News

Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore

Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore 2026-09-30 at 12:31 By Sinisa Markovic Signal users who switch from an Android phone to an iPhone, or the other way around, can take their message history with them, and backups can be restored on Android, iOS, Linux, macOS and Windows. The option […]

Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore Read More »

Former US Air Force members behind million-dollar BEC scheme head to prison

Former US Air Force members behind million-dollar BEC scheme head to prison 2026-09-30 at 10:42 By Sinisa Markovic Two men who ran BEC and phishing campaigns against US businesses while serving in the Air Force have been sentenced to a combined 189 months in federal prison. According to public documents and evidence presented at sentencing, […]

Former US Air Force members behind million-dollar BEC scheme head to prison Read More »

Security tools can now scan Claude Enterprise chats and uploads for sensitive data

Security tools can now scan Claude Enterprise chats and uploads for sensitive data 2026-09-30 at 09:31 By Anamarija Pogorelec More than 100 security and compliance vendors have integrations with the Claude Compliance API, which lets a company send Claude activity into the monitoring tools it already uses. CrowdStrike, Microsoft Purview, Splunk, Palo Alto Networks, Cloudflare […]

Security tools can now scan Claude Enterprise chats and uploads for sensitive data Read More »

OWASP Noir: Open-source static analysis tool

OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]

OWASP Noir: Open-source static analysis tool Read More »

EU Cyber Resilience Act requirements for containers and Kubernetes

EU Cyber Resilience Act requirements for containers and Kubernetes 2026-09-30 at 08:00 By Help Net Security Starting in full force on Dec. 10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations will begin on Sept. 11, 2026, […]

EU Cyber Resilience Act requirements for containers and Kubernetes Read More »

Citrix NetScaler Zero-Day Exploited Globally

Citrix NetScaler Zero-Day Exploited Globally 2026-09-29 at 18:41 By Karl Sigler On Sept 27, Citrix released patches for two critical vulnerabilities being exploited in the wild. Based on current information, we confirm there has been no exposure or impact to LevelBlue or our clients. CISA has already added these vulnerabilities to the Known Exploited Vulnerabilities […]

Citrix NetScaler Zero-Day Exploited Globally Read More »

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) 2026-09-29 at 17:59 By Zeljka Zorz The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit […]

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) Read More »

Webinar: Closing the accountability gap in AI-assisted delivery

Webinar: Closing the accountability gap in AI-assisted delivery 2026-09-29 at 16:00 By Help Net Security Source control records who committed code. It does not record who made the decisions behind it, and that gap is widening as AI agents take on more of the delivery process. This session explores how organisations can adapt accountability models […]

Webinar: Closing the accountability gap in AI-assisted delivery Read More »

Meta gives small businesses an AI agent that knows their work

Meta gives small businesses an AI agent that knows their work 2026-09-29 at 15:45 By Anamarija Pogorelec Meta has introduced Muse for Small Business, adding skills and connectors to its personal AI agent to help business owners get work done using the tools they already use. Muse launched earlier this month in the US and […]

Meta gives small businesses an AI agent that knows their work Read More »

Deepfakes become a board priority once an executive falls for one

Deepfakes become a board priority once an executive falls for one 2026-09-29 at 14:59 By Anamarija Pogorelec Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, according to Pindrop’s 2026 Deepfake Readiness Index. Real-time communications have become a target […]

Deepfakes become a board priority once an executive falls for one Read More »

Malicious Custom GPT on chatgpt.com lures users into installing a RAT

Malicious Custom GPT on chatgpt.com lures users into installing a RAT 2026-09-29 at 14:55 By Zeljka Zorz Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named “Plus 5.6,” created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan […]

Malicious Custom GPT on chatgpt.com lures users into installing a RAT Read More »

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to 2026-09-29 at 14:41 By Sinisa Markovic OpenAI’s GPT-6 Astra carried out supply chain attacks on software outside the scope of a security test, according to the UK AI Security Institute (AISI). Anatomy of an unsanctioned simulated supply-chain attack (Source: AISI) AISI tested the […]

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to Read More »

Cybersecurity hiring practices leave little room for junior talent

Cybersecurity hiring practices leave little room for junior talent 2026-09-29 at 14:00 By Anamarija Pogorelec Twenty-minute training sessions that fit into the workweek could help new hires become productive sooner, keep employees’ skills current and build problem-solving skills they can use across different tools, according to SkillBit’s The Shift to Continuous Cybersecurity Micro-Training report. Reasons […]

Cybersecurity hiring practices leave little room for junior talent Read More »

Palo Alto Networks and NVIDIA want tighter control over AI agents

Palo Alto Networks and NVIDIA want tighter control over AI agents 2026-09-29 at 13:21 By Anamarija Pogorelec Palo Alto Networks is expanding its work with NVIDIA to help companies control what AI agents can access and do. The collaboration covers agent activity, network traffic and identity management through NVIDIA’s Open Agent Safety Platform reference design. […]

Palo Alto Networks and NVIDIA want tighter control over AI agents Read More »

Claude Sonnet 5.5 gets faster without a price hike

Claude Sonnet 5.5 gets faster without a price hike 2026-09-29 at 11:15 By Anamarija Pogorelec Anthropic has released Claude Sonnet 5.5, an AI model for coding and office work. The company says it responds more than 30% faster than its predecessor and uses fewer tokens to complete many tasks, reducing the cost per task without […]

Claude Sonnet 5.5 gets faster without a price hike Read More »

GitHub’s AI agent found 24 Android app vulnerabilities

GitHub’s AI agent found 24 Android app vulnerabilities 2026-09-29 at 09:39 By Anamarija Pogorelec GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to find and report more than 20 vulnerabilities in Android apps. Two of the disclosed bugs […]

GitHub’s AI agent found 24 Android app vulnerabilities Read More »

A four-week plan to tackle vendor concentration risk

A four-week plan to tackle vendor concentration risk 2026-09-29 at 08:00 By Help Net Security In this Help Net Security video, Guilliano Molaire, founder of Skycloak, explains how to map vendor concentration risk. A company may pay 30 vendors and think its tools are spread out, but many of those vendors run on the same […]

A four-week plan to tackle vendor concentration risk Read More »

Hottest cybersecurity open-source tools of the month: September 2026

Hottest cybersecurity open-source tools of the month: September 2026 2026-09-29 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is […]

Hottest cybersecurity open-source tools of the month: September 2026 Read More »

Cybersecurity jobs available right now: September 29, 2026

Cybersecurity jobs available right now: September 29, 2026 2026-09-29 at 07:00 By Anamarija Pogorelec Application Security Researcher Novee Security | Israel | Hybrid – View job details As an Application Security Researcher, you will test web applications and APIs to verify vulnerabilities found by Novee’s AI platform and document how they can be exploited. You […]

Cybersecurity jobs available right now: September 29, 2026 Read More »

NVIDIA wants AI agent safety enforced in silicon, not left to the agent

NVIDIA wants AI agent safety enforced in silicon, not left to the agent 2026-09-28 at 18:22 By Anamarija Pogorelec NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that […]

NVIDIA wants AI agent safety enforced in silicon, not left to the agent Read More »

Scroll to Top