News

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities

Application Security, Artificial Intelligence, attacks, Compliance, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, security testing, software development, StackHawk /

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities 2026-02-26 at 07:35 By Mirko Zorz In this Help Net Security interview, Joni Klippert, CEO at StackHawk, discusses what defines DAST coverage in 2026 and why scan completion does not equal security. She explains how AI-driven DAST testing automates attack surface discovery, supports business-logic testing in […]

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities Read More »

Hottest cybersecurity open-source tools of the month: February 2026

cybersecurity, Don't miss, GitHub, News, open source, software /

Hottest cybersecurity open-source tools of the month: February 2026 2026-02-26 at 07:07 By Anamarija Pogorelec This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. Pompelmi: Open-source secure file upload scanning for Node.js Software teams building services in JavaScript are adding more layers of defense to handle […]

Hottest cybersecurity open-source tools of the month: February 2026 Read More »

Threat actor leveraged Cisco SD-WAN zero-day since 2023 (CVE-2026-20127)

0-day, ACSC, CISA, Cisco, Don't miss, exploit, Government, Hot stuff, News, SD-WAN /

Threat actor leveraged Cisco SD-WAN zero-day since 2023 (CVE-2026-20127) 2026-02-25 at 19:04 By Zeljka Zorz A “highly sophisticated” cyber threat actor has been exploiting a zero-day authentication bypass vulnerability (CVE-2026-20127) in Cisco Catalyst SD-WAN Controller (formerly vSmart), Cisco has announced today. The vulnerability was reported by Australian Signals Directorate’s Australian Cyber Security Centre, who said […]

Threat actor leveraged Cisco SD-WAN zero-day since 2023 (CVE-2026-20127) Read More »

Fake Zoom meeting leads to silent install of surveillance software

Don't miss, employee monitoring, Hot stuff, Malwarebytes, News, spyware, surveillance, Teramind, Zoom /

Fake Zoom meeting leads to silent install of surveillance software 2026-02-25 at 18:16 By Zeljka Zorz Malwarebytes researchers have uncovered a fake (but convincing) Zoom meeting page that downloads surveillance software on Windows computers and tricks users into running it. According to Microsoft MVP Steven Lim, the page has claimed nearly 1,500 victims in 12 […]

Fake Zoom meeting leads to silent install of surveillance software Read More »

Anthropic’s Remote Control feature brings Claude Code to mobile devices

Anthropic, Artificial Intelligence, News /

Anthropic’s Remote Control feature brings Claude Code to mobile devices 2026-02-25 at 14:39 By Sinisa Markovic Anthropic has introduced a new Claude Code feature called Remote Control, allowing developers to continue a local coding session from a phone, tablet, or any web browser. The feature is rolling out as a research preview to Max users. […]

Anthropic’s Remote Control feature brings Claude Code to mobile devices Read More »

SolarWinds Serv-U hit by four critical RCE-level vulnerabilities

Don't miss, file transfer, file-sharing, Hot stuff, News, SolarWinds /

SolarWinds Serv-U hit by four critical RCE-level vulnerabilities 2026-02-25 at 13:55 By Zeljka Zorz SolarWinds has fixed four critical vulnerabilities in its popular Serv-U file transfer solution, which is used by businesses and organizations of all sizes. If exploited, the flaws may allow attackers to create a system admin user and/or execute code as a […]

SolarWinds Serv-U hit by four critical RCE-level vulnerabilities Read More »

Reddit fined $19.5 million for failing to protect children’s personal data

Data Protection, News, Privacy, Reddit, UK /

Reddit fined $19.5 million for failing to protect children’s personal data 2026-02-25 at 13:38 By Anamarija Pogorelec The UK’s Information Commissioner’s Office (ICO) has fined Reddit $19.5 million after finding that the company failed to use children’s personal information lawfully, exposing them to inappropriate and harmful content. The investigation found that Reddit did not apply […]

Reddit fined $19.5 million for failing to protect children’s personal data Read More »

Ex-L3Harris executive sentenced to 87 months for selling stolen cyber-exploit trade secrets

cyber espionage, Government, News, Russian Federation, US DoJ, USA /

Ex-L3Harris executive sentenced to 87 months for selling stolen cyber-exploit trade secrets 2026-02-25 at 12:15 By Sinisa Markovic Peter Williams, a former executive of Trenchant, L3Harris’ cyber division, has been sentenced to 87 months in prison by a federal judge in Washington, D.C., after pleading guilty to stealing and selling sensitive cyber-exploit trade secrets to […]

Ex-L3Harris executive sentenced to 87 months for selling stolen cyber-exploit trade secrets Read More »

CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108)

0-day, CISA, Don't miss, file-sharing, FileZen, Hot stuff, Japan, JPCERT/CC, News, Ransomware, Soliton, vulnerability /

CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108) 2026-02-25 at 12:14 By Zeljka Zorz CISA has added CVE-2026-25108, an OS command injection vulnerability in Soliton Systems’ FileZen secure file transfer solution, to its Known Exploited Vulnerabilities (KEV) catalog. The vendor has confirmed active exploitation, stating it has received multiple reports of damage caused […]

CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108) Read More »

Cyber valuations climb as capital concentrates, AI security expands

Artificial Intelligence, cybersecurity, DataTribe, Don't miss, enterprise, investment, News, report, survey /

Cyber valuations climb as capital concentrates, AI security expands 2026-02-25 at 08:59 By Sinisa Markovic Venture funding in cybersecurity continued to concentrate in large private rounds at the end of 2025, driving valuations higher across stages. Data from DataTribe shows total capital invested approached $150 billion for the year, with a disproportionate share flowing into […]

Cyber valuations climb as capital concentrates, AI security expands Read More »

