Security Industry Sources

Follow security research, antivirus tests and software updates from industry sources, with links to original reports and community discussions.
Live industry deskFresh security research, without the noiseScan the essentials, open the original report, or jump into a MalwareTips discussion.
Fine-tune the deskShow me the news I care about
Clear filters
Updated throughout the day

More industry reporting

20 fresh items on this page
Image from The Hacker News for ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
The Hacker NewsMalware & threats

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it. But speed is only part of the problem. A secure connection didn't always mean a safe destination. People offering to fix a ransomware mess had questions to answer themselves.
Read at The Hacker News
Image from Check Point Research for 12th October – Threat Intelligence Report
Check Point ResearchMalware & threats

12th October – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited access provided to a private supplier. The incident reportedly exposed personal information, including names, addresses, and […] The post 12th October – Threat Intelligence Report appeared first on Check Point Research.
Read at Check Point Research Join the MalwareTips discussion
Image from Security Affairs for SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
Security AffairsSecurity updates

SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after public disclosure. The vulnerability is a server-side request forgery (SSRF) flaw that requires no login. […]
Read at Security Affairs
Image from Help Net Security for Low-cost Android phones are arriving with malware that owners can’t uninstall
Help Net SecurityMalware & threats

Low-cost Android phones are arriving with malware that owners can’t uninstall

People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different brands built on MediaTek platforms. The malware ships in the device firmware, is present before the owner switches the phone on for the first time, and can’t be uninstalled. “The compromise is complete before the phone is … More → The post Low-cost Android phones are arriving with malware that owners can’t uninstall appeared first on Help Net Security.
Read at Help Net Security
Image from The Hacker News for Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
The Hacker NewsSecurity updates

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their
Read at The Hacker News
Image from The Hacker News for Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
The Hacker NewsSecurity updates

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The
Read at The Hacker News
Image from Help Net Security for Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027
Help Net SecurityMalware & threats

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027

Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from 90 days. Subscribers who already use Let’s Encrypt’s optional 45-day or 6-day certificates are not affected. The organization expects the last 90-day certificate to expire on May 11, 2027, and will not revoke any valid certificates during the transition. Why the … More → The post Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 appeared first on Help Net Security.
Read at Help Net Security
Image from Help Net Security for Geopolitics and the cyber resilience gap belong in your threat model
Help Net SecurityMalware & threats

Geopolitics and the cyber resilience gap belong in your threat model

In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity Outlook 2026, including that CEOs now rank cyber-enabled fraud above ransomware as their top concern. Joshi explains the widening resilience gap between large and small organizations and between regions, the role of skills shortages, and what public-private … More → The post Geopolitics and the cyber resilience gap belong in your threat model appeared first on Help Net Security.
Read at Help Net Security
Image from Help Net Security for Strands Box: Open-source sandbox for AI agents
Help Net SecurityMalware & threats

Strands Box: Open-source sandbox for AI agents

AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple silicon, with Linux support planned. If you run coding assistants, you’re familiar with the problem Strands Box targets. Agents read files, run shell commands, execute code they wrote and call APIs, and many … More → The post Strands Box: Open-source sandbox for AI agents appeared first on Help Net Security.
Read at Help Net Security
Image from Help Net Security for AI vulnerability patching has a grading problem
Help Net SecuritySecurity updates

AI vulnerability patching has a grading problem

Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that made the crash go away still failed those maintainer tests. If you’re thinking about letting an AI tool patch vulnerabilities for you, this is the number to look at. Many security patching benchmarks … More → The post AI vulnerability patching has a grading problem appeared first on Help Net Security.
Read at Help Net Security
Image from Security Affairs for SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3
Security AffairsMalware & threats

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At […]
Read at Security Affairs
Back
Top