Week in review

Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack 2026-07-05 at 08:10 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Companies keep bolting AI onto their products, and the security bill is coming due Companies keep bolting AI and LLM features […]

Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited 2026-06-28 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Encrypted DNS still tells an eavesdropper where to look Encrypted DNS runs across much of the Internet. DNS over TLS,

Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack 2026-06-21 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A hardware neural network backdoor that hides in plain sight Deep learning systems on edge devices often rely on

Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack 2026-06-14 at 11:00 By Anamarija Pogorelec Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: DockSec: Open-source AI-powered Docker security scanner DockSec is an OWASP Incubator Project that combines three container security scanners with a language-model

Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast 2026-06-07 at 12:52 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: OWASP Agent Memory Guard: Stop AI agents from being weaponized through their own memory Agent Memory Guard is an open-source runtime defense layer

Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flaw 2026-05-31 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Coinflow CISO on crypto payments security under AI pressure Crypto payment firms sit near the top of the

Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited 2026-05-24 at 11:28 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: TeamPCP breached GitHub’s internal codebase via poisoned VS Code extension Following TeamPCP’s claim that they’ve breached GitHub’s own private

Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited 2026-05-17 at 14:40 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Review: Foundations of Cybersecurity, 2nd edition Jason Andress has refreshed his introductory security text for No Starch Press. He writes

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams 2026-05-10 at 12:32 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Your work apps are quietly handing 19 data points to someone Office work in 2026 relies on mobile apps used alongside

Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months 2026-05-03 at 12:54 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The AI criminal mastermind is already hiring on gig platforms Labor-hire platforms let anyone with a credit card

Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach 2026-04-26 at 12:27 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Boost Security has released SmokedMeat, an open-source framework that runs attack chains

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits 2026-04-19 at 11:49 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI identities In this Help Net Security interview, Archit Lohokare, CEO of AppViewX,

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast 2026-04-12 at 13:59 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day Cloudflare announced it is targeting 2029 to complete post-quantum security

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited 2026-04-05 at 11:17 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Financial groups lay out a plan to fight AI identity attacks Generative AI tools have brought the cost of deepfake

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages 2026-03-29 at 18:17 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: NIST updates its DNS security guidance for the first time in over a decade DNS infrastructure underpins nearly every network connection

Week in review: ScreenConnect servers open to attack, exploited Microsoft SharePoint flaw 2026-03-22 at 12:37 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What smart factories keep getting wrong about cybersecurity In this Help Net Security interview, Packsize CSO Troy Rydman breaks down the

Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR 2026-03-15 at 15:12 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning expertise into opportunity for women in cybersecurity Speaker diversity in cybersecurity has been a talking point

Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast 2026-03-08 at 11:32 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: BlacksmithAI: Open-source AI-powered penetration testing framework BlacksmithAI is an open-source penetration testing framework that uses multiple AI agents to execute different

Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023 2026-03-01 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Identity verification systems are struggling with synthetic fraud Fake and expired IDs keep showing up in routine customer transactions,

Week in review: Notepad++ supply chain attack details and targets, Patch Tuesday forecast 2026-02-08 at 11:00 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Global Threat Map: Open-source real-time situational awareness platform Global Threat Map is an open-source project offering security teams a live