Help Net Security

Capcom data breach exposes 11.7 million account records

Sinisa Markovic — Fri, 23 Oct 2026 09:07:31 +0000

Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company’s web services and to play some of its games online. It detected suspicious activity on October 19 and confirmed the intrusion the same day. … More →

The post Capcom data breach exposes 11.7 million account records appeared first on Help Net Security.

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense

Sinisa Markovic — Fri, 23 Oct 2026 08:21:48 +0000

An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction set this summer through a honeypot posing as an unprotected AI service, researchers Priti More and Susmit Yenkar wrote. Its operators sent their entire working prompt to the decoy, expecting a live model on the other end … More →

The post Hackers hijack exposed AI models to launch cyberattacks at victims’ expense appeared first on Help Net Security.

Google opens its cloud to rival OpenAI, promises business data won’t train models

Anamarija Pogorelec — Fri, 23 Oct 2026 06:00:31 +0000

Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost professional tasks and everyday use that requires fast responses. More choice, one bill Businesses will purchase access through Google Cloud Marketplace. Usage will appear on a single Google Cloud invoice and count toward existing cloud spending commitments. It … More →

The post Google opens its cloud to rival OpenAI, promises business data won’t train models appeared first on Help Net Security.

Drone program compliance: What a CTO says most agencies get wrong

Mirko Zorz — Fri, 23 Oct 2026 05:30:25 +0000

In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity without exposing sensitive operations, and common mistakes in open records handling. Drawing on his cybersecurity background, he points to risks in ground control software and spreadsheet logs. … More →

The post Drone program compliance: What a CTO says most agencies get wrong appeared first on Help Net Security.

AI is taking cybersecurity jobs at junior and experienced levels alike

Anamarija Pogorelec — Fri, 23 Oct 2026 04:30:39 +0000

Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level and higher-level roles.

The post AI is taking cybersecurity jobs at junior and experienced levels alike appeared first on Help Net Security.

New infosec products of the week: October 23, 2026

Anamarija Pogorelec — Fri, 23 Oct 2026 04:00:41 +0000

Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click protection for vulnerable cloud workloads Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security teams can enforce protection in one click while engineering develops, tests, and deploys a permanent fix. ThreatModeler … More →

The post New infosec products of the week: October 23, 2026 appeared first on Help Net Security.

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

Sinisa Markovic — Thu, 22 Oct 2026 13:10:28 +0000

A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised… again,” security researcher Kevin Beaumont wrote on Mastodon. In August, Hudson Rock analyzed a 153GB archive stolen during an earlier LiteLLM supply chain attack, in March, and linked it to 2,488 corporate domains, including AWS, Samsung, Cisco and Salesforce, … More →

The post LiteLLM hit by second supply chain attack this year, users urged to rotate credentials appeared first on Help Net Security.

OpenAI’s coding agents talked themselves out of being monitored

Zeljka Zorz — Thu, 22 Oct 2026 12:47:42 +0000

Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such thing. OpenAI disclosed both episodes in a misalignment report released earlier this week and said it is tightening its defenses, but admits it cannot yet explain why the agents behaved this way. AI agents evading oversight Neither agent was attacking anything. The models involved, GPT-6.1 … More →

The post OpenAI’s coding agents talked themselves out of being monitored appeared first on Help Net Security.

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

Mirko Zorz — Thu, 22 Oct 2026 12:03:17 +0000

Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP applications running on Apache mod_php or PHP-FPM under default configurations, with confirmed exploitation on widely deployed software including WordPress, Drupal, Joomla, phpMyAdmin, Nextcloud, and Magento. If you run PHP behind a web server, you need to … More →

The post New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 appeared first on Help Net Security.

Fingerprint uses AI coding tools to automate fraud detection setup

Industry News — Thu, 22 Oct 2026 11:45:24 +0000

Fingerprint has announced Agentic Installation, the AI-powered onboarding path for companies to deploy device intelligence to their websites or apps in minutes to detect and stop fraud. By running a single prompt in an AI coding tool, such as Claude Code, Codex or Cursor, developers take Fingerprint from zero to production-ready in minutes, reducing manual setup and stopping fraud faster. What can take days or weeks with other device intelligence providers takes minutes with Fingerprint. … More →

The post Fingerprint uses AI coding tools to automate fraud detection setup appeared first on Help Net Security.