Picus Security has announced Picus Autonomous Penetration Testing, an agentic pentesting capability that puts AI agents on the offensive: they think like…
Category: Help Net Security
Attackers breached 10 organizations with an open-source AI pentest framework
Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August…
Operation Endgame malware takedown turns up over 6 million stolen logins
Police in nine countries, working with Europol, took down servers behind the Gootloader, CastleRAT and StealC malware operations this week and recovered…
Microsoft Entra adds a seven-day safeguard against irreversible identity deletion
Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before they can be…
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of…
Photos: IRISSCON 2026 cybercrime conference
IRISSCON 2026, the annual cybercrime conference organized by IRISSCERT, took place at the Aviva Stadium in Dublin on November 11. The all-day event gives…
AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents
Amazon Web Services has released AWS Emulator, a free tool that simulates AWS services on a developer’s laptop, a development server or in a continuous…
Check your GitHub repos: A secret stealer hit tens of thousands of them
A threat actor using stolen GitHub credentials has pushed a credential-stealing payload into tens of thousands of repositories since November 10. In more…
.NET 11 security changes target the software supply chain
Microsoft has released .NET 11, a Standard Term Support (STS) release that will receive two years of support. .NET 10 is still the Long Term Support (LTS)…
GitHub Agentic Autofix and the question of who owns a bad AI patch
In this Help Net Security interview, Marcelo Oliveira, VP of Product Management at GitHub, talks about who is accountable when an AI-generated patch fixes…
Dagster: Open-source cloud-native data pipeline orchestrator
Dagster is an open source orchestrator for data pipelines. It decides what runs, in what order, and when. It also tracks how the tables, datasets, machine…
Who collects the keys when an AI agent retires?
Think about the last time a good engineer left your company. Someone collected the laptop and the badge. IT revoked their logins before the end of the…
CISOs say OT will survive a cyberattack, but their engineers aren’t so sure
Ask industrial security chiefs whether their plants would keep running through a full IT compromise, and every one who answered the SANS 2026 ICS/OT…
Bots pose as AI agents, AI agents pose as humans, and defenses believe both
Over one week in October, an online marketplace took 414,210 visits from traffic wearing the name of a widely used consumer AI agent. Every visit went for…
Kai extends Autonomous Defense Platform visibility to internet-facing assets
Kai has announced External Attack Surface Management (EASM), now available on the Kai Autonomous Defense Platform. The company also launched Kai Labs, an…
Git fixes six vulnerabilities, including code execution during recursive clones
The Git project has released security updates addressing six vulnerabilities that could allow attackers to execute code, write to unintended files or…
Embed Security lets analysts teach its AI SOC Platform how to investigate
Embed Security announced new capabilities that let security teams teach Embed how they investigate, what matters in their environment, and how to improve…
Rubrik enhances DevOps Protection to preserve legitimate work during recovery
Rubrik has announced cyber recovery capabilities for DevOps platforms Microsoft Azure DevOps and GitHub. With built-in anomaly detection, blast radius…
Microsoft researchers demonstrate hidden backdoor technique for AI agents
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command…
Ubuntu certificate revocation checks arrive in curl, OpenSSL is next
Ubuntu 26.10 ships curl with certificate revocation checking built in. The check comes from upki, a project from the rustls developers. Ubuntu’s…