Mozilla has removed the data limit on the free VPN built into Firefox. Firefox users in supported regions get unlimited browsing on desktop and Android…
Tag: Help Net Security
X.Org patches eight server vulnerabilities a month after fixing 12 others
X.Org has fixed eight vulnerabilities in the X.Org X server and Xwayland, including one in the Xorg server that lets a malicious monitor corrupt its…
AI reverse engineering let researchers add a new feature to Slack
Intezer researchers used AI agents to rebuild source code for Slack, Apple’s Finder and a TinyTurla-NG sample, from a backdoor family Cisco Talos…
Dreeze raises $33 million to automate recovery of entire cloud applications
Dreeze emerged from stealth with $33 million in seed funding and announced the general availability of its Application Revival platform for Amazon Web…
CISA tweaks cyber incident form to spot attacks that might be linked
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on…
IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus
Ireland risks being dangerously unprepared for increasingly sophisticated cyberattacks and hybrid threats unless the Government acts urgently to…
Claude Mythos 5.2 arrives with stronger bug hunting and less sandbox-breaking behavior
Anthropic released Claude Fable 5.2 and Claude Mythos 5.2. The two versions share an underlying model, with stricter safeguards for cybersecurity and…
Turla’s Cereal malware turns victims’ Exchange servers into spy hubs
Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in…
Windows settings backup is on by default starting with Windows 11 26H2
Starting with Windows 11, version 26H2, Windows settings backup will switch on by default on eligible devices. The company renamed the feature, which…
What a security leader should tell the CEO about leaked credentials
In this Help Net Security interview, Eric Fourrier, CEO of GitGuardian, talks about leaked credentials and personal liability for security leaders and…
Security teams want to spot unusual AI agent behavior while they’re still defining normal
AI agents topped the list of planned investments in behavioral monitoring in Abnormal AI’s 2026 State of Behavioral Security Report. Asked where their…
Over 575 malicious OpenClaw skills delivered malware to Windows and macOS
Cybercriminals are using AI agents to coordinate attacks, stolen credentials to access linked services, and tools that interfere with intrusion detection…
Cybersecurity jobs available right now: November 10, 2026
Application Security Engineer ONE ZERO BANK | Israel | Hybrid – View job details As an Application Security Engineer, you will work with developers to…
ARTEX goes from pentesting tool to attacker staple in three months
A security researcher’s AI agent breached an internal sales application used by WorkOS’s go-to-market teams, the developer platform provider confirmed on…
Hackers abuse refrigeration controllers to send spam and route proxy traffic
Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into infrastructure for a…
PyPI makes release attestations easier to find with new security tab
The Python Package Index (PyPI) has added a security tab to its project pages, giving developers a place to check where individual release files came…
Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million
Three men allegedly used deepfakes of company CEOs and law firm attorneys to trick employees into wiring more than $129 million to accounts the group…
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)
SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced…
$133 million stolen from French bank via exploited service provider
Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank’s own account to wire money to other banks, from where it was…
Product showcase: What the Malwarebytes Claude connector reveals about unexpected texts
The Malwarebytes connector for Claude checks suspicious links, phone numbers, and email addresses without leaving the chat. You can paste a link or upload…