Help Net Security

Google smart glasses privacy features cover wearers and the people around them

Anamarija Pogorelec — Thu, 12 Nov 2026 23:45:43 +0000

Google has built its Gemini-powered intelligent eyewear to stop taking photos and video when someone covers or tampers with the outward-facing recording light. Shahram Izadi, Google’s VP and GM of XR, laid out that safeguard along with face redaction, limits on data handling, and app restrictions. Bystanders told Google during years of research that they worried about being filmed without their knowledge, and that a sign of recording would help them most. Wearers face a … More →

The post Google smart glasses privacy features cover wearers and the people around them appeared first on Help Net Security.

Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters

Mirko Zorz — Thu, 12 Nov 2026 23:15:23 +0000

EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers. Each page showed what looked like a routine verification check. Behind it, the page quietly copied a PowerShell command to the clipboard and walked the visitor through pasting and running it. Doing that installs remote-control software that keeps its window hidden and starts back up every time the user logs in. Renters are the … More →

The post Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters appeared first on Help Net Security.

PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14

Anamarija Pogorelec — Thu, 12 Nov 2026 23:05:33 +0000

The PostgreSQL Global Development Group released PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 on November 12, fixing 52 security vulnerabilities and more than 140 other bugs. Most of those code execution bugs are memory errors or type confusion, where PostgreSQL handles a value as the wrong data type. They turn up in PL/Perl and PL/Tcl, text search functions such as ts_rank_cd(), parallel query, logical replication, dblink and statistics import. Thirty-two of the 52 CVEs carry … More →

The post PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14 appeared first on Help Net Security.

Self-hosted Claude Managed Agents keeps agent credentials in your environment

Anamarija Pogorelec — Thu, 12 Nov 2026 18:07:00 +0000

Anthropic has released a self-hosted version of Claude Managed Agents. Companies can run the agent harness, sandboxes, credentials, and session history in their cloud or on-premise. The option opened as a private beta on November 12, and customers request access through their Anthropic account team. The change matters for agents that already work unattended inside corporate systems, fixing broken builds, testing releases, triaging alerts, and working through bug backlogs. Until now, customers could host the … More →

The post Self-hosted Claude Managed Agents keeps agent credentials in your environment appeared first on Help Net Security.

Picus puts AI agents on the offensive with autonomous pentesting

Industry News — Thu, 12 Nov 2026 15:05:02 +0000

Picus Security has announced Picus Autonomous Penetration Testing, an agentic pentesting capability that puts AI agents on the offensive: they think like attackers, chain real exploits toward an organization’s crown jewels, and prove what a breach would look like, under governance the agent cannot override. The launch rebuilds Picus’s automated penetration testing for the agentic era on five years of enterprise deployments and thousands of automated pentests. In the post-Mythos era, AI models find and … More →

The post Picus puts AI agents on the offensive with autonomous pentesting appeared first on Help Net Security.

Attackers breached 10 organizations with an open-source AI pentest framework

Mirko Zorz — Thu, 12 Nov 2026 15:00:29 +0000

Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data at 10 of them, often after typing little more than a domain name and a one-line goal. Most of the targets fall into three groups: seven in the semiconductor and advanced-manufacturing supply chain, three in defense … More →

The post Attackers breached 10 organizations with an open-source AI pentest framework appeared first on Help Net Security.

Operation Endgame malware takedown turns up over 6 million stolen logins

Mirko Zorz — Thu, 12 Nov 2026 13:34:14 +0000

Police in nine countries, working with Europol, took down servers behind the Gootloader, CastleRAT and StealC malware operations this week and recovered more than 6 million credentials stolen from infected computers. Europol announced the action as the latest round of Operation Endgame, the international campaign against the services that give ransomware gangs their way into a network. Those logins are what reach ordinary users and companies. The suspects sold credentials they had harvested from victims’ … More →

The post Operation Endgame malware takedown turns up over 6 million stolen logins appeared first on Help Net Security.

Microsoft Entra adds a seven-day safeguard against irreversible identity deletion

Anamarija Pogorelec — Thu, 12 Nov 2026 11:04:24 +0000

Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before they can be permanently erased. The feature is designed to help organizations respond to accidental or malicious deletion of critical directory objects. It supports users that are not synchronized from on-premises systems, cloud-only groups, applications, and service principals. Entra Agent ID objects are covered through their underlying identity types. How the recovery window works Entra generally retains … More →

The post Microsoft Entra adds a seven-day safeguard against irreversible identity deletion appeared first on Help Net Security.

Stolen Claude API keys can turn Claude Code into a remote-controlled implant

Mirko Zorz — Thu, 12 Nov 2026 11:00:21 +0000

Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic’s Claude platform and pulling a 1 GB file out through the Claude Files API. Once the agent was set up, every job and every result traveled through api.anthropic.com, the endpoint the agent already calls for inference, so the attacker’s traffic looked like a coding agent doing its job. The technique needs … More →

The post Stolen Claude API keys can turn Claude Code into a remote-controlled implant appeared first on Help Net Security.

Photos: IRISSCON 2026 cybercrime conference

Zeljka Zorz — Thu, 12 Nov 2026 10:16:07 +0000

IRISSCON 2026, the annual cybercrime conference organized by IRISSCERT, took place at the Aviva Stadium in Dublin on November 11. The all-day event gives attendees a look at the cyber threats businesses are facing right now, along with practical advice on how organizations can respond to them. Help Net Security was there, and here’s a look at the day. Visitors at IRISSCON 2026 Selena Larson, staff threat researcher at Proofpoint, shared insight about GenAI use … More →

The post Photos: IRISSCON 2026 cybercrime conference appeared first on Help Net Security.