Help Net Security

Hackers breach Lidl’s IT service provider, steal customer data

Sinisa Markovic — Mon, 13 Jul 2026 16:34:55 +0000

German discount supermarket chain Lidl has notified customers in Germany, Belgium, and the Netherlands that customer data was stolen after attackers breached one of its IT service providers. In notices published on its support websites in Belgium and the Netherlands, Lidl said it was informed of the incident last week. “Despite high IT security standards, unidentified individuals were briefly able to access a separately stored file containing customer data and steal some of it. The … More →

The post Hackers breach Lidl’s IT service provider, steal customer data appeared first on Help Net Security.

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe

Sinisa Markovic — Mon, 13 Jul 2026 14:52:51 +0000

The EU and the UK jointly sanctioned dozens of Russian individuals and entities, accusing Moscow of coordinating a malicious cyber ecosystem targeting Europe, its member states, and international partners. The UK sanctioned 24 individuals and entities, while the EU imposed restrictive measures on nine individuals and four entities. “Cybercriminals, self-proclaimed hacktivists and private companies linked to Russia, including actors operating under its instructions, direction or control, have also carried out, enabled and facilitated a wide … More →

The post EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe appeared first on Help Net Security.

Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense

Industry News — Mon, 13 Jul 2026 13:44:39 +0000

Tidal Cyber has announced Threat-Led Asset Visibility and Vulnerability Prioritization, new innovations extending the company’s Threat-Led Defense platform. The announcement marks a significant advancement in defensive security, shifting the industry beyond static asset inventories, CVSS scoring, and disconnected exposure management toward an execution-centric model built on how adversaries actually execute attacks across the kill chain. At Tidal Cyber, adversary procedures are not another data point. They are the organizing principle that connects threats, assets, vulnerabilities, … More →

The post Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense appeared first on Help Net Security.

Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots

Industry News — Mon, 13 Jul 2026 13:28:04 +0000

Cloudflare has announced the general availability of Precursor, a next-generation, continuous behavioral validation engine for bot management. Precursor runs seamlessly inside web browsers to monitor entire user sessions in order to detect bot automation. Unlike static CAPTCHAs, it analyzes ongoing interactions in real time to catch advanced bots, improving detection precision without interrupting legitimate users. For the first time, automated bot traffic has eclipsed human activity on the Internet, now generating roughly 57% of all … More →

The post Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots appeared first on Help Net Security.

Lumen expands managed detection and response with Cortex XSIAM integration

Industry News — Mon, 13 Jul 2026 13:17:25 +0000

Lumen Technologies has announced Lumen Defender Advanced Managed Detection and Response (AMDR) for Palo Alto Networks Cortex XSIAM. Attackers are increasingly operating earlier in the lifecycle while AI is accelerating threat speed. This expanded service will bring together Lumen’s managed detection and response capabilities and Lumen Defender Threat Feed powered by Lumen’s Black Lotus Labs network-embedded threat intelligence with Palo Alto Networks Cortex XSIAM AI-driven SOC platform to help enterprises modernize security operations, reduce alert … More →

The post Lumen expands managed detection and response with Cortex XSIAM integration appeared first on Help Net Security.

Ransomware negotiator who betrayed clients sentenced to 70 months in prison

Sinisa Markovic — Mon, 13 Jul 2026 12:22:17 +0000

A former ransomware negotiator at incident response firm DigitalMint has been sentenced to 70 months in prison after admitting he shared confidential client information with the BlackCat ransomware group and later helped carry out ransomware attacks. Prosecutors say Angelo Martino, 41, abused his role at DigitalMint beginning in April 2023 by providing BlackCat operators with sensitive information gathered during ransomware negotiations. The information included victims’ negotiating positions, insurance policy limits, and internal assessments, helping the … More →

The post Ransomware negotiator who betrayed clients sentenced to 70 months in prison appeared first on Help Net Security.

Fake OAuth client IDs are helping attackers slip past sign-in logs

Mirko Zorz — Mon, 13 Jul 2026 12:10:50 +0000

Attackers running account enumeration against Microsoft cloud tenants have added a step that keeps their probing out of the usual telemetry. They spoof the OAuth client ID, the globally unique identifier assigned to an application and passed as client_id in an authentication request. Microsoft Entra ID records that value as the application ID in its sign-in logs, and the way it handles unfamiliar identifiers opens a gap that operators have started to work through. Entra … More →

The post Fake OAuth client IDs are helping attackers slip past sign-in logs appeared first on Help Net Security.

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers

Zeljka Zorz — Mon, 13 Jul 2026 11:45:40 +0000

A “credible external security threat” targeting Progress Software’s ShareFile Storage Zone Controllers (SZC) – the on-premises, customer-managed server components where organizations store files shared via this popular enterprise platform – has spurred the company to disable access to ShareFile accounts that are using them. The warning was sent to customers via email on July 10, urging them to manually shut down the server that is hosting their Storage Zone Controllers. The initial email alert from … More →

The post Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers appeared first on Help Net Security.

FastNetMon eliminates third-party bgp lookups with Netomics

Industry News — Mon, 13 Jul 2026 09:27:07 +0000

FastNetMon is introducing Netomics, a self-hosted BGP routing intelligence platform that combines live routing data, registry information, RPKI validation, routing history and AI-assisted querying into a single application. Built for internet service providers (ISPs), cloud providers, Internet Exchange Points (IXPs) and enterprises operating large IP networks, Netomics provides complete visibility into global internet routing without relying on third-party lookup services. Network engineers often need to consult multiple public tools to investigate routing incidents, validate prefix … More →

The post FastNetMon eliminates third-party bgp lookups with Netomics appeared first on Help Net Security.

Claude Code users keep 50% higher limits until July 19

Anamarija Pogorelec — Mon, 13 Jul 2026 09:06:55 +0000

Anthropic has extended a limited-time promotion that increases weekly usage limits in Claude Code by 50% through July 19, 2026, at 11:59 PM PT. When the promotion ends, weekly usage limits will return to their standard levels without any changes to users’ plans or billing. The promotion is available to Pro, Max, and Team plans, as well as legacy seat-based users on Enterprise plans. Free plans and consumption-based Enterprise seats are not eligible. What’s included … More →

The post Claude Code users keep 50% higher limits until July 19 appeared first on Help Net Security.