900,000 contact records exposed in Aura data breach 2026-03-19 at 13:32 By Sinisa Markovic Aura, the online safety service, confirmed that an unauthorized party accessed about 900,000 records, mostly names and email addresses from a marketing tool linked to a company it acquired in 2021. The incident occurred as a result of a targeted phone […]
900,000 contact records exposed in Aura data breach Read More »
Google limits Android accessibility API to curb malware abuse 2026-03-19 at 13:32 By Anamarija Pogorelec Google is restricting how Android apps can use accessibility features after years of abuse by banking Trojans and mobile malware. The changes, introduced in Android 17.2, limit access to the accessibility API when Advanced Protection Mode (APM) is enabled. Apps […]
Google limits Android accessibility API to curb malware abuse Read More »
EDR killers are now standard equipment in ransomware attacks 2026-03-19 at 12:02 By Anamarija Pogorelec Ransomware attackers routinely deploy tools designed to disable endpoint detection and response software before launching encryptors. These tools, known as EDR killers, have become a standard component of ransomware intrusions. ESET Research tracked nearly 90 EDR killers actively used in […]
EDR killers are now standard equipment in ransomware attacks Read More »
Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults 2026-03-19 at 10:35 By Sinisa Markovic Samba 4.24.0 arrived carrying a set of Kerberos security changes aimed at Active Directory deployments. The release fixes a vulnerability, extends audit coverage for sensitive AD attributes, and introduces configuration options to counter two related Kerberos […]
Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults Read More »
Java 26 ships with new cryptography API and HTTP/3 support 2026-03-19 at 09:59 By Anamarija Pogorelec Oracle released JDK 26, the 17th consecutive feature release delivered under the six-month cadence the project adopted in 2018. The release includes ten JDK Enhancement Proposals spanning language changes, garbage collection improvements, cryptographic tooling, and network protocol support. PEM […]
Java 26 ships with new cryptography API and HTTP/3 support Read More »
AI got it wrong with high confidence. Now what? 2026-03-19 at 09:02 By Mirko Zorz In this Help Net Security interview, Christian Debes, Head of Data Analytics & AI at SPRYFOX, talks about the growing gap between what AI models do and what their operators can explain. He argues this gap is already a liability, […]
AI got it wrong with high confidence. Now what? Read More »
Betterleaks: Open-source secrets scanner 2026-03-19 at 09:02 By Anamarija Pogorelec Secrets scanning has become standard practice across engineering organizations, and Gitleaks has been one of the most widely used tools in that space. The author of that project has now released a new tool called Betterleaks, which is designed to scan git repositories, directories, and […]
Betterleaks: Open-source secrets scanner Read More »
Elite members of North Korean society fake their way into Western paychecks 2026-03-19 at 09:02 By Sinisa Markovic Increased federal activity, including indictments over the past year, has drawn attention to a pattern that has been unfolding inside corporate hiring pipelines. North Korean nationals are securing roles as remote IT contractors and full-time staff within […]
Elite members of North Korean society fake their way into Western paychecks Read More »
Your APIs are under siege, and attackers are just getting warmed up 2026-03-19 at 07:21 By Anamarija Pogorelec Internet-facing systems are handling sustained levels of malicious traffic across APIs, web applications, and DDoS channels. Akamai’s State of the Internet security report places these patterns within the same operating environment, with activity increasing across each area […]
Your APIs are under siege, and attackers are just getting warmed up Read More »
Spotlight Report: Cyber Resilience and Business Impact in US SLED for 2026 2026-03-18 at 16:02 By Threat groups are uniquely open-minded when selecting their targets. They may issue platitudes about avoiding schools or critical infrastructure, but data from LevelBlue’s just-releasedSpotlight Report: Cyber Resilience and Business Impact in US SLED shows this is, unsurprisingly, false. This article […]
Spotlight Report: Cyber Resilience and Business Impact in US SLED for 2026 Read More »
