Help Net Security یکشنبه ۱۹ مهر ۱۴۰۵ · ۱۱:۳۰

Week in review: FortiBleed is still active, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers how Cylerity k…

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security جمعه ۱۵ آبان ۱۴۰۵ · ۱۶:۱۹

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was fixed in OpenSSH 10.6p2 on November 5. “An attacker who can reach your SSH port can log in without knowing any password. It takes one connection,…

Vulnerabilities & Zero-Day Threat Intelligence Operating Systems

Source

Help Net Security جمعه ۱۵ آبان ۱۴۰۵ · ۱۳:۵۹

Residential proxy traffic caught leaving the White House network

The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, the threat intelligence firm reported that its proxy enumeration pipeline exited through AS2650, the network registered to the Executive Office of the President, 236 times between October 5 and November 3.…

Threat Intelligence Networking & Internet

Source

Help Net Security جمعه ۱۵ آبان ۱۴۰۵ · ۱۳:۴۹

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed

OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model is designed for authorized security testing of websites and applications. Vulnerability research and security testing OpenAI used GPT-6 Cyber to help secure its systems, including the infrastructure used to train its AI models. In controlled sec…

Vulnerabilities & Zero-Day

Source

Help Net Security جمعه ۱۵ آبان ۱۴۰۵ · ۱۳:۴۸

Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus

Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organisations face when a supplier, network device or critical digital service fails: what breaks, who decides, and how quickly can operations recover? A serious cyber incident does not need to begin on an organisation’s core network to interrupt its operations. A compromised supplier account, an exposed edge device or an outage at a…

Source