News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Android adds AI-powered scam alerts, hangs up on bank impostors (opens Help Net Security in a new tab)
Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users to catch every red flag...
-
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say (opens CSO Online in a new tab)
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing best practice for AI development. In an open letter the AI...
-
Malware evasion made easier with AI — but behavior still gives it away (opens CSO Online in a new tab)
Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its backdoor as malign. “We observed GTG-20006 operate through...
-
Microsoft Patches Two Dozen RCE Flaws in Office (opens Security Week in a new tab)
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek.
-
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis (opens Security Week in a new tab)
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company. The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on SecurityWeek.
-
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers (opens The Hacker News in a new tab)
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case...
-
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing (opens The Hacker News in a new tab)
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the...
-
Why Active Directory weaknesses stay open for years in teams with one or two admins (opens Help Net Security in a new tab)
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start...
-
The cyber talent shortage? Job postings just hit a four-year low (opens Help Net Security in a new tab)
US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job data provider JobSpikr, removed duplicates and sorted...
-
Stolen AI API keys are paying for hackers’ autonomous scans (opens Help Net Security in a new tab)
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground forums from February...
-
HP Coupon Codes and Deals October 2026 (opens Wired in a new tab)
Save up to 60%, plus an extra 20% with HP promo codes for laptops, printers, PCs, and more tech.
-
Skechers Coupon Codes 20% Off (opens Wired in a new tab)
Learn how to find, compare, and apply the best Skechers online discounts to save on comfortable sneakers, athletic apparel, and accessories.
-
Total Wireless Promo Codes & Deals: 50% Off Select Plans (opens Wired in a new tab)
Find great deals for Total Wireless, like 50% off select plans, and enjoy big savings.
-
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions (opens The Hacker News in a new tab)
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command...
-
DDoS attacks can knock services offline before links reach capacity (opens Help Net Security in a new tab)
More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses Attacks exceeding 1 Tbps or 1 Gpps increased...
-
New infosec products of the week: October 16, 2026 (opens Help Net Security in a new tab)
Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates...
-
Fastfetch 2.70.0 changes how Disk free space is reported (opens Help Net Security in a new tab)
Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch project removed QuickJS scripting and changed what its Disk, Command and Shell modules report in version 2.70.0, released October 14. Configs written...
-
A Tesla Flying Car? I Don’t Know, Man (opens Wired in a new tab)
The Federal Aviation Administration will likely have thoughts about the Tesla Roadster 2’s ability to leave the ground.
-
The Tesla Roadster 2 Is Here—and It Flies (opens Wired in a new tab)
The automaker unveiled its next luxury sports car at an event in Texas. It has thrusters on it that can send it airborne.
-
No click required: How the ad industry became a pipeline for mercenary spyware (opens CSO Online in a new tab)
That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising...
