Posts of last few hours

ThreatModeler has announced the launch of NexusAI, its new AI-powered threat modeling partner within the ThreatModeler Nexus platform. NexusAI helps enterprises automate more of the work involved in creating, analyzing, and maintaining threat models, enabling security teams to scale their impact without scaling manual effort. As AI accelerates application development, security teams face growing pressure to assess more applications, respond to architectural changes, and manage risk without slowing innovation. NexusAI addresses this challenge by taking … More →

The post ThreatModeler NexusAI tracks architectural changes and proposes security updates appeared first on Help Net Security.

Thousands of Android phones across more than 150 countries have been found running malware planted in their firmware before purchase. The campaign, called Midnight Mimosa, targets low-cost devices and gives attackers system access without requiring owners to download a harmful app or click a suspicious link. The malware can secretly install and remove apps, load […]

The post Thousands of Android Phones Ship With Hidden Malware That Disables Google Play Protections appeared first on Cyber Security News.

IDENTOS has announced that PolicyArc is now generally available. The new solution gives security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. PolicyArc is built to solve how to safely extend access not just to people and services but to the AI agents now acting on their behalf. PolicyArc builds on more than 12 years of IDENTOS identity and access work across Canadian government and healthcare … More →

The post IDENTOS PolicyArc gives AI agents task-specific, time-limited access appeared first on Help Net Security.

AppGate has expanded its zero trust offering for operational technology (OT) with Session Governance capabilities that help critical infrastructure operators reduce third-party access risk, simplify compliance audits and protect operational uptime. The expansion builds on the ZTNA for OT offering AppGate introduced in March 2026. The initial release of AppGate ZTNA for OT controlled who could access critical systems. This release governs what happens during each session and gives supervisors the final say when activity … More →

The post AppGate gives OT supervisors live monitoring and session termination controls appeared first on Help Net Security.

OpenAI has announced an expanded Chrome integration that lets ChatGPT gather information from open browser tabs and take action within the browser. This update introduces two distinct workflows: “Chat,” which uses tab content to inform its responses, and “Work,” which can control tabs to complete tasks. The announcement was made on ChatGPT’s official account on […]

The post ChatGPT Chrome Extension Expands Browser Access to Read Open Tab Content appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Department of Homeland Security (DHS) has instructed federal civilian agencies to remove DeepSeek artificial intelligence products from their information technology systems and to stop acquiring relevant products and services. This directive applies not only to DeepSeek’s applications but also to its affiliated companies and third-party products developed using DeepSeek technology, broadening its impact […]

The post US Government Bans DeepSeek AI From Federal Civilian Agency IT Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables unauthorized VPN sessions, bypasses multifactor authentication (MFA), and allows access to corporate networks. According to Unit 42’s October 19 update, two groups, Spikey Scorpius (also referred to as Qilin) and Tarnished Scorpius, are using CVE-2026-0257. […]

The post Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its security advisory on 15 October 2026, giving the flaw reported by Jose Oregon from Huntress Labs a CVSS v4.0 score of 8.4. On 17 October, it updated the advisory to tell customers that version 4.0.9.8 resolves the issue, and a blog post warning about active … More →

The post Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign appeared first on Help Net Security.