Help Net Security

Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)

Sinisa Markovic — Fri, 21 Aug 2026 12:20:33 +0000

Microsoft has patched a critical remote code execution vulnerability (CVE-2026-69836) in Entra ID, reportedly exploited in the wild. Entra ID is Microsoft’s cloud identity service, formerly Azure Active Directory, that verifies logins and controls access to Microsoft 365, Azure, and connected third-party apps. Tracked as CVE-2026-69836, with the maximum CVSS score of 10.0, the vulnerability was discovered by Microsoft Principal Security Engineer Robert Fitzpatrick and could allow an unauthenticated attacker to remotely execute code in … More →

The post Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836) appeared first on Help Net Security.

Attackers impersonate popular AI brands to spread malware

Sinisa Markovic — Fri, 21 Aug 2026 11:47:39 +0000

Attackers are impersonating popular AI brands like Perplexity, Claude, ChatGPT, and Copilot to spread information stealers, backdoors, malicious browser extensions, and other malware, according to Sophos. Overview of MDR cases with AI involvement (Source: Sophos) Sophos X-Ops reviewed 12 months of managed detection and response cases, covering July 2, 2025 through June 29, 2026. Of 86 cases initially tagged for AI involvement, 34 were confirmed as malicious activity involving AI. Researchers added four cases uncovered … More →

The post Attackers impersonate popular AI brands to spread malware appeared first on Help Net Security.

Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)

Sinisa Markovic — Fri, 21 Aug 2026 07:55:43 +0000

Citrix has patched two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical authentication bypass flaw tracked as CVE-2026-19490, and is urging customers to upgrade affected appliances as soon as possible. “We strongly recommend that customers review the official NetScaler ADC and NetScaler Gateway security bulletin, assess whether their deployments are affected, and upgrade impacted appliances to the recommended builds as soon as possible,” Anil Shetty, senior VP of Engineering with Cloud Software Group … More →

The post Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490) appeared first on Help Net Security.

GitLab 19.3 helps enterprises scale agentic development securely

Industry News — Fri, 21 Aug 2026 07:12:16 +0000

GitLab has announced updates that give enterprises more control as they scale agentic software development. GitLab Dedicated customers, who already run their most sensitive software delivery workloads on GitLab, can now run GitLab Duo Agent Platform inside that same single tenant environment and region, connect their own models for inference, and keep AI-processed data inside their existing security boundary. GitLab 19.3 also ships today with support for Secrets Manager, Flow Creator Agent, and Bulk SAST … More →

The post GitLab 19.3 helps enterprises scale agentic development securely appeared first on Help Net Security.

A $25 template helped scammers build hundreds of phantom bank domains

Sinisa Markovic — Fri, 21 Aug 2026 05:00:59 +0000

A phrase on a suspicious website turned into an investigation of phantom banks built to support scams, according to new research from Allure Security. Molly DeQuattro, the company’s VP of Operations, was reviewing a domain that resembled the brand of one of its financial services clients. The page carried none of that client’s branding. It presented an unrelated bank instead. One phrase caught her attention: “one of the largest digital banking providers.” She searched public … More →

The post A $25 template helped scammers build hundreds of phantom bank domains appeared first on Help Net Security.

Nearly half of enterprises have no one leading PQC migration

Anamarija Pogorelec — Fri, 21 Aug 2026 04:30:46 +0000

Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to post-quantum cryptography (PQC), according to new research from Axiad. Who owns PQC migration? (Source: Axiad) Organizations need to know where certificates, cryptographic keys and algorithms are used before they can plan a PQC migration. About 75% of respondents said they maintain a continuously updated inventory of these assets. However, responses … More →

The post Nearly half of enterprises have no one leading PQC migration appeared first on Help Net Security.

New infosec products of the week: August 21, 2026

Anamarija Pogorelec — Fri, 21 Aug 2026 04:00:20 +0000

Here’s a look at the most interesting products from the past week, featuring releases from F5 Networks, Intezer, Netscout, and Tufin. NETSCOUT expands Adaptive DDoS Protection with outbound attack mitigation NETSCOUT has announced an extension of its Adaptive DDoS Protection (ADP) solution enabling service providers to automatically detect and mitigate outbound DDoS attack traffic. By extending protection from the attack target towards its source, NETSCOUT helps operators prevent compromised subscriber devices from disrupting their own … More →

The post New infosec products of the week: August 21, 2026 appeared first on Help Net Security.

Corero brings cloud-based AI threat analysis to SmartWall ONE

Industry News — Thu, 20 Aug 2026 11:22:26 +0000

Corero Network Security has announced AI-Augmented Cloud-Assist for SmartWall ONE, extending its automated DDoS protection with cloud-delivered AI analysis, threat intelligence, and policy optimization. As cybercriminals increasingly leverage AI to develop and evolve attack campaigns, defenders must respond with equal speed and precision. Cloud-based AI analysis enables Corero’s DoS/DDoS solutions to better identify emerging attack behaviors and rapidly generate the most effective new protection policies. The recommendations can be applied manually or automatically in seconds. … More →

The post Corero brings cloud-based AI threat analysis to SmartWall ONE appeared first on Help Net Security.

AWS limits AI agents’ data access, even when manipulated

Anamarija Pogorelec — Thu, 20 Aug 2026 11:17:21 +0000

AWS has detailed an approach for propagating user authorization context through AI agents, allowing access controls to be enforced by infrastructure and downstream services rather than relying on the agent itself. Customers using Amazon Bedrock AgentCore can build AI agents that pull information from Amazon DynamoDB tables, document repositories, SaaS platforms, and internal knowledge bases to answer questions and automate workflows. Without awareness of the user making a request, however, an agent could return information … More →

The post AWS limits AI agents’ data access, even when manipulated appeared first on Help Net Security.

Fake Gemini installer delivers Vidar infostealer via Google Colab lure

Sinisa Markovic — Thu, 20 Aug 2026 10:46:49 +0000

A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according to Darktrace researchers who investigated the incident. “During the initial analysis, it was noted that the top search result for the suspicious filename associated pointed to a file hosted on Google Colab, a cloud-based Jupyter notebook platform, commonly used by developers, researchers, and data scientists to run code and machine … More →

The post Fake Gemini installer delivers Vidar infostealer via Google Colab lure appeared first on Help Net Security.