A security researcher’s AI agent breached an internal sales application used by WorkOS’s go-to-market teams, the developer platform provider confirmed on…
Category: Help Net Security
Hackers abuse refrigeration controllers to send spam and route proxy traffic
Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into infrastructure for a…
PyPI makes release attestations easier to find with new security tab
The Python Package Index (PyPI) has added a security tab to its project pages, giving developers a place to check where individual release files came…
Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million
Three men allegedly used deepfakes of company CEOs and law firm attorneys to trick employees into wiring more than $129 million to accounts the group…
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)
SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced…
$133 million stolen from French bank via exploited service provider
Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank’s own account to wire money to other banks, from where it was…
Product showcase: What the Malwarebytes Claude connector reveals about unexpected texts
The Malwarebytes connector for Claude checks suspicious links, phone numbers, and email addresses without leaving the chat. You can paste a link or upload…
Companies seeking an MSP doubt their ability to spot cyberattacks
Businesses looking to outsource cybersecurity want providers that can help them recover from attacks, manage AI risks, and explain what security problems…
Wirken: Open-source AI agent gateway
Wirken is an open-source gateway that sits between messaging apps and AI agents. It assumes any agent can be turned against its owner and limits what a…
An average of 8 minutes is all hackers need to log in with stolen credentials
Attackers used stolen credentials to log in an average of eight minutes after infection across 27 confirmed infostealer cases, according to a report from…
Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command policy for AI coding…
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat…
Residential proxy traffic caught leaving the White House network
The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely…
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed
OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help…
Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus
Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organisations face when a supplier, network device or critical…
US agencies warn attackers are targeting refrigeration systems that protect food and medicine
Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units…
November 2026 Patch Tuesday forecast: Old software continues to bite
How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for…
Security certification is a snapshot, and buyers read too much into it
In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate…
87% say their AI controls need to work better
The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than…
99% of repository access tokens never expire
Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations…