News

Sensitive data of Eurail, Interrail travelers compromised in data breach

data breach, Don't miss, EU, Europe, Hot stuff, News, transportation /

Sensitive data of Eurail, Interrail travelers compromised in data breach 2026-01-15 at 17:04 By Zeljka Zorz A data breach at the Netherlands-based company that sells Eurail (Interrail) train passes resulted in the compromise of personal and sensitive information belonging to an as-yet unknown number of travelers. What data was accessed? Eurail B.V. operates on behalf […]

Sensitive data of Eurail, Interrail travelers compromised in data breach Read More »

PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155)

Don't miss, Fortinet, Horizon3.ai, Hot stuff, News, PoC, SIEM, Tenable, vulnerability /

PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155) 2026-01-15 at 15:27 By Zeljka Zorz A critical vulnerability (CVE-2025-64155) in Fortinet’s FortiSIEM security platform has now been accompanied by publicly released proof-of-concept (PoC) exploit code, raising the urgency for organizations to patch immediately. About CVE-2025-64155 CVE-2025-64155 may allow unauthenticated, remote attackers to execute unauthorized code or […]

PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155) Read More »

AWS European Sovereign Cloud puts data, operations, and oversight inside the EU

Amazon, AWS, Cloud, Data Protection, EU, Europe, News, regulation /

AWS European Sovereign Cloud puts data, operations, and oversight inside the EU 2026-01-15 at 13:54 By Sinisa Markovic Amazon has made the AWS European Sovereign Cloud generally available to customers across the European Union, backed by a €7.8 billion investment. According to AWS, the funding will support infrastructure buildout, staffing, and long-term operations, and is […]

AWS European Sovereign Cloud puts data, operations, and oversight inside the EU Read More »

Microsoft shuts down RedVDS cybercrime subscription service tied to millions in fraud losses

cybercrime, Don't miss, law enforcement, Microsoft, News /

Microsoft shuts down RedVDS cybercrime subscription service tied to millions in fraud losses 2026-01-15 at 10:22 By Sinisa Markovic Microsoft has announced a coordinated legal action in the United States and the United Kingdom to disrupt RedVDS, a global cybercrime subscription service tied to large-scale fraud losses. The effort forms part of a broader joint […]

Microsoft shuts down RedVDS cybercrime subscription service tied to millions in fraud losses Read More »

LinkedIn wants to make verification a portable trust signal

cybersecurity, Don't miss, Features, generative AI, Hot stuff, identity verification, LinkedIn, News, scams, social media /

LinkedIn wants to make verification a portable trust signal 2026-01-15 at 08:34 By Mirko Zorz In this Help Net Security interview, Oscar Rodriguez, VP Trust Product at LinkedIn, discusses how verification is becoming a portable trust signal across the internet. He explains how LinkedIn is extending professional identity beyond its platform to address rising AI-driven […]

LinkedIn wants to make verification a portable trust signal Read More »

QR codes are getting colorful, fancy, and dangerous

cybersecurity, Don't miss, News, NordVPN, Palo Alto Networks, phishing, QR codes, research, scanning, threats /

QR codes are getting colorful, fancy, and dangerous 2026-01-15 at 08:04 By Sinisa Markovic QR codes have become a routine part of daily life, showing up on emails, posters, menus, invoices, and login screens. Security-savvy users have learned to treat links with caution, but QR codes still carry an assumption of safety. Researchers from Deakin […]

QR codes are getting colorful, fancy, and dangerous Read More »

CISOs flag gaps in third-party risk management

Artificial Intelligence, CISO, cybersecurity, Incident Response, News, Panorays, regulation, report, supply chain, third party compromise /

CISOs flag gaps in third-party risk management 2026-01-15 at 07:37 By Anamarija Pogorelec Third-party cyber risk continues to concern security leaders as vendor ecosystems grow, supply chains stretch, and AI plays a larger role in business operations. A recent Panorays survey of U.S. CISOs shows rising third-party incidents and growing regulatory attention, while visibility beyond […]

CISOs flag gaps in third-party risk management Read More »

The NSA lays out the first steps for zero trust adoption

CISO, Don't miss, Government, how-to, News, NSA, strategy, tips, USA, zero trust /

The NSA lays out the first steps for zero trust adoption 2026-01-15 at 07:28 By Anamarija Pogorelec Security pros often say that zero trust sounds straightforward until they try to apply it across real systems, real users, and real data. Many organizations are still sorting out what they own, how access works, and where authority […]

The NSA lays out the first steps for zero trust adoption Read More »

Cybersecurity spending keeps rising, so why is business impact still hard to explain?

CISO, collaboration, CXO, cybersecurity, Expel, investment, News, report, risk, security metrics, security ROI /

Cybersecurity spending keeps rising, so why is business impact still hard to explain? 2026-01-15 at 07:28 By Anamarija Pogorelec Cybersecurity budgets keep climbing, but many security leaders still struggle to explain what that spending delivers to the business. A new study by Expel examines that disconnect through a survey of security and finance executives at […]

Cybersecurity spending keeps rising, so why is business impact still hard to explain? Read More »

Webinar: Beyond the Quadrant: An Analyst’s Guide to Evaluating Email Security in 2026

Abnormal AI, Don't miss, Hot stuff, News, Whitepapers and webinars /

Webinar: Beyond the Quadrant: An Analyst’s Guide to Evaluating Email Security in 2026 2026-01-14 at 16:03 By Help Net Security Join former Gartner analyst Ravisha Chugh and Abnormal’s Director of Product Marketing, Lane Billings, on January 20th for an exclusive insider look at how email security vendors will be evaluated in 2026. Backed by years […]

Webinar: Beyond the Quadrant: An Analyst’s Guide to Evaluating Email Security in 2026 Read More »

CISO Assistant: Open-source cybersecurity management and GRC

CISO, Compliance, cybersecurity, DevSecOps, Don't miss, framework, GitHub, GRC, Hot stuff, News, open source, Risk Management, software, strategy /

CISO Assistant: Open-source cybersecurity management and GRC 2026-01-14 at 13:25 By Mirko Zorz CISO Assistant is an open-source governance, risk, and compliance (GRC) platform designed to help security teams document risks, controls, and framework alignment in a structured system. The community edition is maintained as a self-hosted tool for organizations that want direct access to […]

CISO Assistant: Open-source cybersecurity management and GRC Read More »

Firmware scanning time, cost, and where teams run EMBA

cybersecurity, Don't miss, Features, firmware, hardware, Hot stuff, Internet of Things, News, open source, research, scanning, software /

Firmware scanning time, cost, and where teams run EMBA 2026-01-14 at 13:25 By Mirko Zorz Security teams that deal with connected devices often end up running long firmware scans overnight, checking progress in the morning, and trying to explain to colleagues why a single image consumed a workday of compute time. That routine sets the […]

Firmware scanning time, cost, and where teams run EMBA Read More »

Anthropic backs Python Software Foundation security work with $1.5 million

Anthropic, News, Python Software Foundation /

Anthropic backs Python Software Foundation security work with $1.5 million 2026-01-14 at 10:21 By Sinisa Markovic Anthropic has signed a two-year partnership with the Python Software Foundation (PSF), committing a total of $1.5 million to support the foundation’s work, with a focus on Python ecosystem security. Anthropic’s funding will help the PSF move its security […]

Anthropic backs Python Software Foundation security work with $1.5 million Read More »

How AI image tools can be tricked into making political propaganda

deepfakes, disinformation, Don't miss, Fake News, Features, News /

How AI image tools can be tricked into making political propaganda 2026-01-14 at 08:01 By Sinisa Markovic A single image can shift public opinion faster than a long post. Text to image systems can be pushed to create misleading political visuals, even when safety filters are in place, according to a new study. The researchers […]

How AI image tools can be tricked into making political propaganda Read More »

Product showcase: Orbot – Tor VPN for iOS

Don't miss, iOS, iPad, iPhone, mobile devices, News, Product showcase, software, VPN /

Product showcase: Orbot – Tor VPN for iOS 2026-01-14 at 07:43 By Anamarija Pogorelec Orbot for iOS is a free, open-source networking tool that routes supported app traffic through the Tor network. Developed by the Guardian Project, it is intended for users who want to reduce tracking and limit network-level monitoring on iPhone and iPad. […]

Product showcase: Orbot – Tor VPN for iOS Read More »

Lumo expands its Lumo AI assistant with encrypted, project-based workspaces

Artificial Intelligence, News, Proton /

Lumo expands its Lumo AI assistant with encrypted, project-based workspaces 2026-01-14 at 07:03 By Anamarija Pogorelec Lumo is Proton’s AI assistant, built with a focus on privacy and user control. It runs on Proton’s infrastructure and is designed so conversations are not used to train models or retained beyond what is required to provide the […]

Lumo expands its Lumo AI assistant with encrypted, project-based workspaces Read More »

Wine 11 brings major architectural work, synchronization changes, 600+ bug fixes

Linux, News, open source, software /

Wine 11 brings major architectural work, synchronization changes, 600+ bug fixes 2026-01-14 at 02:03 By Anamarija Pogorelec Wine, originally short for “Wine Is Not an Emulator,” is a compatibility layer that allows Windows applications to run natively on POSIX-compliant operating systems, including Linux, macOS, and BSD. Rather than running a full copy of Windows or […]

Wine 11 brings major architectural work, synchronization changes, 600+ bug fixes Read More »

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations

GitHub, Google Cloud, Mandiant, News, Salesforce, software /

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations 2026-01-13 at 17:45 By Anamarija Pogorelec Google and its Mandiant threat intelligence unit have released AuraInspector, an open-source tool aimed at auditing data access paths in Salesforce Experience Cloud applications. The tool focuses on the Aura framework, which underpins many Salesforce user interfaces and plays […]

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations Read More »

Minimal Ubuntu Pro expands Canonical’s cloud security offerings

Canonical, cloud security, News, Ubuntu /

Minimal Ubuntu Pro expands Canonical’s cloud security offerings 2026-01-13 at 14:13 By Sinisa Markovic Canonical has released Minimal Ubuntu Pro images for use on public cloud platforms, aiming to give teams a smaller base image with a narrower software footprint. The solution is designed for organizations that want tighter control over what runs inside production […]

Minimal Ubuntu Pro expands Canonical’s cloud security offerings Read More »

Parrot OS shares its 2026 plans for security tools and platform support

Debian, Linux, News, open source /

Parrot OS shares its 2026 plans for security tools and platform support 2026-01-13 at 11:15 By Anamarija Pogorelec Parrot OS is a Debian-based Linux distribution built for cybersecurity work. Security practitioners use it for penetration testing, digital forensics, malware analysis, and privacy-focused research. The operating system bundles security tools, development utilities, and privacy features into […]

Parrot OS shares its 2026 plans for security tools and platform support Read More »

Scroll to Top