Help Net Security

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

Help Net Security — Sun, 02 Aug 2026 08:00:17 +0000

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents run with the same permissions as their users, meaning they can access sensitive files, credentials, and production systems. A prompt injection, hallucinated command, or simple mistake can quickly turn that access into a security incident. To reduce the risk, Luke Hinds and Stephen Parkinson co-founded nolabs and released Nono, an open-source … More →

The post Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released appeared first on Help Net Security.

Cybercrime goes subscription: AI, malware and infrastructure on demand

Anamarija Pogorelec — Fri, 31 Jul 2026 13:00:02 +0000

Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enabling low-skilled actors to operate at scale, according to the Infoblox 2026 Threat Landscape Report. “Cybercrime is becoming more efficient, automated, and harder to stop. Driven by economics and fueled in part by frontier AI, it … More →

The post Cybercrime goes subscription: AI, malware and infrastructure on demand appeared first on Help Net Security.

Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire

Sinisa Markovic — Fri, 31 Jul 2026 12:19:31 +0000

A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao apps ecosystem (Source: Bitsight) According to Bitsight, the operation, named Fuyao, uses preinstalled Android apps, device identity spoofing, AI-generated websites, and residential proxy services to generate advertising revenue without device owners’ knowledge. “Fuyao’s business model operates under its ability to always identify where an ad lives on a website, spoof the device … More →

The post Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire appeared first on Help Net Security.

Anthropic’s Claude breached three companies during security tests

Sinisa Markovic — Fri, 31 Jul 2026 09:41:35 +0000

Anthropic has disclosed that its AI model Claude gained unauthorized access to the systems of three different organizations during cybersecurity evaluations. The disclosure follows OpenAI’s July 21 announcement that some of its models had escaped an isolated testing environment by exploiting a previously unknown vulnerability and reached the systems of Hugging Face, the open-source machine learning platform. “After reviewing 141,006 evaluation runs where Claude could have obtained internet access, we identified three incidents in which … More →

The post Anthropic’s Claude breached three companies during security tests appeared first on Help Net Security.

Traefik Labs introduces Distro Zero secure runtime for API and AI gateways

Industry News — Fri, 31 Jul 2026 08:18:57 +0000

Traefik Labs has introduced the Distro Zero image, a hardened, vendor-supported secure runtime delivered as Traefik Hub in proxy mode. It gives platform and security teams a container whose entire executable content is a single memory-safe binary, with validated cryptography built inside it and every advanced capability, from API gateway to AI and MCP gateway to full API management, unlocked by license on that same binary. No binary swap, no migration, no re-validation as needs … More →

The post Traefik Labs introduces Distro Zero secure runtime for API and AI gateways appeared first on Help Net Security.

Horizon3.ai expands NodeZero with automated web application attack path testing

Industry News — Fri, 31 Jul 2026 08:06:59 +0000

Horizon3.ai has expanded its NodeZero platform with AI-powered web application pentesting. The platform can now autonomously test web applications and identify attack paths that chain application vulnerabilities, credential theft, lateral movement, cloud access, and data exposure. Web applications have never been more exposed or more critical to secure. The rapid deployment of “vibe-coded” applications built with generative AI has introduced a wave of systems riddled with exploitable flaws. At the same time, threat actors are … More →

The post Horizon3.ai expands NodeZero with automated web application attack path testing appeared first on Help Net Security.

AttackIQ targets CTEM execution with AVA Agentic OS

Industry News — Fri, 31 Jul 2026 07:56:38 +0000

AttackIQ has announced AVA Agentic OS, an agentic operating system designed to operationalize Continuous Threat Exposure Management. CTEM has emerged as the strategic framework for managing cyber risk, yet many organizations continue to struggle to operationalize CTEM across fragmented security technologies, disconnected workflows, and manual processes. Security teams have invested heavily in tools that identify risk, but they lack an intelligent operational layer that continuously transforms intelligence into action. AVA Agentic OS fills that gap … More →

The post AttackIQ targets CTEM execution with AVA Agentic OS appeared first on Help Net Security.

Resecurity expands threat intelligence integration ecosystem with IBM QRadar

Industry News — Fri, 31 Jul 2026 07:32:38 +0000

Resecurity has announced the availability of native integration with IBM QRadar SIEM, a widely used Security Information and Event Management (SIEM) platform used by the leading Fortune 100 corporations worldwide. The plugin is available for activation via IBM Application Exchange. The integration leverages open standards STIX and TAXII (including version 2.1) to ingest, normalize, and correlate indicators of compromise (IOCs) providing flexible configuration of data ingestion and processing workflows. Security teams can configure log sources … More →

The post Resecurity expands threat intelligence integration ecosystem with IBM QRadar appeared first on Help Net Security.

Aviation cyber risk sits on the ground, the blindness sits in the air

Mirko Zorz — Fri, 31 Jul 2026 05:30:40 +0000

In this interview with Help Net Security, Eliran Almog, CEO of Cyviation, explains why airline cyber losses happen on the ground while the aircraft stays unmonitored. He walks through GNSS jamming that leaves no trace in a SIEM, and a PX4 Autopilot flaw his team disclosed where drone command channels accept unsigned messages. He argues the Electronic Flight Bag matters less than the data loading chain behind it, makes the case for digital twins, and … More →

The post Aviation cyber risk sits on the ground, the blindness sits in the air appeared first on Help Net Security.

Companies push AI, sysadmins keep it on a short leash

Anamarija Pogorelec — Fri, 31 Jul 2026 05:00:26 +0000

In 2024, sysadmins expected AI to automate patch management optimization, vulnerability prioritization, infrastructure monitoring, and incident response within two years. Action1’s 2026 Survey Report: AI Impact on Sysadmins found that those expectations proved overly optimistic. The largest shortfalls appeared in high-impact operational and security functions, where AI needs to understand business context, system dependencies, risk, and the consequences of an incorrect action. Areas with the widest expectation-reality gaps (Source: Action1) Sysadmins view patch management and … More →

The post Companies push AI, sysadmins keep it on a short leash appeared first on Help Net Security.