News

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns 2026-04-21 at 15:29 By Anamarija Pogorelec OpenAI’s Chronicle is a feature designed to help Codex, an AI-powered coding assistant, better understand what users are working on by capturing context directly from their screens. It uses recent screen activity to build memories, allowing Codex to […]

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns Read More »

A single platform powers SIM farm proxy networks across 17 countries

A single platform powers SIM farm proxy networks across 17 countries 2026-04-21 at 12:30 By Mirko Zorz Racks of phones and 4G modems, connected to carrier networks and rented out as commercial mobile proxy services, are operating across at least 94 locations in 17 countries. An investigation by infrastructure intelligence firm Infrawatch traced a large […]

A single platform powers SIM farm proxy networks across 17 countries Read More »

NGate NFC malware targets Android users through trojanized payment app

NGate NFC malware targets Android users through trojanized payment app 2026-04-21 at 12:00 By Mirko Zorz NFC-based payment fraud is expanding geographically and operationally. A campaign active since November 2025 is targeting Android users in Brazil using a new variant of the NGate malware family, this time embedded in a trojanized version of HandyPay, a […]

NGate NFC malware targets Android users through trojanized payment app Read More »

Researchers build an encrypted routing layer for private AI inference

Researchers build an encrypted routing layer for private AI inference 2026-04-21 at 07:31 By Sinisa Markovic Organizations in healthcare, finance, and other sensitive industries want to use large AI models without exposing private data to the cloud servers running those models. A cryptographic technique called Secure Multi-Party Computation (MPC) makes this possible. It splits data […]

Researchers build an encrypted routing layer for private AI inference Read More »

Cybersecurity jobs available right now: April 21, 2026

Cybersecurity jobs available right now: April 21, 2026 2026-04-21 at 07:18 By Anamarija Pogorelec Application Security Engineer (DevSecOps / Azure DevOps) BEWAHARVEST | Philippines | Hybrid – View job details As an Application Security Engineer (DevSecOps / Azure DevOps), you will embed security across the SDLC by working with engineering and DevOps teams to implement […]

Cybersecurity jobs available right now: April 21, 2026 Read More »

Vercel breached via compromised third-party AI tool

Vercel breached via compromised third-party AI tool 2026-04-20 at 18:12 By Zeljka Zorz Cloud deployment and hosting platform Vercel has suffered a security breach that resulted in attackers accessing some of its internal systems and compromising Vercel credentials of a “limited subset of customers”. Advice for affected customers “The incident originated with a compromise of […]

Vercel breached via compromised third-party AI tool Read More »

AI platform ATHR makes voice phishing a one-person job

AI platform ATHR makes voice phishing a one-person job 2026-04-20 at 14:37 By Zeljka Zorz For $4,000 and a cut of the take, a lone criminal can now run a fully automated voice-phishing operation via ATHR, a plaform that spoofs emails alerts from Google, Microsoft, and Coinbase, buries a phone number in each message, and […]

AI platform ATHR makes voice phishing a one-person job Read More »

Meta and PortSwigger drive offensive security further to find what others miss

Meta and PortSwigger drive offensive security further to find what others miss 2026-04-20 at 11:16 By Anamarija Pogorelec Meta Bug Bounty and PortSwigger have formed a partnership to help security researchers sharpen their skills, collaborate more closely, and improve vulnerability discovery. The initiative combines Meta’s bug bounty program with PortSwigger’s Burp Suite, reflecting a shared […]

Meta and PortSwigger drive offensive security further to find what others miss Read More »

EU pushes for stronger cloud sovereignty, awards €180 million to four providers

EU pushes for stronger cloud sovereignty, awards €180 million to four providers 2026-04-20 at 10:30 By Sinisa Markovic The European Commission is stepping up efforts to strengthen the EU’s digital sovereignty by awarding a cloud services tender worth up to €180 million over six years. The initiative gives EU institutions and agencies access to sovereign […]

