Security Industry Sources

Follow security research, antivirus tests and software updates from industry sources, with links to original reports and community discussions.
Live industry deskFresh security research, without the noiseScan the essentials, open the original report, or jump into a MalwareTips discussion.
Fine-tune the deskShow me the news I care about
Clear filters
Updated throughout the day

More industry reporting

20 fresh items on this page
Image from Help Net Security for SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)
Help Net SecuritySecurity updates

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.” “There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild,” the vendor said, but the one mentioned above could soon be, given attackers’ … More → The post SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) appeared first on Help Net Security.
Read at Help Net Security
Image from Security Affairs for Anthropic Creates Three Tiers for Claude Cyber Access
Security AffairsMalware & threats

Anthropic Creates Three Tiers for Claude Cyber Access

Anthropic created three access tiers for Claude’s offensive security use, matching cyber capabilities and safeguards to the user’s level of trust. Anthropic is trying to solve the difficult balance between using AI for cybersecurity and preventing misuse. The same model that helps security teams fix vulnerabilities can also help attackers break into systems. Its answer, […]
Read at Security Affairs
Image from Zero Day Initiative for Pwn2Own Ireland 2026 - Day Two Results
Zero Day InitiativeSecurity updates

Pwn2Own Ireland 2026 - Day Two Results

Day Two of Pwn2Own Ireland 2026 has 24 attempts on the docket, with roughly $780,000 up for grabs, running 9:30 AM to 7:30 PM IST. Samsung's Galaxy S26 will be attempted three separate times — by Valsamaras/Ken Gannon (using Djini.ai)/Valsamara at 1:00 PM, Kyeongmin Kim at 3:15 PM, and PetoWorks at 5:30 PM — worth watching since only the first successful demo claims the cash. Home Assistant Green is the day's most-attempted device, with five researchers scheduled to take a run at it. AI Infrastructure stays active with four attempts on tap (Dynamo, two at Chroma, two at Oracle's Autonomous AI Database), Wellness has just one attempt scheduled, and Printers see steady action with three separate attempts on the Lexmark CX532adwe. Yesterday, we awarded $388,500 for 32 unique 0-days. Stay tuned for all of today’s results!
Read at Zero Day Initiative
Image from Help Net Security for Anthropic loosens Claude’s cyber restrictions for verified defenders
Help Net SecurityMalware & threats

Anthropic loosens Claude’s cyber restrictions for verified defenders

Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work The program now has three tiers based on the scope of applicants’ cybersecurity work. The expansion combines CVP and Project Glasswing into a single program. Each tier has verification requirements and security controls tailored to the work it permits. Defense Access … More → The post Anthropic loosens Claude’s cyber restrictions for verified defenders appeared first on Help Net Security.
Read at Help Net Security
Image from The Hacker News for Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
The Hacker NewsMalware & threats

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional
Read at The Hacker News
Image from The Hacker News for 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
The Hacker NewsMalware & threats

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer). The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. It did not disclose who the
Read at The Hacker News
Image from Help Net Security for Check your X.Org server version because a dozen vulnerabilities have been patched
Help Net SecuritySecurity updates

Check your X.Org server version because a dozen vulnerabilities have been patched

X.Org fixed 12 security flaws in the X server and Xwayland, with the repairs shipping in xorg-server 21.1.25 and xwayland-24.1.14. Nine of the flaws can lead to arbitrary code execution. The other three can crash the server or disclose information. Ten of the 12 entries say an authenticated X client can trigger the flaw, meaning a program the server already accepts a connection from. The entries for CVE-2026-93524 and CVE-2026-93536 do not state that condition. … More → The post Check your X.Org server version because a dozen vulnerabilities have been patched appeared first on Help Net Security.
Read at Help Net Security
Image from The Hacker News for Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
The Hacker NewsMalware & threats

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing the name of a real binary, it may
Read at The Hacker News
Back
Top