THREAT ADVISORIES

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At […]

Recently, I had to extract embedded files from a set of OneNote files (extension .one).

Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]

Only a quarter of Android phones have even made it to Android 16.

A vulnerability in some Netgear routers could allow an attacker with access to your network to run malicious commands on the device.

Key Takeaways CISA AA26-194A provides actionable guidance to improve the security of Internet-facing Cisco routers against real-world attack techniques. The advisory focuses on configuration hardening and security hygiene, rather than a single vulnerability or CVE. Manually validating advisory recommendations across enterprise networks is difficult, time-consuming, and prone to inconsistencies. Qualys Policy Audit transforms advisory guidance […]

Ofcom has set out four possible age-verification methods for UK’s under-16 social media ban.

Shufti launches Know Your Agent (KYA), an AI agent verification solution designed to verify autonomous AI agents acting on behalf of individuals and businesses. Agentic commerce enables AI agents to open accounts, place orders, and move funds for their owners. A business receiving one of these requests needs to know whether the agent is genuine, who is accountable for it, and whether the action falls within what that person approved. A valid access token alone … More → The post Shufti ties AI agent actions to verified owners and permissions appeared first on Help Net Security .

Bedrock Data has announced AI-assisted remediation, which federates the work of fixing data exposure to the data owners across the enterprise. Bedrock Data discovers who owns each exposed dataset, opens a ticket for that owner in the Jira or ServiceNow workflow the enterprise already runs and supplies the context needed to fix it. When the owner closes the ticket, Bedrock Data validates that the exposure is remediated and reopens the ticket if it is not. … More → The post Bedrock Data routes data exposure fixes to owners and verifies results appeared first on Help Net Security .

Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when the "Administrator protection" security feature is enabled. [...]

Mistral has released the weights for Large 4, along with some impressive Artificial Analysis scores.

Cloudflare mitigated over 8,200 DDoS attacks per hour in Q3 2026 as attackers shifted to shorter, high-frequency strikes. Explore the latest threat data, including the collapse of CLDAP vectors and the impact of recent botnet takedowns.

Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.

In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of standard MTTR, and why only a small share of disclosed flaws, under one percent in 2025, pose active risk. Smolenski also covers how teams can build trust in autonomous remediation through asset tiering, human review, and rollback processes, … More → The post Qualys CISO on what security teams can do as exploit campaigns grow appeared first on Help Net Security .

CEO Ken Xie Says AI Infrastructure Expansion and New Threats Are Fueling Demand Fortinet executives say AI infrastructure expansion and emerging threats are driving a cybersecurity spending cycle larger and more durable than past booms, lifting third-quarter revenue 20% and prompting the network security vendor to raise its annual outlook for the third time.

Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims often struggle with shame and self-blame, while identity theft victims can spend weeks of personal effort trying to repair the damage. Source: ITRC Conducted in August and September 2026, the research surveyed 1,111 U.S. adults and a separate group of 197 victims who had contacted the ITRC for … More → The post Shame and sleepless nights haunt scam victims long after the money is gone appeared first on Help Net Security .

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-64849.

This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-118625.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-118624.

This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-118626.

Discord announced a new feature that can make your server messages discoverable on Google. Here’s how to opt out.

Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]

Amazon just dropped new smart home gear in response to Apple. Here’s how the Echo Show 16 stacks up.

The Echo Studio with Home Camera essentially equips Alexa+ with eyes to enable ‘visual intelligence’ features – but there’s a kill switch.

Discover how Cisco Live Protect, virtual patching, and Secure Workload help defenders reduce vulnerability exposure while buying time for critical patches.

Researchers set up a fake start-up company to study fraudulent North Korean IT workers.

Federal Agencies May Combine Classical and Quantum-Resistant Algorithms The National Institute of Standards and Technology outlined a phased transition to post-quantum cryptography, allowing temporary hybrid algorithms while prioritizing network encryption and setting a 2035 cutoff for quantum-vulnerable public-key algorithms under its standards.

