Posts of last few hours

Credential harvesting on developer machines has widened. Earlier infostealers worked from a short list of known targets, mostly browser stores and a few cloud credential paths. The families active now cast a much wider net. Shai-Hulud, for instance, ran a secret scanner across the entire filesystem and validated whatever it turned up, rather than checking a handful of expected locations. That breadth is what makes deception practical, and the speed is what makes it urgent. … More →

The post Product showcase: GitGuardian Honeytoken catches credential theft as it happens appeared first on Help Net Security.

A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a web server, the malicious content is assembled inside the victim’s browser using a blob URL — a temporary browser-generated URL that points to content stored locally in memory rather than on a website,” researchers explained. The attack … More →

The post Cybercriminals are building phishing pages that exist only inside victims’ browsers appeared first on Help Net Security.

CISOs are taking on AI governance without a matching increase in resources or expertise, adding to an already broad remit spanning data protection, identity, resilience and compliance, according to Proofpoint’s 2026 Voice of the CISO report. The Al mandate expands faster than resources (Source: Proofpoint) AI adds to security responsibilities GenAI is creating new concerns around sensitive data, access and employee activity. Seventy-eight percent of CISOs consider it a security risk, with the potential loss … More →

The post AI adoption brings new security headaches for already stretched CISOs appeared first on Help Net Security.

OPAQUE, a confidential computing company that runs AI workloads inside hardware-isolated environments so operators cannot inspect them, released an open standard that lets AI model builders decide when and where their weights can be decrypted once those weights leave the builder’s own servers. The standard, called Weight Custody Manifest, ships as a developer-preview specification, a Python SDK, and a public test suite covering 91 cases. The release targets a specific squeeze. Enterprises are fine-tuning open … More →

The post A new open standard locks AI weights to approved hardware appeared first on Help Net Security.

Amazon elected Kevin Mandia to its Board of Directors on September 8. Mandia founded Mandiant and served as its CEO before Google acquired the firm in September 2022, and he has worked against cyber threats in the public and private sectors for more than 30 years. Amazon called cybersecurity “one of the most consequential risks and responsibilities organizations face today,” and pointed to advances in AI as the reason the threat landscape keeps moving. That … More →

The post Kevin Mandia joins the Amazon board with 30-plus years in cybersecurity appeared first on Help Net Security.

The OpenSSL project released the first alpha of OpenSSL 4.1.0, giving developers an early look at a version built for encrypted communication over unreliable connections and faster post-quantum cryptography. This marks the opening test build for a version still months from general availability. The headline addition is support for DTLS 1.3, the latest revision of the Datagram Transport Layer Security protocol defined in RFC 9147. DTLS secures traffic sent over UDP rather than TCP, the … More →

The post OpenSSL’s new alpha build speeds up post-quantum crypto appeared first on Help Net Security.

Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen.

The post Chinese espionage groups swarm to exploit triple-link chain of zero-days appeared first on CyberScoop.