THREAT ADVISORIES

Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.

​Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. [...]

IMSI and IMEI are IDs your phone shares with networks. Learn how they differ, how attackers get them, and why rotating your IMSI blunts tracking. [...]

Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organizations face when a supplier, network device or critical digital service fails: what breaks, who decides, and how quickly can operations recover? A serious cyber incident does not need to begin on an organization’s core network to interrupt its operations. A compromised supplier account, an exposed edge device or an outage at a cloud provider can be enough to cut off access to … More → The post Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus appeared first on Help Net Security .

This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home Assistant Green. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-91131.

This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target system, in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.8. The following CVEs are assigned: CVE-2026-118631.

Pwning Ray-Bans and VWs, Finding Resilience, Escaping Containers, Embracing Chaos Cyber and Berlin go together like currywurst and craft beer, clubbing and techno, the Brandenburg Gate and Reichstag Dome - and the cyberpunks are back for this year's annual Nullcon cybersecurity conference. Cue research-led briefings, training, competitions and more.

New Investment Will Extend DSPM Technology Into Broad Data Protection Capabilities Sentra raised $150 million in a Capital One Ventures-led Series C to expand beyond data security posture management into DLP, AI governance and identity intelligence, helping enterprises discover sensitive data and control what AI models and autonomous agents can access.

Learn how governments detect VPN traffic using IP addresses, protocol fingerprints and active probing, and why encryption alone cannot prevent blocking.

Apple will begin checking publicly shared iCloud content in version 27.3. Here's what the change means for file sharing, encryption, and account restrictions. The post Apple to Check Public iCloud Links Starting With iOS 27.3 appeared first on TechRepublic .

AI agents act for millions, but servers see intermediaries that strip user visibility. This post defines the problem space and introduces a collaborative approach to safely identifying, allowing, and managing this automated traffic.

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and malicious messages spoofing familiar business-service sender domains exposed risks associated with security overrides. The post Email threat landscape: Q3 2026 trends and insights appeared first on Microsoft Security Blog .

Cyberhaven has introduced Agentic Data Security (ADS), to help CISOs, data security teams, insider risk teams, and AI governance leaders say yes to AI agents without losing control of their data. Agentic Data Security shows security teams what every AI agent does with company data, who it is acting for, where the data goes next, and stops sensitive data before it leaves. The companies leaning furthest into the agentic future, from frontier AI labs to … More → The post Cyberhaven launches Agentic Data Security to track and control AI data use appeared first on Help Net Security .

Arkose Labs has expanded Arkose Agent Trust Manager to help businesses control agentic traffic. Companies can classify agent sessions, apply allow, monitor or block policies at each step of the customer journey, and track the same agent across multiple networks. The need is urgent given Arkose Labs’ State of Agentic AI Trust Q3 report found that personal AI agents identify themselves less than 3% of the time. Rules that wait for an agent to announce … More → The post Arkose Labs expands Agent Trust Manager to govern agent sessions appeared first on Help Net Security .

Box has announced new capabilities to transform how organizations put agents to work across their most critical business processes. Box unveiled Box Architect for autonomously building, managing, and optimizing agentic workflows, redefining how organizations deploy AI on their most critical processes. With Architect, teams will be able to leverage frontier AI to create new workflows and apps, configure agents, connect to Box tools, and manage workflows at scale – all built on their trusted content … More → The post Box pairs agentic workflow plans with new threat protections appeared first on Help Net Security .

Sysdig has announced the general availability of Sysdig AI Defense, giving organizations tools to monitor and control AI agent activity across endpoints and cloud environments. The platform checks agent actions against company policies to allow them, hold them for user approval or block them before completion. It also records agent activity and policy decisions for investigations and audits. Enterprises are deploying AI faster than they can govern it. In a recent IBM survey, 77% of … More → The post Sysdig AI Defense puts runtime guardrails on AI agents appeared first on Help Net Security .

Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. The change specifically applies to scenarios where users share iCloud content, such as photos in iCloud Photos or files in iCloud Drive, by sharing a link and making it accessible to "Anyone with the link." When users choose this option,

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, tracked as CVE-2024-27834 (CVSS score of 5.5), to its Known Exploited Vulnerabilities (KEV) catalog. “This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant […]

Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of Resemble AI explains how agents arrive as declared, undeclared or disguised traffic, and why binary bot detection misses the last two groups. Ahmed walks through the signals that give agents away, like click timing or a batch of sessions all chasing one goal. For … More → The post AI agent detection signals that still work when agents look human appeared first on Help Net Security .

