Fake AI trading agent steals crypto wallet passwords 2026-09-17 at 11:00 By Anamarija Pogorelec Attackers built a website for a fake AI crypto trading agent and used it to install Needle Stealer, malware that replaces a victim’s browser wallet with a copy that sends the wallet password to the attacker. HP caught the campaign between […]
Fake AI trading agent steals crypto wallet passwords Read More »
MSPs say nearly half their customers rely on them for CISO services 2026-09-16 at 07:30 By Anamarija Pogorelec MSPs estimate that 46% of their customers, on average, look to them to act as CISOs, according to Sophos. Most of those providers do that job without the full set of compliance services, and many spread the […]
MSPs say nearly half their customers rely on them for CISO services Read More »
Your employees are already using AI tools you never approved 2026-09-15 at 08:00 By Anamarija Pogorelec Seventy-four percent of respondents report departmental or scaled AI adoption at their organizations, including within individual teams or departments, across business functions, and as part of processes and operations, according to the latest OneTrust 2026 AI-Ready Governance Report. The […]
Your employees are already using AI tools you never approved Read More »
Cybersecurity attention fades within months after a breach 2026-09-14 at 08:00 By Sinisa Markovic Cybersecurity attention often rises after an incident, then recedes as organizations return to their existing priorities and practices, according to a new ManageEngine survey of 700 IT and cybersecurity leaders in the US and Canada. (Source: ManageEngine) All of them had […]
Cybersecurity attention fades within months after a breach Read More »
Certificate failures can cost firms over $250,000 2026-09-14 at 07:30 By Anamarija Pogorelec The move toward 47-day public TLS certificates by 2029 will increase the certificate management workload for enterprises, according to DigiCert’s Certificate Management Outlook. Organizations will need to renew certificates more than eight times as often as under the previous certificate lifecycle and […]
Certificate failures can cost firms over $250,000 Read More »
AI adoption brings new security headaches for already stretched CISOs 2026-09-10 at 07:30 By Anamarija Pogorelec CISOs are taking on AI governance without a matching increase in resources or expertise, adding to an already broad remit spanning data protection, identity, resilience and compliance, according to Proofpoint’s 2026 Voice of the CISO report. The Al mandate […]
AI adoption brings new security headaches for already stretched CISOs Read More »
Most of the bugs Claude Mythos found have never been checked by a human 2026-09-04 at 07:30 By Anamarija Pogorelec Anthropic pointed Claude Mythos Preview at 281 open-source projects and collected 23,019 candidate vulnerabilities. External security firms reviewed 1,900 of them. Maintainers received 1,596 reports and acknowledged 1,451; 97 fixes landed upstream, and 88 findings […]
Most of the bugs Claude Mythos found have never been checked by a human Read More »
Your AI agent’s system prompt is not a security control 2026-09-03 at 10:53 By Anamarija Pogorelec An AI agent told in its system prompt to show a user only what that user is cleared to see will hand over more the moment someone talks it into doing so. Gee Rittenhouse, who oversees Security Hub, GuardDuty, […]
Your AI agent’s system prompt is not a security control Read More »
The best human hacking team still out-solved the best AI team 2026-08-27 at 07:30 By Anamarija Pogorelec Bring an AI agent to a hacking competition and you would expect to find it propping up the teams who were struggling. In the 2026 Global Cyber Skills Benchmark, agents showed up in 17 of the Top 25 […]
The best human hacking team still out-solved the best AI team Read More »
AI vulnerability discovery scores the highest impact of 20 emerging risks 2026-08-26 at 08:00 By Anamarija Pogorelec Risk managers, auditors and senior executives at 316 companies spent April and May ranking 20 threats they have not yet felt. AI discovery of cyber vulnerabilities came back first, according to Gartner. Three months earlier the same quarterly […]
AI vulnerability discovery scores the highest impact of 20 emerging risks Read More »
Ransomware attackers are zeroing in on mid-market companies 2026-08-24 at 07:30 By Anamarija Pogorelec Mid-sized companies accounted for 73% of publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe between January 2023 and June 2026, according to Black Kite. The analysis covered 13,336 incidents with known revenue and defined mid-market […]
Ransomware attackers are zeroing in on mid-market companies Read More »
Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind 2026-08-21 at 11:41 By Eduard Kovacs Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base. The post Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind appeared first on SecurityWeek. This article […]
Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind Read More »
Nearly half of enterprises have no one leading PQC migration 2026-08-21 at 07:30 By Anamarija Pogorelec Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to post-quantum cryptography (PQC), according to new research from Axiad. Who owns PQC migration? (Source: […]
Nearly half of enterprises have no one leading PQC migration Read More »
Banks look for fraud signals in customer behavior 2026-08-19 at 07:30 By Anamarija Pogorelec Banks are dealing with more fraud in which customers authorize payments after being manipulated by criminals. ThreatMark’s Fraud Readiness Benchmark 2026 describes a banking environment where social engineering, reimbursement requirements and growing case volumes are changing fraud operations. Social engineering moves […]
Banks look for fraud signals in customer behavior Read More »
The hardest part of agentic AI may be rebuilding the business 2026-08-14 at 08:30 By Anamarija Pogorelec Organizations expect AI agents to change how work gets done, driving productivity and growth while allowing employees to focus on higher-value tasks. Few, however, have the processes and workflows needed to realize those benefits, according to Deloitte’s latest […]
The hardest part of agentic AI may be rebuilding the business Read More »
Weak IAM affects up to 98% of cloud environments 2026-08-14 at 08:00 By Anamarija Pogorelec Misconfiguration remains one of the leading threats to cloud environments because a single configuration error can result in public network access, unrotated keys, missing encryption, exposed services, and logging gaps. CISA now mandates baseline cloud configuration practices for US federal […]
Weak IAM affects up to 98% of cloud environments Read More »
DDoS attacks hit record scale as 1 Tbps+ campaigns become more common 2026-08-13 at 07:30 By Anamarija Pogorelec DDoS attacks grew in scale during the first half of 2026, bringing larger traffic floods, shorter attack durations, and increasingly automated campaigns. Cloudflare’s H1 2026 DDoS Threat Report shows threat actors relying on multi-vector techniques and large-scale […]
DDoS attacks hit record scale as 1 Tbps+ campaigns become more common Read More »
US fuel gauge exposure fell by more than half in three months 2026-08-07 at 08:00 By Anamarija Pogorelec Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak. In June the number was 2,354. The count fell across April, May, […]
US fuel gauge exposure fell by more than half in three months Read More »
Novel-reading apps used users’ phones to generate fake ad traffic 2026-08-06 at 17:07 By Sinisa Markovic A new mobile ad fraud scheme, dubbed Papyrus, is using a cluster of novel-reading apps to generate hidden browser traffic, according to IAS Threat Lab. Sample novel-reading apps associated with Papyrus (Source: IAS Threat Lab) While a person taps […]
Novel-reading apps used users’ phones to generate fake ad traffic Read More »
INTERPOL flags AI as the new engine of African cybercrime 2026-08-05 at 15:24 By Anamarija Pogorelec Africa’s growing digital economy is exposing governments, businesses and internet users to a rising wave of cybercrime. The continent recorded more than 1.1 billion mobile subscriptions and over $1.1 trillion in digital transactions in 2025, while more than 570 […]
INTERPOL flags AI as the new engine of African cybercrime Read More »