threat

JadePuffer returns with ransomware built to target AI models and infrastructure

agentic AI, AI, Don't miss, Hot stuff, LLMs, machine learning, News, Ransomware, Sysdig, threat /

JadePuffer returns with ransomware built to target AI models and infrastructure 2026-07-21 at 16:38 By Zeljka Zorz JadePuffer, the threat actor behind the recently documented extortion operation executed end-to-end by an AI agent, is now attempting to leverage ENCFORGE, novel ransomware created to target AI and machine learning (ML) infrastructure. The extortion contact embedded in […]

JadePuffer returns with ransomware built to target AI models and infrastructure Read More »

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers

Don't miss, enterprise, file-sharing, Hot stuff, News, Progress, threat /

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers 2026-07-13 at 14:45 By Zeljka Zorz A “credible external security threat” targeting Progress Software’s ShareFile Storage Zone Controllers (SZC) – the on-premises, customer-managed server components where organizations store files shared via this popular enterprise platform – has spurred the company to

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers Read More »

Thousands of malicious AI skills found capable of stealing data, running malware

agentic AI, AI, cybersecurity, ESET, News, phishing, QR codes, Ransomware, report, threat /

Thousands of malicious AI skills found capable of stealing data, running malware 2026-07-08 at 12:00 By Anamarija Pogorelec AI agents can browse the web, use external tools, execute commands, and perform tasks on behalf of users. Many rely on skills that define how they interact with services and data. Malicious skills can abuse those capabilities

Thousands of malicious AI skills found capable of stealing data, running malware Read More »

Autonomous AI-driven worm can reason its way through corporate networks

AI, Don't miss, Hot stuff, LLMs, News, research, threat, worms /

Autonomous AI-driven worm can reason its way through corporate networks 2026-06-03 at 20:20 By Zeljka Zorz Researchers at the University of Toronto, the Vector Institute, and the University of Cambridge have built and tested a proof-of-concept AI-driven worm that does not operate on a fixed list of exploits. Instead, it analyzes each target it encounters,

Autonomous AI-driven worm can reason its way through corporate networks Read More »

Indirect prompt injection is taking hold in the wild

agentic AI, AI, data theft, Don't miss, DoS, Forcepoint, Google, Hot stuff, LLMs, News, prompt injection, research, SEO, threat /

Indirect prompt injection is taking hold in the wild 2026-04-24 at 23:26 By Zeljka Zorz The open web is slowly but surely filling up with “traps” designed for LLM-powered AI agents. The technique, known as indirect prompt injection (IPI), involves hiding (more or less) covert instructions inside ordinary web pages, waiting for an AI agent

Indirect prompt injection is taking hold in the wild Read More »

Prompt injection tags along as GenAI enters daily government use

Artificial Intelligence, Center for Internet Security, LLMs, News, report, survey, threat /

Prompt injection tags along as GenAI enters daily government use 2026-04-09 at 08:27 By Sinisa Markovic Routine use of GenAI has moved into daily operations in state and territorial government environments, placing new security risks within common workflows. A Center for Internet Security (CIS) report, Prompt Injections: The Inherent Threat to Generative AI, identifies prompt

Prompt injection tags along as GenAI enters daily government use Read More »

$100 radio equipment can track cars through their tire sensors

connected cars, cybersecurity, News, research, surveillance, threat /

$100 radio equipment can track cars through their tire sensors 2026-03-03 at 19:46 By Sinisa Markovic When people consider what might track their movements, they think of smartphone apps, GPS services, or roadside cameras. The tires of a new car rarely enter that equation. Researchers at IMDEA Networks Institute, together with European partners, found that

$100 radio equipment can track cars through their tire sensors Read More »

When the Olympics connect everything, attackers pay attention

cybersecurity, News, Palo Alto Networks, phishing, report, social engineering, threat /

When the Olympics connect everything, attackers pay attention 2026-01-19 at 09:19 By Anamarija Pogorelec Global sporting events bring a surge of network traffic, new systems, and short term partnerships. That mix draws attention from cyber threat actors who see opportunity in scale and distraction. A new Palo Alto Networks threat study on the Milan Cortina

When the Olympics connect everything, attackers pay attention Read More »

Rethinking OT security for project heavy shipyards

access control, access management, cyber resilience, cybersecurity, Damen, Don't miss, Features, Hot stuff, maritime industry, News, threat /

Rethinking OT security for project heavy shipyards 2026-01-12 at 09:09 By Mirko Zorz In this Help Net Security interview, Hans Quivooij, CISO at Damen Shipyards Group, discusses securing OT and ICS in the shipyard. He outlines how project-based operations, rotating contractors, and temporary systems expand the threat surface and complicate access control. Quivooij also covers

Rethinking OT security for project heavy shipyards Read More »

When every day is threat assessment day

Artificial Intelligence, automation, cybersecurity, Don't miss, Features, financial industry, generative AI, Hot stuff, Insurance, News, Sammons Financial Group, strategy, threat, threats /

When every day is threat assessment day 2025-11-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Paul J. Mocarski, VP & CISO at Sammons Financial Group, discusses how insurance carriers are adapting their cybersecurity strategies. He explains how ongoing threat assessments, AI-driven automation, and third-party risk management help maintain readiness. Mocarski also