Firefox is getting a free built-in VPN 2026-03-18 at 15:24 By Sinisa Markovic Mozilla is adding a free built-in VPN to Firefox, with the feature arriving in Firefox 149 on March 24. Privacy concerns often follow free VPN services, especially when unclear data practices put user information at risk. Mozilla says its version is grounded […]
Firefox is getting a free built-in VPN Read More »
Apple starts issuing lightweight security updates between software releases 2026-03-18 at 13:32 By Sinisa Markovic Apple is delivering small security updates, called Background Security Improvements, starting with iOS 26.1, iPadOS 26.1, and macOS 26.1. Apple describes Background Security Improvements as lightweight security releases for components such as Safari, the WebKit framework, and other system libraries, […]
Apple starts issuing lightweight security updates between software releases Read More »
Major tech companies invest $12.5 million in open source security 2026-03-18 at 11:31 By Sinisa Markovic The Linux Foundation announced $12.5 million in grant funding backed by Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI to strengthen open source security. The funding will be directed through the foundation’s Alpha-Omega Project and the Open Source […]
Major tech companies invest $12.5 million in open source security Read More »
ManageEngine expands Endpoint Central with EDR and secure access 2026-03-18 at 10:17 By Industry News ManageEngine has announced the expansion of its unified endpoint management and security (UEMS) platform, Endpoint Central, to include endpoint detection and response (EDR) and secure private access capabilities. The additions bolster Endpoint Central’s endpoint security capabilities by enabling AI-powered threat […]
ManageEngine expands Endpoint Central with EDR and secure access Read More »
Stop building security goals around controls 2026-03-18 at 09:27 By Mirko Zorz In this Help Net Security interview, Devin Rudnicki, CISO at Fitch Group, argues that security strategy fails when it loses its connection to business outcomes. Rudnicki walks through how to align security goals with corporate priorities, why CISOs must present risk in terms […]
Stop building security goals around controls Read More »
Cybercriminals scale up, government sector hit hardest 2026-03-18 at 09:27 By Sinisa Markovic Government agencies faced the highest volume of cyberattack campaigns in 2025, according to new findings from HPE Threat Labs, which tracked 1,186 active campaigns over the course of the year. The data covers activity observed between January 1 and December 31, 2025, […]
Cybercriminals scale up, government sector hit hardest Read More »
Global fraud losses climb to $442 billion 2026-03-18 at 08:01 By Sinisa Markovic Online fraud is reaching more victims and generating larger losses, driven by digital tools and organized networks operating across borders. Global trends in financial fraud (Source: Interpol) In INTERPOL’s March 2026 Global Financial Fraud Threat Assessment, financial fraud sits among the top […]
Global fraud losses climb to $442 billion Read More »
EU sanctions Chinese company behind 65,000-device hack 2026-03-17 at 14:26 By Sinisa Markovic The EU Council has sanctioned companies from China and Iran, along with two individuals, over cyberattacks targeting its member states and partners. “Those listed are subject to an asset freeze, while EU citizens and companies are prohibited from providing them with funds […]
EU sanctions Chinese company behind 65,000-device hack Read More »
Millions of UK firms on alert after Companies House data exposure 2026-03-17 at 12:21 By Sinisa Markovic Companies House, the UK’s official company registry, said its WebFiling service is back online after being shut down on Friday to fix a security issue that may have exposed the personal data of millions of firms. An investigation […]
Millions of UK firms on alert after Companies House data exposure Read More »
Microsoft zeroes in on AI-driven data risks in Fabric 2026-03-17 at 12:21 By Anamarija Pogorelec New Microsoft Purview innovations for Microsoft Fabric help organizations secure data and accelerate AI adoption. The updates focus on identifying risks, preventing data oversharing, and strengthening governance and data quality across the data estate. Integration between Microsoft Purview and Microsoft […]
Microsoft zeroes in on AI-driven data risks in Fabric Read More »