The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains which cryptographic methods need to be replaced, what organizations should consider and how the transition will unfold. It builds on the post-quantum cryptography standards NIST released in August 2024. Those standards provide new ways to protect information against … More → The post NIST starts the countdown to retire quantum-vulnerable encryption appeared first on Help Net Security .

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-118601.

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.5. The following CVEs are assigned: CVE-2026-118608.

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118604.

OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]

This new tool proves it’s still best to limit the info you share with chatbots.

Election messages can ask you to register, donate, take a survey, or buy merchandise. Here’s how to check before you click or pay.

Socure has launched Agent Intelligence, a suite that detects AI agents, scores whether they should be trusted, and ties each agent to the verified person or business that authorized it. Agent Intelligence includes three layers in one platform designed to go beyond simple Know Your Agent (KYA) solutions: Agent Detection, generally available today inside Socure’s existing Digital Intelligence offering, Agent TrustScore, open for beta customers now, and Agent Credential, reaching general availability in Q1 2027. … More → The post Socure links AI agents to verified people and businesses appeared first on Help Net Security .

We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our defenses and capture the flag to help make the Internet safer.

Our latest report reveals how AI is reshaping our relationships, blurring what feels authentic, and creating new ways for intimacy to be exploited.

Exeon Analytics has introduced Exeon.AgentGuard, a new AI security solution designed to give organizations visibility into approved and shadow AI use, autonomous agent activity and the data flows created through connected tools and external services. Building on its expertise in AI-driven behavioral analytics and threat detection, Exeon expands its cybersecurity capabilities to address emerging risks associated with the rapid adoption of agentic AI. Bringing visibility, addressing data leakage and rogue AI agent behavior As enterprises … More → The post Exeon expands threat detection to shadow AI and autonomous agents appeared first on Help Net Security .

ThreatAware has announced the launch of Dimension, its governed workspace that provides organisations with a foundation for building, running and managing their own customised security applications. Dimension gives security teams the flexibility to develop applications tailored to their needs, while providing organisations with greater oversight of how those applications access data and interact with live systems. A shadow AI detector, an MFA dashboard, a compliance tracker, or whatever the organisation needs. If a team can … More → The post ThreatAware brings governance to AI-built security applications appeared first on Help Net Security .

The US Treasury proposes tighter China investment restrictions covering AI, biotechnology and advanced chips. Here's what businesses and investors should know. The post New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding appeared first on TechRepublic .

Summary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more vulnerabilities than Fuzzilli (45 versus 37) with a 25% overlap in the specific bugs reported. Since this comparison methodology has a tendency to underestimate overlap, we also performed dedicated experiments to test theoretical overlap in vulnerabilities reported since 2023. These experiments estimated overlap at roughly 60%. Regardless of which value is accurate, a substantial portion of vulnerabilities were discoverable by only LLMs or only fuzzing. While it is extremely promising that LLMs have become able to find so many vulnerabilities so quickly, fuzzing and LLMs are still complementary approaches. We recommend vendors perform both fuzzing and agentic analysis of their code to maximize the number of vulnerabilities that get reported before they impact users.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-114552.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2026-114551.

HumanX 2026: Trust, Governance and Business Value Define AI's Next Chapter As AI agents gain autonomy, enterprises face mounting challenges around security, governance and accountability. Drawing on interviews with technology and business leaders at HumanX 2026, ISMG's Pulse Report examines how organizations can balance AI innovation with control, trust and business value.

Regulators Retreat From Removing Certification Regs After Hearing Industry Concerns Federal regulators have backed away from eliminating core privacy and security certification requirements from electronic health records but moved forward with various other proposals to slim down certification regulations with an aim to reduce costs and drive health tech innovation.

Blue Initiative Will List Vulnerabilities Affecting Maritime IT or OT Systems A new public access database launched Monday will catalogue IT and industrial control systems software vulnerabilities that affect maritime systems. The vision "is to have a public and open single source of truth for maritime-related vulnerabilities."

Ukrainian Defense Minister Yevhen Khmara said Saturday that Starlink and Starshield connectivity had been restored.

A handful of first-hand reports show similar damage, suggesting a bad batch of hinges. Here’s what to do if your Duo screen fails.