Microsoft adds domain libraries and Copilot integration to the quantum development kit

Don't miss, GitHub, Microsoft, News, open source, quantum computing, software /

Microsoft adds domain libraries and Copilot integration to the quantum development kit 2026-02-25 at 08:05 By Anamarija Pogorelec The Microsoft Quantum Development Kit (QDK) is an open-source toolkit that runs on laptops and in common development environments. It includes code, simulators, libraries, and workflows that work with Visual Studio Code and GitHub Copilot. Integration with […]

Microsoft adds domain libraries and Copilot integration to the quantum development kit Read More »

Airline brands become launchpads for phishing, crypto fraud

attacks, BforeAI, Crypto, cybercrime, cybersecurity, Don't miss, News, phishing, scams, Threat Intelligence, threats, travel industry /

Airline brands become launchpads for phishing, crypto fraud 2026-02-25 at 08:05 By Sinisa Markovic Airline brands sit at the center of peak travel booking cycles, loyalty programs, and high value transactions. Criminal groups continue to register thousands of lookalike domains tied to these brands, targeting travelers, employees, and business partners. Recent threat intelligence from BforeAI’s […]

Airline brands become launchpads for phishing, crypto fraud Read More »

Edge systems take the brunt of internet-wide exploitation attempts

cybersecurity, GreyNoise, News, report, Threat Intelligence /

Edge systems take the brunt of internet-wide exploitation attempts 2026-02-25 at 07:18 By Anamarija Pogorelec Internet-facing VPNs, routers, and remote access services absorbed sustained exploitation attempts throughout the second half of 2025, with nearly 3 billion malicious sessions recorded over 162 days. The concentration on edge infrastructure aligns with how attackers pursue initial access across […]

Edge systems take the brunt of internet-wide exploitation attempts Read More »

Teenagers charged over public bike service breach that exposed 4.62 million records

breach, cybercrime, data theft, law enforcement, News, South Korea /

Teenagers charged over public bike service breach that exposed 4.62 million records 2026-02-24 at 17:06 By Sinisa Markovic Two South Korean teenagers have been charged in connection with a cyberattack that compromised the personal data of 4.62 million users of Seoul’s public bike service, Ttareungyi. The compromised data included user IDs, mobile phone numbers, addresses, […]

Teenagers charged over public bike service breach that exposed 4.62 million records Read More »

Microsoft expands Sovereign Cloud security with governance, local productivity and AI

Artificial Intelligence, Cloud, cloud security, Microsoft, Microsoft Azure, News /

Microsoft expands Sovereign Cloud security with governance, local productivity and AI 2026-02-24 at 15:26 By Anamarija Pogorelec Microsoft expands Microsoft Sovereign Cloud with new disconnected and AI capabilities that help organizations run critical infrastructure, productivity services and large AI models inside sovereign boundaries while keeping governance and operational continuity across connected and disconnected environments. Sovereign […]

Microsoft expands Sovereign Cloud security with governance, local productivity and AI Read More »

Self-spreading npm malware targets developers in new supply chain attack

data theft, Don't miss, Hot stuff, JavaScript, Malware, News, Node.js, Socket, software development, worms /

Self-spreading npm malware targets developers in new supply chain attack 2026-02-24 at 15:10 By Zeljka Zorz Security researchers have uncovered another supply chain attack targeting developers: 19 typosquatting npm packages published on npmjs.com that steal credentials, infect projects, and propagate themselves across developer environments. The operation, dubbed “SANDWORM_MODE,” represents a (still) rare example of worm-like […]

Self-spreading npm malware targets developers in new supply chain attack Read More »

Windows 365 for Agents brings managed cloud PCs to autonomous workflows

agentic AI, Artificial Intelligence, Microsoft, News, Windows /

Windows 365 for Agents brings managed cloud PCs to autonomous workflows 2026-02-24 at 13:02 By Anamarija Pogorelec Microsoft’s Windows 365 for Agents is a cloud platform that gives AI agents secure access to cloud PCs. It lets builders run copilots, agents, and automated workflows in Windows environments without managing infrastructure. The platform includes security, policy […]

Windows 365 for Agents brings managed cloud PCs to autonomous workflows Read More »

International operation dismantles fraud network, €400,000 seized

cybercrime, EU, Eurojust, law enforcement, News /

International operation dismantles fraud network, €400,000 seized 2026-02-24 at 12:55 By Sinisa Markovic A coordinated international operation supported by Eurojust dismantled a fraudulent call centre operating from three offices and targeting citizens throughout Europe. Authorities arrested 11 suspects and seized more than €400,000 in cash. Initial investigations identified victims in Latvia and Lithuania who lost […]

International operation dismantles fraud network, €400,000 seized Read More »

Microsoft extends security patching for three Windows products at a price

cybersecurity, Don't miss, Microsoft, News, update, Windows /

Microsoft extends security patching for three Windows products at a price 2026-02-24 at 11:38 By Sinisa Markovic Support is ending for three Windows products released in 2016, with deadlines beginning in October 2026. Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB will reach end of support on October 13, 2026, followed […]

Microsoft extends security patching for three Windows products at a price Read More »

AI is becoming part of everyday criminal workflows

Artificial Intelligence, cybercrime, cybercriminals, Don't miss, Features, Hot stuff, News, research /

AI is becoming part of everyday criminal workflows 2026-02-24 at 09:00 By Mirko Zorz Underground forums include long threads about chatbots drafting phishing emails, generating code snippets, and coaching social engineering calls. A new study examined conversations captured between January 1, 2025 and July 31, 2025 across dozens of cybercrime forums to map how AI […]

AI is becoming part of everyday criminal workflows Read More »

Scroll to Top