Security Industry Sources

Follow security research, antivirus tests and software updates from industry sources, with links to original reports and community discussions.
Live industry deskFresh security research, without the noiseScan the essentials, open the original report, or jump into a MalwareTips discussion.
Fine-tune the deskShow me the news I care about
Clear filters
Updated throughout the day

More industry reporting

20 fresh items on this page
Image from Help Net Security for Anthropic finds 94 cases where open-source projects drop security controls without warning
Help Net SecurityMalware & threats

Anthropic finds 94 cases where open-source projects drop security controls without warning

Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and code running before security checks. Attack surface reduction means limiting the parts of software an attacker can reach. Instead of waiting to discover a vulnerability, developers can restrict access to unnecessary features or move security checks ahead of … More → The post Anthropic finds 94 cases where open-source projects drop security controls without warning appeared first on Help Net Security.
Read at Help Net Security
Image from The Hacker News for LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
The Hacker NewsMalware & threats

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.
Read at The Hacker News
Image from Help Net Security for Africa cybercrime crackdown nets 1,462 arrests and over $105 million
Help Net SecurityMalware & threats

Africa cybercrime crackdown nets 1,462 arrests and over $105 million

Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa that ran from June 29 to August 31, 2026. Investigators recovered more than $105 million in illicit funds. Financial investigators tied the networks to losses exceeding $385 million and identified 65,929 victims of fraud, ransomware, business email compromise, online scams and digital extortion. Twenty of the countries were African, and the 21st … More → The post Africa cybercrime crackdown nets 1,462 arrests and over $105 million appeared first on Help Net Security.
Read at Help Net Security
Image from The Hacker News for Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
The Hacker NewsMalware & threats

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of their choosing on the affected system. Each supported line has one fixed version: 
Read at The Hacker News
Image from Security Affairs for FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
Security AffairsMalware & threats

FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they describe as one of the most […]
Read at Security Affairs
Image from The Hacker News for Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
The Hacker NewsMalware & threats

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the release of the patches. "The exploit attempt originated from an IP address associated with a commercial anonymization network," CJ Moses,
Read at The Hacker News
Image from Help Net Security for Say a few words, and a rigged AI asks for $5,000
Help Net SecurityMalware & threats

Say a few words, and a rigged AI asks for $5,000

Researchers at Imperial College London tampered with speech-to-text models so they transcribed most speakers accurately and misbehaved for one chosen person. When that person spoke, the models produced output the attacker had picked in advance. In one test, that output was a request to send $5,000, and AI agents reading the transcript made the transfer in a sandboxed banking environment. The attacker needs access to the model only while it is being fine-tuned, through a … More → The post Say a few words, and a rigged AI asks for $5,000 appeared first on Help Net Security.
Read at Help Net Security
Image from Help Net Security for Chrome puts insecure sites behind a permission prompt
Help Net SecurityMalware & threats

Chrome puts insecure sites behind a permission prompt

Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, following its introduction earlier this year for users of Safe Browsing’s Enhanced Protection mode. The vast majority of connections made by Chrome use HTTPS, according to Google. However, unprotected HTTP traffic can expose users to malware, phishing, eavesdropping and other threats. Any HTTP request gives attackers … More → The post Chrome puts insecure sites behind a permission prompt appeared first on Help Net Security.
Read at Help Net Security
Image from The Hacker News for LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The Hacker NewsMalware & threats

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the
Read at The Hacker News
Back
Top