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow an attacker with

Customer control, account security and ease of use are influencing the adoption of AI agents that make purchases, book services and access personal information, according to Okta’s 2026 Customer Identity Trends Report. Consumers’ willingness to delegate depends on what an agent can do, the consequences of a mistake and their ability to approve or reverse its actions. Businesses introducing these services must meet new requirements for verifying agents and managing their permissions. Only 37% of … More → The post Most consumers aren’t ready to let AI agents shop unsupervised appeared first on Help Net Security .

Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware. [...]

Chatbots can skew election-related information and act as an intervening layer in a voter’s search.

Google's new school AI controls could affect student Search access. Here's what administrators need to know about Gemini, Guided Learning, and the 2027 rollout. The post Google Changes AI Access Rules for Schools Ahead of 2027 appeared first on TechRepublic .

Microsoft Authenticator's Android backup switch is coming in January. Existing recovery settings may not carry over automatically. The post Microsoft Authenticator’s Android Backup Switch Is Coming in January — Google One Takes Over appeared first on TechRepublic .

Descope has announced Envoy, a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app’s existing authentication flows. Consumer companies can now accept agents as first-class users—with their own identities, permissions, and approval flows—without rebuilding their identity stack. GoFundMe, You.com, GoodRx, and Composio are among several launch and design partners for Envoy who will work alongside Descope to improve Envoy in the months to come. Personal agents have reached … More → The post Descope Envoy brings AI agent authentication to consumer apps appeared first on Help Net Security .

Personal AI agents have changed how users interact with the web, blurring the lines between automated and human traffic. Learn how Cloudflare gives site owners visibility and control to manage personal agent access.

In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from a model, and notes that decompiled code strips much of that away. Kaye also covers how AI is squeezing the time teams have to patch, where it helps criminals scale fraud, and why her … More → The post What AI-generated malware looks like under the microscope appeared first on Help Net Security .

The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.

CISA 2015 Protections and Federal Funding Both Run Out Dec. 11 Unless Congress Acts The House-passed defense bill carries a decade-long renewal of the Cybersecurity Information Sharing Act of 2015, and trade associations want that language to survive into the final version - but Sen. Rand Paul, who has resisted a clean renewal, could stand in the way.

Siri Recap and Live Rewind are finally here, two months after Apple unveiled the always-listening Apple Watch features. Here’s how they work.

Key Takeaways FedRAMP authorization isn’t the finish line. Providers are expected to keep monitoring their security posture and give federal agencies the information they need for ongoing, risk-based decisions. CISA’s BOD 26-04, issued on June 10, 2026, moves federal vulnerability management toward risk-based prioritization instead of a single fixed deadline for every finding. FedRAMP has […]

Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) tools. “Attackers don’t limit themselves to the applications you’re already testing. They look for anything exposed to the internet – forgotten subdomains, staging servers left online, and infrastructure your team may not even know exists. … More → The post Novee puts forgotten internet-facing assets through penetration testing appeared first on Help Net Security .

Even if you haven’t been a staunch supporter, it is hard to ignore the impact that cryptocurrency has…

Google’s new Android app store program brings one-tap installs and automatic updates, but US users are excluded, and marketplaces face a $10,000 annual fee. The post Google’s New Android App Store Program Costs $10,000 a Year appeared first on TechRepublic .

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives directors a more direct role in cybersecurity. Under Article 20, the management bodies of essential and important entities must approve the cybersecurity risk-management measures required by […]

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-92193.

Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius. The post What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks appeared first on Microsoft Security Blog .

The following resources address the coverage available for PHP2Shell today, as well as ways Cisco customers can begin to increase resilience for whatever AI-driven threat comes next.

The partnership could provide one of the nation’s largest AI companies with a bevy of personal medical data.

HomeView settings reveal potential video recording and streaming options alongside privacy features.

It turns out even bots can’t escape bureaucracy.

Microsoft has resolved a known issue that prevented some users from activating the Smart App Control security feature after installing the October 2026 KB5127648 Windows 11 security update. [...]

Midsize organizations are actively shifting toward platform consolidation to reduce operational friction and maximize security value.

Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team wrote covers it. You can also open up a chat or GitHub scope, and then anyone in it can request work just by mentioning the agent. A message, comment or quoted document … More → The post DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work appeared first on Help Net Security .