European Commission this year leaves questions over resilience Read More »

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools

Linux, News, open source, software /

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools 2026-03-30 at 10:37 By Anamarija Pogorelec Bootable Linux recovery environments occupy a specific niche in the systems administration and incident response toolkit. SystemRescue, an Arch-based live distribution built for repairing unbootable systems and recovering data from damaged drives, has shipped version 13.00 […]

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools Read More »

Why risk alone doesn’t get you to yes

CISO, cyber risk, cybersecurity, Don't miss, Expert analysis, Expert corner, News, opinion, Risk Management, strategy /

Why risk alone doesn’t get you to yes 2026-03-30 at 09:29 By Help Net Security I have been in security rooms for years, from military operations centers to corporate boardrooms. In all those years I can tell you that the hardest mission that most security leaders will face is not identifying a threat, but getting […]

Why risk alone doesn’t get you to yes Read More »

ShipSec Studio brings open-source workflow orchestration to security operations

Don't miss, GitHub, Hot stuff, News, open source, security operations, software /

ShipSec Studio brings open-source workflow orchestration to security operations 2026-03-30 at 08:04 By Anamarija Pogorelec Security teams have long relied on a mix of shell scripts, cron jobs, and loosely connected tools to chain reconnaissance and vulnerability scanning work together. ShipSec Studio, an open-source security workflow automation platform from ShipSec AI, aims to replace that […]

ShipSec Studio brings open-source workflow orchestration to security operations Read More »

Don’t count on government guidance after a smart home breach

cybersecurity, Internet of Things, News, research, smart home /

Don’t count on government guidance after a smart home breach 2026-03-30 at 07:30 By Sinisa Markovic People are filling their homes with internet-connected cameras, speakers, locks, and routers. When one of those devices is compromised, the next steps are often unclear. Researchers reviewing government cybersecurity advice in 11 countries found that most guidance focuses on […]

Don’t count on government guidance after a smart home breach Read More »

Breaking out: Can AI agents escape their sandboxes?

Artificial Intelligence, cybersecurity, LLMs, News, research /

Breaking out: Can AI agents escape their sandboxes? 2026-03-30 at 07:30 By Anamarija Pogorelec Container sandboxes are part of routine AI agent testing and deployment. Agents use them to run code, edit files, and interact with system resources without direct access to the host. The SandboxEscapeBench benchmark, developed by researchers at the University of Oxford […]

Breaking out: Can AI agents escape their sandboxes? Read More »

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages

News, Week in review /

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages 2026-03-29 at 18:17 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: NIST updates its DNS security guidance for the first time in over a decade DNS infrastructure underpins nearly every network connection […]

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages Read More »

Scroll to Top