#HelpNetSecurity
LightNews LightNews
kitafox.bsky.social
Vercel ties login sessions to devices, rolls out AI security reviews in public beta（Vercelが端末紐付けセッション認証とAIセキュリティレビューを導入） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/v...
Vercel ties login sessions to devices, rolls out AI security reviews in public beta - Help Net Security
Vercel is rolling out Device Bound Session Credentials (DBSC) and has launched Vercel Security Review in public beta.
www.helpnetsecurity.com
November 6, 2026 at 9:01 PM
kitafox.bsky.social
NIST publishes cybersecurity guide for businesses too small to have IT staff（NISTが小規模企業向けセキュリティガイドを公開） #HelpNetSecurity (Nov 4)
www.helpnetsecurity.com/2026/11/04/n...
NIST publishes cybersecurity guide for businesses too small to have IT staff - Help Net Security
NIST’s small business cybersecurity guide helps solo owners secure accounts, protect data, and prepare for IT attacks and recover.
www.helpnetsecurity.com
November 5, 2026 at 7:30 AM
kitafox.bsky.social
AI agent detection signals that still work when agents look human（人間を装うAIエージェントの検出に役立つ行動シグナル） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/z...
AI agent detection signals that still work when agents look human - Help Net Security
Detecting AI agent traffic is hard when undeclared and disguised sessions behave like people and slip past binary bot tools.
www.helpnetsecurity.com
November 7, 2026 at 5:00 AM
kitafox.bsky.social
Companies are spending more on AI governance and getting less control（AIガバナンス投資の増加に管理の実効性が追いつかない） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/d...
Companies are spending more on AI governance and getting less control - Help Net Security
Shadow AI costs draw concern as security budgets grow, while unapproved AI tools reveal gaps in corporate oversight and governance.
www.helpnetsecurity.com
November 7, 2026 at 12:01 AM
kitafox.bsky.social
Healthcare can’t govern the AI tools it hasn’t found yet（医療現場で把握されていないAIツールが患者情報を扱う問題） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/h...
Healthcare can't govern the AI tools it hasn't found yet - Help Net Security
Healthcare AI governance has a gap: 70% of 151 surveyed leaders found an AI-built tool handling patient data without IT knowing.
www.helpnetsecurity.com
November 6, 2026 at 10:01 PM
kitafox.bsky.social
Google puts new limits on AI agents that hunt threats and fix vulnerabilities（Googleがセキュリティ用AIエージェントの制御機能を強化） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/g...
Google puts new limits on AI agents that hunt threats and fix vulnerabilities - Help Net Security
Google Cloud expands CodeMender and Wiz integrations with controls for AI agents, cloud workloads, and automated threat responses.
www.helpnetsecurity.com
November 6, 2026 at 11:30 AM
kitafox.bsky.social
Cyberattack on Norway’s aid agency may have swept up all user data（ノルウェー援助機関の助成金ポータル侵害で利用者全員に影響の恐れ） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/n...
Cyberattack on Norway’s aid agency may have swept up all user data - Help Net Security
A breach of Norad’s Grants Portal may have exposed names and emails of all 20,614 users, and applicants in conflict zones could be affected.
www.helpnetsecurity.com
November 7, 2026 at 4:00 AM
kitafox.bsky.social
Scammers capitalize on GTA 6 hype to push malware and crypto cons（GTA 6人気に便乗した偽配布サイトと暗号資産詐欺が拡大） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/g...
Scammers capitalize on GTA 6 hype to push malware and crypto cons - Help Net Security
GTA 6 scams use fake leaked builds, early access and mobile versions to push malware, demand crypto and harvest personal data before launch.
www.helpnetsecurity.com
November 7, 2026 at 1:01 AM
kitafox.bsky.social
OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run（OpenAIの次期AIがLinuxのroot権限取得エクスプロイト948件を生成） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/o...
OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run - Help Net Security
OpenAI’s AI pipeline built 948 working Linux kernel root exploits and wrote a patch for each flaw in a single $1.2 million run.
www.helpnetsecurity.com
November 6, 2026 at 12:01 PM
kitafox.bsky.social
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)（Zyxelの修正済みスイッチにも別の悪用脆弱性が残存） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/z...
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) - Help Net Security
Zyxel GS1900 series switches that received a fix for CVE-2026-7273 are still open to an exploit attackers used.
www.helpnetsecurity.com
November 6, 2026 at 1:59 AM
kitafox.bsky.social
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)（修正済みZyxelスイッチも別の悪用脆弱性にさらされていた） #HelpNetSecurity (Nov 5)
www.helpnetsecurity.com/2026/11/05/z...
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) - Help Net Security
Zyxel GS1900 series switches that received a fix for CVE-2026-7273 are still open to an exploit attackers used.
www.helpnetsecurity.com
November 6, 2026 at 1:18 AM
kitafox.bsky.social
AI strategy miscalculation ranks among top enterprise risks（AI戦略の誤算が企業リスク上位に） #HelpNetSecurity (Nov 4)
www.helpnetsecurity.com/2026/11/04/a...
Companies going all in on AI could see their strategy backfire - Help Net Security
AI strategy miscalculation ranks third in Gartner’s Q3 2026 risk report, with AI risks accounting for four of the top five issues.
www.helpnetsecurity.com
November 5, 2026 at 7:00 AM
kotosecurity.bsky.social
Sources: BleepingComputer, HelpNetSecurity/CrowdStrike, TheHackerNews, Senserva. No placeholders. Verify all CVEs against NVD before acting. #CyberSecurity
October 31, 2026 at 10:01 PM
kotosecurity.bsky.social
Sources: BleepingComputer, HelpNetSecurity/CrowdStrike, TheHackerNews, Senserva. No placeholders. Verify all CVEs against NVD before acting. #CyberSecurity
October 31, 2026 at 9:50 PM
kitafox.bsky.social
現場従業員のMFA回避と利用しやすい認証の必要性 #HelpNetSecurity (Oct 20)

