network solutions

Network Solutions has launched Dark Web Monitoring, a new security capability that alerts small businesses when information associated with their domain appears in known breach data and provides steps they can take to reduce risk. Stolen credentials and other information exposed in data breaches can circulate across dark web marketplaces, forums and other sources. For a small business, that exposure can lead to account takeovers, compromised email, impersonation and unauthorized access to sensitive business or … More → The post Network Solutions Dark Web Monitoring alerts small businesses to domain-linked data exposure appeared first on Help Net Security .

Just days after expanding its cybersecurity-focused frontier AI program, Project Glasswing, Anthropic released two new models, Claude Mythos 5 and Claude Fable 5. Mythos 5 has been presented by Anthropic as “an upgrade to Claude Mythos Preview” and the AI company claimed in a June 9 announcement that it has “the strongest cybersecurity capabilities of any model in the world.” This new upgrade will initially be deployed through Project Glasswing, in collaboration with the US government, but the company plans for a wider availability of the model in the future via “a broader trusted access program.” Meanwhile, Fable 5 has is said to be powered by the same underlying frontier AI model as Mythos 5 but with additional guardrails, especially in areas like cybersecurity where the company said it “could be misused to cause serious damage.” One of these safeguards involves a system where queries made by Fable 5 on certain topics will receive a response from Claude Opus 4.8, Anthropic’s next-in-line model that is available to everyone. “To release the model both safely and quickly, we’ve tuned these safeguards conservatively – they’ll sometimes catch harmless requests, though they trigger, on average, in less than 5% of sessions,” cautioned the AI company, adding that is it working on new models where these safeguards will be fine-tuned to reduce false positives. Fable 5 and Mythos 5 are being offered at $10 per million input tokens and $50 per million output tokens, less than half the price of Claude Mythos Preview at $25 per million input tokens and $125 per million output tokens. Quickly following the Anthropic announcement, Microsoft said Fable 5 is now available in Microsoft Foundry and can be used to power agents in GitHub Copilot and Foundry Agent Service. Fable’s Guardrails May Not Be Sufficient, Cyber Experts Warn The Anthropic announcement generated mixed feelings in the cybersecurity industry. Sachin Puri, CEO of Network Solutions, said Mythos-class models “represent a meaningful step forward in how AI can help identify, analyze and respond to increasingly sophisticated cyber threats and detect vulnerabilities.” However, he warned that, as these systems become more powerful, their use must “include governance, accountability and what happens when guardrails fail.” Jamie Moles, senior technical manager at ExtraHop, expressed skepticism for the need to launch a “Mythos-class” tool to the public after widespread warnings from safety experts that the model poses severe risks to corporate security. He said he hoped Anthropic and any company developing powerful AI models for mass deployment deploys these innovations responsibly “to ensure its technology does not compromise the stability of systems the public relies on every day.” Andrew Rubin, founder and CEO of Illumio, is even more brazen, warning that the introduction of guardrails isn’t evidence that the problem is solved. “It’s an admission that even the companies building these models don’t fully trust where the capability leads,” he said. “Constraints at the interface don’t change the underlying math. Attackers won’t operate at that layer. They’ll go straight after the capability itself. And as these tools become more broadly available, the speed and scale of attacks will only increase. The real question is whether defenders are prepared to operate at the same speed.” Douglas McKee, director of vulnerability intelligence at Rapid7, believes that Fable will not replace Mythos and will instead become “the everyday workhorse” while Mythos remains “the power tool for tightly vetted security and infrastructure teams.” Therefore, he argued that Anthropic must “keep getting Mythos-class access into the hands of vetted defensive teams through restricted channels and its partner ecosystem” to ensure cyber defenders “keep pace with increasingly capable threat actors.” Image credits: Stockinq / PhotoGranary02 / Shutterstock.com

Cybersecurity jobs available right now: March 24, 2026 Application Security Analyst Alignerr | USA | Remote – No longer accepting applications As an Application Security Analyst, you will review and analyze application security scenarios across code, APIs, and system behavior. You will classify vulnerabilities such as authentication flaws, injection risks, and business logic issues, and evaluate secure coding practices and remediation strategies. You will also help create and validate security-focused reasoning datasets that train AI to accurately assess application risks. Application Security Engineer E.ON Digital Technology | Germany | Hybrid – No longer accepting applications As an Application Security Engineer, you will support the development and rollout of the application security roadmap. You will work closely with development and operations teams to enforce security practices and provide guidance early in the software development lifecycle to identify and mitigate risks. You will collaborate with Technology Platform teams to integrate security tools and processes into CI/CD pipelines, and guide developers on secure coding practices while helping remediate vulnerabilities. Cloud Security Lead Tata Consultancy Services | Ireland | Hybrid – No longer accepting applications As a Cloud Security Lead, you will own and govern cloud security controls across public and hybrid environments, including identity and access management, network security, workload and data protection, configuration baselines, and logging. You will provide cloud security architecture assurance for new and evolving solutions, ensuring alignment with security standards, risk appetite, shared responsibility models, and regulatory requirements. Get weekly updates on new cybersecurity job openings. Subscribe here! Corporate Cyber Security Specialist Paysafe | Ireland | Hybrid – No longer accepting applications As a Corporate Cyber Security Specialist, you will As a Corporate Cyber Security Specialist, you will lead small to medium security projects and support major initiatives, including the expansion of Microsoft 365 security services. You will design, implement, and optimize security automation, including ASR rules and other M365 controls. You will manage and enhance core security tools such as CASB solutions and CyberArk PAM, and build and strengthen IAM/IGA capabilities (Entra ID, SailPoint, Saviynt, Pathlock), including JML automation and access governance. Cyber Security Analyst The Cambridge Building Society | United Kingdom | Hybrid – No longer accepting applications As a Cyber Security Analyst, you will monitor and analyze outputs from security tools to identify early indicators of compromise. You will respond to cyber events and incidents, recommending and taking action to protect systems and data. You will fine-tune and enhance existing security controls to maximize their effectiveness, and coordinate regular testing, audits, and external security assessments, ensuring findings are risk-assessed and remediated within agreed timescales. Cybersecurity Automation Engineer Assurant | India | On-site – No longer accepting applications As a Cybersecurity Automation Engineer, you will design, implement, and maintain security solutions aligned with Assurant’s Information Security Policies and Standards. You will support technologies across applications, infrastructure, and endpoint security, and identify, assess, and remediate hardware and software vulnerabilities. You will ensure the confidentiality, integrity, and availability of enterprise systems, develop and recommend practices to prevent unauthorized access or data loss, and measure, analyze, and report compliance with security policies to leadership. Cybersecurity SOC L3 ZENDATA Cybersecurity | UAE | On-site – No longer accepting applications As a Cybersecurity SOC L3, you will lead SOC operations with a focus on operational excellence, visibility, and responsiveness. You will manage and mentor SOC analysts, fostering skill development and collaboration. You will drive SOC optimization through process improvements, automation, and technology adoption, and build and execute a strategic roadmap aligned with evolving threats and business goals. Head of Cyber Security Aneurin Bevan University Health Board | United Kingdom | On-site – No longer accepting applications As a Head of Cyber Security, you will provide strategic leadership and operational oversight for the organization’s cyber security posture, ensuring the protection of digital assets, clinical systems, and sensitive information. You will be responsible for developing and implementing cyber security strategy, managing risk, leading incident response, and ensuring compliance with national standards, regulatory requirements, and NHS Wales policies. Engineering Manager, Software Supply Chain Security: Pipeline Security GitLab | Canada | Remote – No longer accepting applications As an Engineering Manager, Software Supply Chain Security: Pipeline Security, you will guide the design and delivery of software supply chain security features, with a focus on CI job artifact security. You will lead the implementation of the SLSA framework in GitLab CI/CD and integrate capabilities such as SBOM, software composition analysis, and vulnerability management. Engineer – Network and Security KATIM | UAE | On-site – No longer accepting applications As an Engineer – Network and Security, you will architect, design, and implement scalable, resilient network solutions. You will deploy and manage network devices, including routers, switches, firewalls, and load balancers, ensuring availability, reliability, and performance meet business requirements. You will develop and enforce security policies, protocols, and procedures to protect the organization’s network and data, and conduct regular security assessments and audits to address vulnerabilities and ensure compliance with industry standards. Global Head IT Security & Compliance Lonza | France | Hybrid – No longer accepting applications As a Global Head IT Security & Compliance, you will develop, implement, and oversee a strategic enterprise information security and IT risk management program, including establishing and enforcing security policies and standards across the organization. You will create and manage security and risk awareness training for employees and system users, facilitate IT risk assessments in collaboration with stakeholders, and ensure compliance with relevant laws, regulations, and policies to minimize risk and audit findings. IT Security SecOps LSEG | France | Hybrid – No longer accepting applications As an IT Security SecOps, you will monitor cybersecurity events from internal tools and outsourced detection services. You will coordinate response and recovery efforts with IT teams, deliver cybersecurity service activities including SLA and KPI monitoring for insourced operations, and oversee outsourced security services to ensure effective performance and alignment. Penetration Tester Hacktive Security | Italy | Remote – No longer accepting applications As a Penetration Tester, you will lead and conduct comprehensive tests across systems, networks, web and mobile applications, and other digital assets. You will identify, assess, and ethically exploit vulnerabilities within client environments, and provide expert guidance on security best practices and risk mitigation to both technical and non-technical stakeholders. Safeguards Analyst, Account Abuse Anthropic | USA | Hybrid – No longer accepting applications As a Safeguards Analyst, Account Abuse, you will As a Safeguards Analyst, Account Abuse, you will develop and refine account signals and prevention frameworks that turn internal and external data into actionable abuse indicators. You will build and optimize identity and account-linking signals using graph-based infrastructure to detect coordinated, large-scale abuse. Security Engineer Paragon | Israel | On-site – No longer accepting applications As a Security Engineer, you will implement, configure, and maintain information security systems. You will continuously review and improve the organization’s infrastructure security architecture, ensuring that all requirements defined by the CISO and security team are properly implemented and aligned with