Posts of last few hours

The Patch Apocalypse is continuing unabated. We are seeing record numbers of patches being released and reported CVEs continue to grow as well. August 2026 Patch Tuesday was the second biggest in history with 398 resolved CVEs: 42 rated Critical, 355 rated Important, and 1 rated Moderate. But despite the high number, again only one vulnerability was confirmed actively exploited in the wild, and two more were publicly disclosed ahead of the released patches. AI … More →

The post September 2026 Patch Tuesday forecast: All we need is more time appeared first on Help Net Security.

In this Help Net Security video, Roy Katmor, co-founder and CEO of Orchid, explains why AI agents hold credentials that nobody reviews. Organizations build agents in AI studios, connect them to enterprise tools, and give them accounts to do useful work. The agent is approved, the studio is approved, but the identities behind them sit outside the usual review process. Katmor walks through an onboarding agent that touches HR, an identity provider, ticketing, payroll, and … More →

The post A five-part inventory for your AI agent credentials appeared first on Help Net Security.

The suspicious calls, texts, and DMs you got recently aren’t a coincidence, according to Malwarebytes. Scammers have worked out which platform gets them the best results for each type of con, and they stick to that formula. (Source: Malwarebytes) The company looked at its own threat data collected between April 15 and July 14, 2026, and tracked more than 20 scam categories, from tech support cons to sextortion. “Intuitively, the platforms favored often match the … More →

The post Scammers have figured out the best time to text you appeared first on Help Net Security.

OpenAI committed $1 billion to subsidize access to its Daybreak cyber models, along with training and technical support, for organizations defending water and wastewater systems, the electric grid, state and local government, community and regional banks, nonprofits, and open-source projects. The company is starting in the United States and intends to extend the offer to partner countries within weeks. The billion is credit against OpenAI’s own products, and the company is targeting it to be … More →

The post OpenAI is putting $1 billion behind Daybreak for defenders working without enterprise budgets appeared first on Help Net Security.

Anthropic pointed Claude Mythos Preview at 281 open-source projects and collected 23,019 candidate vulnerabilities. External security firms reviewed 1,900 of them. Maintainers received 1,596 reports and acknowledged 1,451; 97 fixes landed upstream, and 88 findings became published security advisories, with counts current as of May 22, 2026. The other 21,119 candidates have not been reviewed by anyone outside Anthropic. Anthropic puts the drop-off down to a shortage of people to check the work, and the … More →

The post Most of the bugs Claude Mythos found have never been checked by a human appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from BugBase, F5 Networks, Ping Identity, and Superna. F5 speeds up virtual patching to counter AI-driven threats With new features such as anomaly detection and agentic threat intelligence, F5’s AI-powered web application firewall (WAF) is capable in delivering real-time protections because of its strategic position in customers’ infrastructure. Enhancements to F5 WAF for Distributed Cloud and virtual patching provide the precision … More →

The post New infosec products of the week: September 4, 2026 appeared first on Help Net Security.

According to Bitkom’s latest “Wirtschaftsschutz 2026” study, cyberattacks on companies have reached a new record level. Ninety-six percent of the surveyed companies were affected by data theft, industrial espionage, or sabotage over the past year, or suspect that they were. The resulting damage to the German economy is estimated to range between 211 and 270.8 […]

The post Bitkom Economic Security Study 2026: Why Cyberattacks Have Become an Existential Risk for Companies appeared first on Link11.