EU pushes for stronger cloud sovereignty, awards €180 million to four providers Read More »

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines 2026-04-20 at 09:14 By Mirko Zorz Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engineering and security teams can see what an attacker would do in their specific environment. What the tool does SmokedMeat takes a flagged […]

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Read More »

How to spot a North Korean fake in a job interview

How to spot a North Korean fake in a job interview 2026-04-20 at 08:17 By Help Net Security North Korean operatives are getting hired at companies by passing job interviews using fake identities and AI tools. In this Help Net Security video, Adrian Cheek, a senior cybercrime researcher at Flare, outlines several ways organizations can […]

How to spot a North Korean fake in a job interview Read More »

Product showcase: Syncthing for secure, private file synchronization

Product showcase: Syncthing for secure, private file synchronization 2026-04-20 at 07:52 By Anamarija Pogorelec Syncthing is a free and open-source application that synchronizes files directly between your devices. Instead of uploading data to a central server, it uses a peer-to-peer approach, transferring files whenever peers are online. This decentralized model ensures that your data remains […]

Product showcase: Syncthing for secure, private file synchronization Read More »

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits 2026-04-19 at 11:49 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI identities In this Help Net Security interview, Archit Lohokare, CEO of AppViewX, […]

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits Read More »

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild 2026-04-17 at 14:32 By Zeljka Zorz The security researcher who earlier this month published a proof-of-concept (PoC) exploit for a zero-day privilege escalation vulnerability in Microsoft Defender is back with two more. The first, dubbed “RedSun,” is another privilege escalation flaw […]

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild Read More »

Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control

Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control 2026-04-17 at 14:32 By Sinisa Markovic For organizations that want to keep company data within their own systems and have more control over how AI is deployed, Mozilla is offering an alternative to externally hosted AI services with Thunderbolt, an open-source AI […]

Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control Read More »

Google wipes out 602 million scam ads with Gemini on duty

Google wipes out 602 million scam ads with Gemini on duty 2026-04-17 at 13:59 By Sinisa Markovic Google claims that its security teams work around the clock using its Gemini AI models to detect and stop harmful ads. “Bad actors are using generative AI to create deceptive ads at scale, and Gemini helps us detect […]

Google wipes out 602 million scam ads with Gemini on duty Read More »

Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits

Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits 2026-04-17 at 09:24 By Sinisa Markovic Google shipped Android 17 Beta 4 on April 16, marking the last scheduled beta in the Android 17 release cycle. The build targets app compatibility testing and platform stability ahead of the final release, and it carries […]

Android 17 Beta 4 arrives with post-quantum cryptography and new memory limits Read More »

Apple AirTag tracking can be misled by replayed Bluetooth signals

Apple AirTag tracking can be misled by replayed Bluetooth signals 2026-04-17 at 09:24 By Sinisa Markovic Apple’s AirTag is designed to help users track lost items by relying on a vast network of nearby Apple devices. New research shows that this same system can be manipulated to display locations where an AirTag has never been. […]

Apple AirTag tracking can be misled by replayed Bluetooth signals Read More »

Social media bans might steer kids into riskier corners of the internet

Social media bans might steer kids into riskier corners of the internet 2026-04-17 at 08:10 By Sinisa Markovic Governments are moving to block children under 16 from social media in the name of safety. But once these measures move from policy to practice, they raise a harder question: what happens when protecting kids requires collecting […]

Social media bans might steer kids into riskier corners of the internet Read More »

New infosec products of the week: April 17, 2026

New infosec products of the week: April 17, 2026 2026-04-17 at 07:42 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from Axonius, Broadcom, Siemens, and Sitehop. Axonius updates Asset Cloud with AI, exposure management, and asset trust standard Axonius has expanded its Asset Cloud with AI-powered […]

New infosec products of the week: April 17, 2026 Read More »

Scroll to Top