In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how…
Tag: EN
North Korean IT Worker Scheme Targets Dozens of Organizations Across Critical U.S. Sectors
The FBI and CrowdStrike have disrupted U.S. laptop farms supporting FAMOUS CHOLLIMA, a North Korean operation that places fraudulent remote IT workers…
Generative AI Data Leakage: Risks for Enterprise Teams
By HOC Team | Updated: October 2026 | Read time: ~18 min In April 2023, a Samsung engineer…
Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands
Fortinet has disclosed a critical authentication bypass vulnerability in FortiSandbox that could let remote attackers access its web management interface…
Ransomware gets personal: ‘We-know-where-you-are kind of stuff’
37% of ransomware attacks involve psychological or physical threats, global survey found
Meshery: Open-source cloud-native manager for Kubernetes
Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud…
OpenAI Engineer Arrested for Allegedly Installing Secret Recording Device to Spy on Executive Meetings
An OpenAI engineer has been arrested for allegedly concealing an audio recording device in an executive conference room at the company’s San Francisco…
Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that…
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard…
Most companies count AI agents as insiders, and CISOs worry about their own liability
Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent…
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come…
iOS Exploit Kits Can Compromise iPhones Through a Single Malicious Website
A single visit to a compromised or deceptive website can let a sophisticated exploit kit take control of a vulnerable iPhone. On the Packet Protector…
Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes
Google is updating its Chrome Vulnerability Rewards Program (Chrome VRP), increasing payments for memory corruption vulnerabilities and expanding rewards…
Adobe Patches 176 Vulnerabilities Across 11 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
OpenAI Engineer Arrested for Planting Spyware Device in an Executive Conference Room
An OpenAI engineer has been arrested for allegedly hiding an audio recording device in an executive conference room at the company’s San Francisco…
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the…
Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks
Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections. Tracked as…
What’s old is new: Lightwell discovers novel zero-day vulnerability in core Java framework
Enterprise IT runs on decades-old foundational code. The prevailing assumption around these mature components is that if code has been sitting untouched…
Risky Bulletin: Spyware chip found in Ledger crypto-wallets
Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in…
Justice Department says North Koreans have infiltrated dozens of U.S. companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang.