Two flaws in Barracuda’s Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access,…
Category: EN
November 2026 Patch Tuesday forecast: Old software continues to bite
How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for…
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
Norway aid agency attack, GhostMap Android flaw, More airlines hacked
Norway’s aid agency suffers data breach https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765…
Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe
Cyberattacks disrupted refrigeration monitoring systems at three French blood banks, amid similar attacks targeting European supermarkets. A cyberattack…
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at…
Security certification is a snapshot, and buyers read too much into it
In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate…
11 IT & Cyber Risk Management Tools: The 2026 Buyer’s Verdict Guide
IT and cyber risk management tooling is the register discipline underneath GRC’s broader umbrella: risks captured with owners and treatments, controls…
Hospital gave very sick doctor a special PC for his personal, erm, pleasure
Support chap told to either allow blatant policy violations or find a new job
10 Security Ratings Services: The 2026 Buyer’s Verdict Guide
Security ratings grade organizations from the outside exposed services, patch cadence, breach signals and the scores now move real money: insurance…
Corporate Cybersecurity Budget Planning: CISO Guide 2027
By HOC team | Updated: October 2026 | 25 min read Security Strategy Risk & Budget Corporate Cybersecurity…
11 Audit Management Software: The 2026 Buyer’s Verdict Guide
Audit management software succeeds on a simple test: do auditors live in it, or do they live in spreadsheets and paste into it before committee meetings?…
Not a game: Europol and partners target terrorist role-playing online
Europol’s European Union Internet Referral Unit (EU IRU) coordinated together with Spain a Referral Action Day targeting violent extremist and terrorist…
11 Security Policy Management Tools: The 2026 Buyer’s Verdict Guide
“Security policy management” names two different markets wearing one label, and this roster contains both: network security policy management (NSPM)…
Cyberattack disrupts blood storage refrigeration systems in France
France’s national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at…
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Attackers using the ARTEX agentic AI framework to discover exposed GitHub credentials and rapidly compromise cloud environments. In one intrusion, an AI…
OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords
A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that should never accept a password. The flaw, dubbed…
Fake GTA VI Download Sites Push Malware Ahead of Launch
Fake GTA VI download sites lure gamers with leaked builds, malware, crypto payment demands and mobile versions ahead…
87% say their AI controls need to work better
The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than…
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
Clutch, backed by Lightspeed and SignalFire, was last valued at $85 million, according to a source.