Posts of last few hours

Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote command execution before the user approves desktop control. Because the AnyDesk service typically runs with root privileges, successful exploitation lets attackers gain root access to the system. We identified the issue using V12, and AnyDesk […]

The post AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows version. Devices without replacement certificates will lose access to Windows Update, including security fixes delivered through the service. Microsoft is distributing the replacements through a process known as certificate rotation. “However, the key to getting updates from … More →

The post Windows PCs missing key updates could lose security fixes in 2027 appeared first on Help Net Security.

Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from 90 days. Subscribers who already use Let’s Encrypt’s optional 45-day or 6-day certificates are not affected. The organization expects the last 90-day certificate to expire on May 11, 2027, and will not revoke any valid certificates during the transition. Why the … More →

The post Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 appeared first on Help Net Security.

In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity Outlook 2026, including that CEOs now rank cyber-enabled fraud above ransomware as their top concern. Joshi explains the widening resilience gap between large and small organizations and between regions, the role of skills shortages, and what public-private … More →

The post Geopolitics and the cyber resilience gap belong in your threat model appeared first on Help Net Security.

AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple silicon, with Linux support planned. If you run coding assistants, you’re familiar with the problem Strands Box targets. Agents read files, run shell commands, execute code they wrote and call APIs, and many … More →

The post Strands Box: Open-source sandbox for AI agents appeared first on Help Net Security.