News

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day

cybersecurity, Don't miss, extortion, FBI, Hot stuff, News, Oracle /

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day 2026-09-28 at 16:56 By Zeljka Zorz The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic […]

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day Read More »

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

AI, Don't miss, Hot stuff, Microsoft, News, vulnerability disclosure /

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data 2026-09-28 at 16:50 By Sinisa Markovic A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found […]

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data Read More »

Other users can watch your browsing and time your keystrokes through OS file notifications

apple, Don't miss, Linux, macOS, News, Privacy, research, Windows /

Other users can watch your browsing and time your keystrokes through OS file notifications 2026-09-28 at 15:14 By Anamarija Pogorelec Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s […]

Other users can watch your browsing and time your keystrokes through OS file notifications Read More »

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

CISA, Citrix, Don't miss, Hot stuff, NCSC-NL, NetScaler, News, Tenable /

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) 2026-09-28 at 12:51 By Zeljka Zorz Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped […]

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) Read More »

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts

AT&T, cybercrime, Don't miss, Hot stuff, law enforcement, News, Snowflake, US DoJ, USA /

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts 2026-09-28 at 11:45 By Sinisa Markovic A former U.S. Army soldier who was part of a group that stole data from telecom companies, including AT&T, has been sentenced to 70 months in prison. Cameron John Wagenius, 22, was part of the group that […]

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts Read More »

LinkedIn tests a way for connections to verify your work history

cybersecurity, identity verification, LinkedIn, News /

LinkedIn tests a way for connections to verify your work history 2026-09-28 at 11:20 By Anamarija Pogorelec LinkedIn is testing a way for members to verify the work and education history of people they know. The platform prompts verified members to confirm that they worked or studied with a connection. Once that person receives enough […]

LinkedIn tests a way for connections to verify your work history Read More »

If you do one security check this quarter, make it agent memory

agentic AI, CISO, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]

If you do one security check this quarter, make it agent memory Read More »

Authorizer: Open-source authentication and authorization for your apps

authentication, cybersecurity, Don't miss, GitHub, News, open source /

Authorizer: Open-source authentication and authorization for your apps 2026-09-28 at 08:30 By Mirko Zorz Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an interface […]

Authorizer: Open-source authentication and authorization for your apps Read More »

AI tests the limits of enterprise security governance

AI, AWS, News, Privacy, strategy /

AI tests the limits of enterprise security governance 2026-09-28 at 08:00 By Sinisa Markovic AI agents are forcing enterprises to rethink security governance, human accountability and oversight as deployments scale. AWS’s Reimagine 2026 argues that organizations need to build governance into their systems and keep humans accountable for outcomes. The findings come from confidential interviews […]

AI tests the limits of enterprise security governance Read More »

Product showcase: A photo can fool your eyes, Verdict checks the evidence

agentic AI, AI, cybersecurity, News, scams /

Product showcase: A photo can fool your eyes, Verdict checks the evidence 2026-09-28 at 07:30 By Anamarija Pogorelec Verdict is an AI image and video detector designed for iPhone. It works offline and requires no account. Choose a photo or video, run a scan, and the app returns a 0–100 score with a verdict and […]

Product showcase: A photo can fool your eyes, Verdict checks the evidence Read More »

Quantum random numbers can pass the tests and still leak clues to attackers

AI, cybersecurity, ETSI, guidelines, News, quantum computing /

Quantum random numbers can pass the tests and still leak clues to attackers 2026-09-28 at 07:00 By Anamarija Pogorelec The European Telecommunications Standards Institute’s (ETSI) technical report, ETSI TR 104 171, offers guidance on building and evaluating quantum random number generators (QRNGs). It focuses on weaknesses in the devices and their supporting systems that could […]

Quantum random numbers can pass the tests and still leak clues to attackers Read More »

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents

News, Week in review /

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents 2026-09-27 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Know what was tested before your SAP ECC migration goes live In this Help Net Security interview, Guilherme Joventino, COO of […]

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents Read More »

Threat detection dashboards are masking security coverage gaps

CISO, cybersecurity, News, report, survey, threat detection /

Threat detection dashboards are masking security coverage gaps 2026-09-25 at 15:04 By Sinisa Markovic A detection rule can show up as deployed on a coverage dashboard and still never fire when an attacker uses the technique it was built to catch. Conifers assessed 14,652 detections in its customer base, including rules written by customers and […]

Threat detection dashboards are masking security coverage gaps Read More »

MacSync info-stealing malware hides malicious commands in an iCloud calendar

backdoor, Crypto, Kaspersky, macOS, Malware, News /

MacSync info-stealing malware hides malicious commands in an iCloud calendar 2026-09-25 at 12:22 By Sinisa Markovic A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files, according to Kaspersky. Researchers found the malware spreading through a crypto wallet app called Toria, which had […]

MacSync info-stealing malware hides malicious commands in an iCloud calendar Read More »

Fake payroll desktop apps hand attackers a route to company paychecks

Allure Security, cybercrime, Don't miss, Hot stuff, Malware, News /

Fake payroll desktop apps hand attackers a route to company paychecks 2026-09-25 at 10:52 By Sinisa Markovic An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone who runs the installer gets a copy of ScreenConnect, a legitimate remote access […]

Fake payroll desktop apps hand attackers a route to company paychecks Read More »

Stop watching what AI agents say and start watching what they do

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, security telemetry, strategy, tips /

Stop watching what AI agents say and start watching what they do 2026-09-25 at 08:30 By Mirko Zorz In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent […]

Stop watching what AI agents say and start watching what they do Read More »

Half of threat hunters say bad data is their biggest problem

cybersecurity, data, data analysis, Don't miss, News, report, SANS, security operations, security telemetry, SOC, survey, threat hunting /

Half of threat hunters say bad data is their biggest problem 2026-09-25 at 08:00 By Anamarija Pogorelec Half of security professionals name data quality or quantity as their biggest barrier to effective threat hunting, according to the SANS 2026 Threat Hunting Survey. Teams with working playbooks describe the logs as their ceiling, and gaps in […]

Half of threat hunters say bad data is their biggest problem Read More »

Your incident count is missing a few incidents

cybersecurity, News, report, Retail, survey, VikingCloud /

Your incident count is missing a few incidents 2026-09-25 at 07:30 By Anamarija Pogorelec If you run security for a brand with hundreds or thousands of locations, the tools you’ve bought may have little to do with whether an attack stays at one store. A new VikingCloud survey asked 200 security and IT leaders at […]

Your incident count is missing a few incidents Read More »

New infosec products of the month: September 2026

Akeyless, Akuity.io, BitSight, Cloud Range, Cohesity, Dataminr, Gurucul, News, Nozomi Networks, Ping Identity, Scytale, Securin, Tuskira /

New infosec products of the month: September 2026 2026-09-25 at 07:00 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from Akeyless, Akuity, Bitsight, BugBase, Cloud Range, Cohesity, Dataminr, Gurucul, Nozomi Networks, Orchid Security, Ping Identity, Scytale, Securin, Superna, and Tuskira. Ping Identity introduces enterprise security for […]

New infosec products of the month: September 2026 Read More »

Scroll to Top