www.helpnetsecurity.com/2026/10/20/f...
Your frontline workers have a workaround for that MFA prompt - Help Net Security
Frontline worker authentication friction drives credential sharing and MFA bypass attempts as attackers target account resets, survey finds.
www.helpnetsecurity.com
October 21, 2026 at 8:30 PM
kitafox.bsky.social
Siemens Software Centerの欠陥がClickFix攻撃に悪用 #HelpNetSecurity (Oct 20)

www.helpnetsecurity.com/2026/10/20/e...
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign - Help Net Security
Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center.
www.helpnetsecurity.com
October 21, 2026 at 11:30 AM
kitafox.bsky.social
Microsoft、AIエージェントの動的権限制御を提案 #HelpNetSecurity (Oct 20)

www.helpnetsecurity.com/2026/10/20/m...
Microsoft wants to limit AI agents’ permissions when they stray from the job - Help Net Security
Microsoft introduces Guardian Agents in Project Perception to monitor AI agents, detect risky behavior, restrict access, and contain threats.
www.helpnetsecurity.com
October 21, 2026 at 12:01 PM
kitafox.bsky.social
不完全なセキュリティパッチが攻撃者に次の標的を示す #HelpNetSecurity (Oct 20)

www.helpnetsecurity.com/2026/10/20/n...
Incomplete security patches show hackers where to look next - Help Net Security
Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass.
www.helpnetsecurity.com
October 21, 2026 at 11:00 AM
kitafox.bsky.social
Chromeが偽の修復コマンドを検出する保護機能を拡充 #HelpNetSecurity (Oct 20)

www.helpnetsecurity.com/2026/10/20/g...
Chrome flags malicious commands that scammers pass off as fixes - Help Net Security
Google’s Chrome Enhanced Protection adds suspicious site warnings, Gemini-powered scam detection and alerts for copied malicious commands.
www.helpnetsecurity.com
October 21, 2026 at 10:30 AM
kitafox.bsky.social
隔離されたはずの悪意あるカレンダー招待が残る問題 #HelpNetSecurity (Oct 20)

www.helpnetsecurity.com/2026/10/20/m...
Quarantined, but still on your calendar: The explosion of invite-based attacks - Help Net Security
There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers have warned.
www.helpnetsecurity.com
October 21, 2026 at 11:30 AM
kitafox.bsky.social
Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks（ブランド偽装フィッシングでMicrosoftが最多、AI開発ツール偽装も増加） #HelpNetSecurity (Oct 19)

www.helpnetsecurity.com/2026/10/19/c...
Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks - Help Net Security
Microsoft led Q3 2026 brand impersonation scams as attackers used fake AI services and software updates to access victims’ devices.
www.helpnetsecurity.com
October 21, 2026 at 4:04 AM
kitafox.bsky.social
Ransomware pressure now reaches employees’ homes and families（ランサムウェア脅迫が従業員の家庭にも波及） #HelpNetSecurity (Oct 19)

www.helpnetsecurity.com/2026/10/19/s...
Ransomware pressure now reaches employees’ homes and families - Help Net Security
Ransomware threatens employee safety as attackers target families, while recovery flaws leave organizations vulnerable to attacks.
www.helpnetsecurity.com
October 20, 2026 at 9:00 AM
kitafox.bsky.social
Bearer CLI: Free, source-available code security scanning tool (SAST)（機密データを重視するSASTツールBearer CLI） #HelpNetSecurity (Oct 19)

www.helpnetsecurity.com/2026/10/19/b...
Bearer CLI: Free, source-available code security scanning tool (SAST) - Help Net Security
Bearer CLI SAST scanner is free, supports seven languages, and prioritizes code flaws by the sensitive data they touch.
www.helpnetsecurity.com
October 20, 2026 at 6:00 AM
kitafox.bsky.social
Half the AI bot traffic hammering your website comes from Meta（AIボット通信が増加、Web運用への影響が拡大） #HelpNetSecurity (Oct 19)

www.helpnetsecurity.com/2026/10/19/d...
Half the AI bot traffic hammering your website comes from Meta - Help Net Security
DataDome reports AI agent traffic rose 41.5% in Q3 2026 as agentic browsers surged and Meta’s Muse reached sensitive online forms.
www.helpnetsecurity.com
October 20, 2026 at 8:00 AM
kitafox.bsky.social
Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks（ブランド偽装フィッシングでMicrosoftが突出） #HelpNetSecurity (Oct 19)

www.helpnetsecurity.com/2026/10/19/c...
Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks - Help Net Security
Microsoft led Q3 2026 brand impersonation scams as attackers used fake AI services and software updates to access victims’ devices.
www.helpnetsecurity.com
October 20, 2026 at 5:30 AM