INTERPOL flags AI as the new engine of African cybercrime - Help Net Security

Explore the latest Africa cybercrime trends, including ransomware, phishing, AI-enabled scams and the growing threat to digital economies.

helpnetsecurity.com

AI agent deception moves from theory to reality in UK cyber tests - Help Net Security

AISI records first real-world case of AI agent deception during cyber tests, as agents targeted real people and orgs without being told to.

helpnetsecurity.com

Code review used to be the only way to catch these bugs - Help Net Security

AI vulnerability discovery turned up 14,090 flaws across 3,915 open-source projects in two months, and 92% fell outside what fuzzers cover.

helpnetsecurity.com

Future AGI: Open-source platform for shipping self-improving AI agents - Help Net Security

Future AGI telemetry sends self-hosted admin emails and domains to the vendor on first boot. One env var stops it, one ping remains.

helpnetsecurity.com

15 TP-Link Omada vulnerabilities let attackers hijack routers and intercept camera traffic - Help Net Security

Fifteen TP-Link Omada vulnerabilities let attackers hijack devices with guessed serial numbers, default credentials and a hard-coded key.

helpnetsecurity.com

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove - Help Net Security

A phishing campaign impersonating Bank of America (BoA) is trying to trick Windows users into installing ScreenConnect remote access software.

helpnetsecurity.com

Product showcase: Material unifies Google Workspace email, file & OAuth defense - Help Net Security

Material Security platform protects Google Workspace by securing email, files, identities, and OAuth from one console.

helpnetsecurity.com

Cloudflare gives AI agents wallets with built-in spending controls - Help Net Security

Cloudflare Wallets lets AI agents securely pay for APIs and content using spending limits, wallet handles, and x402 payments.

helpnetsecurity.com

What stops attackers wrecking industrial plants is knowing how - Help Net Security

25% of AI industrial cyberattacks showed models can point attackers at OT systems, but the domain knowledge to break machinery stays scarce.

helpnetsecurity.com

Your enterprise AI footprint is about three times bigger than your model list - Help Net Security

Agentic AI adoption is growing across enterprises as organizations deploy AI agents, MCP infrastructure and broader AI ecosystems.

helpnetsecurity.com

AI developers targeted via trojanized GitHub repositories - Help Net Security

Attackers are cloning GitHub repos for AI tools to spread an infostealer, using a split-file loader and blockchain-hidden command-and-control.

helpnetsecurity.com

EU begins enforcing AI Act, putting AI models under the microscope - Help Net Security

The EU's AI Act enforcement began 2 August 2026, requiring chatbots to disclose themselves and AI-generated content to carry clear labels.

helpnetsecurity.com

Digital executive protection is a strategic imperative for CEOs - Help Net Security

Digital executive protection covers a gap corporate security teams cannot see, from personal email to home networks and family devices.

helpnetsecurity.com

OWASP's subtractive security project measures the attack paths you erased - Help Net Security

Subtractive security ranks deleting an attack path above monitoring it. Christopher Frenz on OWASP's new nine-list suite and the PER metric.

helpnetsecurity.com

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware - Help Net Security

Midnight Blizzard hackers are hijacking hotel Wi-Fi networks to steal Microsoft 365 logins in a campaign Microsoft calls CaptiveCrunch.

helpnetsecurity.com

Analysts got 19 minutes back every hour in Stellar Cyber's agentic auto triage trials - Help Net Security

Stellar Cyber's agentic auto triage closed 8,047 alerts as false positives in 124 trial days, agreeing with analysts 99.7% of the time.

helpnetsecurity.com

Uptime Kuma 2.5.0 waits two weeks before trusting a new npm package - Help Net Security

Uptime Kuma 2.5.0 adds a 14-day npm cooldown against supply-chain attacks, plus an NTP monitor and unlimited check intervals.

helpnetsecurity.com

Microsoft shortens NuGet API key lifetime to improve supply chain security - Help Net Security

Microsoft is reducing the lifetime of NuGet API keys to 30 days, requiring developers to replace older keys or adopt Trusted Publishing.

helpnetsecurity.com

Fake IRS letters direct crypto holders to bogus compliance portal - Help Net Security

Scammers are mailing fake IRS letters to crypto holders, pushing them to enroll in a Digital Asset Compliance Portal that does not exist.

helpnetsecurity.com

Cybersecurity jobs available right now: August 4, 2026 - Help Net Security

Here are the worldwide cybersecurity job openings available as of August 4, 2026, including on-site, hybrid, and remote roles.

helpnetsecurity.com

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577) - Help Net Security

Attackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central to gain access to managed endpoints.

helpnetsecurity.com

Mapping the malware blast radius a single alert won't show you - Help Net Security

Mike Wiacek of Stairwell on mapping malware blast radius, the 2.4 hidden variants behind every published sample, and AI-built malware.

helpnetsecurity.com

Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers - Help Net Security

A Chinese threat actor used DeepSeek and Hermes Agent to run autonomous cyberattacks against internet-facing systems.

helpnetsecurity.com

CISA lays out new guidance for using open-source software - Help Net Security

CISA's OSS security guidance helps agencies manage risks, contribute to projects, and evaluate open source AI systems.

helpnetsecurity.com

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066) - Help Net Security

A critical security vulnerability (CVE-2026-66066) in Ruby on Rails may allow attackers to read sensitive files off a server.

helpnetsecurity.com

Qodana 2026.2 adds post-quantum crypto checks for JVM code - Help Net Security

Qodana 2026.2 adds cross-file taint analysis, post-quantum crypto checks, and public SAST benchmark results anyone can open as a guest.

helpnetsecurity.com

SkillSpector: NVIDIA's open-source security scanner for AI agent skills - Help Net Security

NVIDIA's SkillSpector is an open-source agent skill security scanner: 64 patterns, a 0-100 risk score, and a verdict before you install.

helpnetsecurity.com

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in - Help Net Security

Red Sift and GMO GlobalSign on DMARC and BIMI, AI-driven phishing, and what it takes to build email trust that customers can see.

helpnetsecurity.com

OpenAI reveals how criminals used ChatGPT to run scams - Help Net Security

OpenAI disrupted a Cambodia-based scam operation using ChatGPT to support investment, romance, gambling, and impersonation schemes.

helpnetsecurity.com

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support - Help Net Security

Elastic Defend automates vulnerable driver detection, generating YARA rules from public feeds and shipping them outside release cycles.

helpnetsecurity.com