When every day is threat assessment day Read More »

The architecture of lies: Bot farms are running the disinformation war

Arkose Labs, bot, cybersecurity, disinformation, News, Thales, threat /

The architecture of lies: Bot farms are running the disinformation war 2025-10-07 at 14:03 By Sinisa Markovic Bot farms have moved into the center of information warfare, using automated accounts to manipulate public opinion, influence elections, and weaken trust in institutions. Algorithms reward noise over truth Thales reports that in 2024, automated bot traffic made

The architecture of lies: Bot farms are running the disinformation war Read More »

Your budget Android phone might be spying on you

Android, cybersecurity, Don't miss, mobile apps, mobile devices, News, smartphones, threat /

Your budget Android phone might be spying on you 2025-09-30 at 08:08 By Sinisa Markovic Researchers have found that many low-cost Android devices come with pre-installed apps that have high-level access to the system. Unlike apps from the Google Play Store, many of these are not subject to thorough checks and can serve as vectors

Your budget Android phone might be spying on you Read More »

AI video surveillance could end privacy as we know it

Artificial Intelligence, cybersecurity, News, Prismatic, Privacy, surveillance, threat /

AI video surveillance could end privacy as we know it 2025-09-16 at 08:40 By Sinisa Markovic AI-powered video surveillance brings up big questions about privacy. On one hand, it can make us feel safer, but on the other, it can easily cross the line into intrusion. The more we let technology watch and track our

AI video surveillance could end privacy as we know it Read More »

Detecting danger: EASM in the modern security stack

Don't miss, Expert analysis, Expert corner, Hot stuff, monitoring, News, Outpost24, threat, Threat Intelligence /

Detecting danger: EASM in the modern security stack 2025-09-03 at 08:03 By Help Net Security In today’s complex threat environment, the challenge for security professionals isn’t just defeating threats – it’s finding your vulnerabilities in the first place. That’s where External Attack Surface Management (EASM) tools come in. EASM can identify the many weaknesses that

Detecting danger: EASM in the modern security stack Read More »

The energy sector has no time to wait for the next cyberattack

critical infrastructure, cybersecurity, Delinea, ENCS, energy sector, FBI, News, SecurityScorecard, SixMap, strategy, threat, Trustwave /

The energy sector has no time to wait for the next cyberattack 2025-08-26 at 08:57 By Sinisa Markovic The energy sector remains a major target for cybercriminals. Beyond disrupting daily routines, a power outage can undermine economic stability and public safety. Rising demand for electricity, fueled by technology and digital growth, only adds to the

The energy sector has no time to wait for the next cyberattack Read More »

The AI security crisis no one is preparing for

access management, Artificial Intelligence, Curity, cybersecurity, Don't miss, Features, Hot stuff, monitoring, News, Non Human Identities, security controls, strategy, threat /

The AI security crisis no one is preparing for 2025-08-20 at 08:03 By Mirko Zorz In this Help Net Security interview, Jacob Ideskog, CTO of Curity, discusses the risks AI agents pose to organizations. As these agents become embedded in enterprise systems, the potential for misuse, data leakage, and unauthorized access grows. Ideskog warns that

The AI security crisis no one is preparing for Read More »

The top CTEM platforms you should know in 2025

cybersecurity, Don't miss, framework, Hot stuff, Ionix, News, opinion, threat, threat detection, vulnerability management /

The top CTEM platforms you should know in 2025 2025-08-14 at 08:02 By Help Net Security Continuous Threat Exposure Management (CTEM) is a modern cybersecurity strategy originally coined by Gartner analysts, which focuses on identifying, prioritizing, validating, and mobilizing teams to reduce threat exposure across an organization’s full attack surface. It’s in a category of

The top CTEM platforms you should know in 2025 Read More »

Securing vehicles as they become platforms for code and data

Artificial Intelligence, automotive security, car, connected cars, cybersecurity, Don't miss, Element Fleet Management, Features, Hot stuff, News, strategy, threat /

Securing vehicles as they become platforms for code and data 2025-07-15 at 08:31 By Mirko Zorz In this Help Net Security interview, Robert Knoblauch, CISO at Element Fleet Management, discusses how the rise of connected vehicles and digital operations is reshaping fleet management cybersecurity. He points to growing risks like API breaches, tampering with onboard

Securing vehicles as they become platforms for code and data Read More »

Federal Reserve System CISO on aligning cyber risk management with transparency, trust

CISO, Compliance, cyber risk, cybersecurity, Don't miss, Features, Federal Reserve System, Hot stuff, News, opinion, resilience, Risk Management, strategy, threat, Threat Intelligence /

Federal Reserve System CISO on aligning cyber risk management with transparency, trust 2025-07-01 at 09:08 By Mirko Zorz In this Help Net Security interview, Tammy Hornsby-Fink, CISO at Federal Reserve System, shares how the Fed approaches cyber risk with a scenario-based, intelligence-driven strategy. She explains how the Fed assesses potential disruptions to financial stability and

Federal Reserve System CISO on aligning cyber risk management with transparency, trust Read More »

Scroll to Top