the overall design. You will also actively monitor and analyze systems, firewalls, and logs to detect and respond to potential threats. Security Engineer Air Apps | USA | On-site – No longer accepting applications As a Security Engineer, you will develop and implement threat modeling to identify risks across applications and infrastructure. You will conduct vulnerability scanning, penetration testing, and security assessments to uncover weaknesses. You will define and enforce secure coding practices in collaboration with development teams and work with DevOps to integrate security into CI/CD pipelines and automate testing. Senior Cloud Security Consultant CyberCX | Australia | Hybrid – No longer accepting applications As a Senior Cloud Security Consultant, you will work with customers to design and deliver cloud security solutions, including native controls and third-party CSPM, CNAPP, or CIEM tools. You will assess the risk of existing cloud environments, workloads, and services against industry standards and frameworks, and provide recommendations to improve security posture. You will also prepare and present high-quality deliverables such as presentations, pre-sales proposals, assessment findings, and strategic recommendations. Senior Cloud Security Engineer Haventree Bank | Canada | Hybrid – No longer accepting applications As a Senior Cloud Security Engineer, you will act as the technical owner for key cloud security platforms, influencing configuration, detection logic, and roadmap in partnership with operations teams. You will define and maintain cloud security reference architectures across a multi-cloud environment, covering identity, network segmentation, encryption, workload protection, logging and monitoring, and secure service integration. You will also establish secure patterns for Infrastructure as Code, including secure-by-default templates, scanning expectations, and drift management. Senior Cyber Incident Responder Labcorp | USA | Hybrid – No longer accepting applications As a Senior Cyber Incident Responder, you will you will serve as the lead responder for validated cyber incidents, prioritizing threats that could impact clinical operations, EHR systems, connected medical devices, or PHI. You will coordinate with technical and clinical stakeholders to contain and remediate threats across hospitals, clinics, and remote care environments. You will drive improvements to the Incident Response Plan, ensuring readiness for ransomware, business email compromise, and other threats. Senior SAP ERP Security Specialist Merck Group | Germany | On-site – No longer accepting applications As a Senior SAP ERP Security Specialist, you will lead the security architecture across SAP S/4HANA and SAP ECC environments, ensuring alignment with enterprise security frameworks. You will manage user access governance and compliance, and integrate robust security controls into critical business processes. You will also monitor SAP systems for vulnerabilities, conduct risk assessments, and drive continuous improvement in security practices. SOC Analyst Tier 2 Elad Software Systems | Israel | Hybrid – No longer accepting applications As a SOC Analyst Tier 2, you will investigate and respond to escalations from Tier 1 analysts. You will conduct in-depth analysis of complex security alerts, including incidents, breaches, malware, phishing, and unauthorized access attempts. You will perform proactive threat hunting using advanced analytics, event correlation, and MITRE ATT&CK methodologies, and carry out endpoint forensics and network traffic analysis to identify attack vectors and scope. Vulnerability Analyst NTT DATA | Italy | On-site – No longer accepting applications As a Vulnerability Analyst, you will conduct vulnerability assessments using tools such as Nessus, Qualys, Rapid7, and OpenVAS. You will validate automated scan results to eliminate false positives, analyze vulnerabilities to assess exploitability and business impact, and create detailed reports with actionable remediation guidance. You will evaluate vulnerabilities using CVSS scoring and business context, prioritize remediation based on risk and asset criticality, and collaborate with threat intelligence teams to incorporate emerging threat data. Vulnerability Researcher Delta Dental Ins. | USA | Remote – No longer accepting applications As a Vulnerability Researcher, you will conduct research to identify high-impact, previously unknown vulnerabilities across a wide range of applications and technologies, including AI-enabled systems. You will perform vulnerability assessments using industry best practices across web applications, APIs, and cloud environments.

For the latest discoveries in cyber research for the week of 16th February, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Dutch telecom provider Odido was hit by a data breach following unauthorized access to its customer management system. Attackers extracted personal data of 6.2 million customers, including names, addresses, phone numbers, email addresses, bank account details, dates of birth, and passport or ID numbers. BridgePay Network Solutions, a US payment gateway, has confirmed a ransomware attack that forced it to take core systems offline. The outage disrupted portals for municipalities and merchants nationwide, though initial findings indicate no payment card data exposure and accessed files were encrypted. No ransomware group claimed responsibility for the attack. Flickr, a photo sharing platform, has experienced a security incident at a third-party email service provider on February 5. The exposure may include names, usernames, email addresses, IP addresses, location data, and more. Passwords and payment card numbers were not affected. ApolloMD, a US physician and practice management services firm, has disclosed a breach impacting 626,000 individuals. The incident occurred during May 2025, while the attackers accessed patient information from affiliated practices, exposing data such as names, addresses, and medical details. AI THREATS Google has released an analysis of adversarial AI misuse, detailing model extraction “distillation” attacks, AI-augmented phishing, and malware experimentation in late 2025. The report identified attempts to coerce disclosure of internal reasoning, AI-assisted reconnaissance by DPRK, PRC, Iranian, and Russian actors, and AI-integrated malware such as HONESTCUE leveraging Gemini’s API for second-stage payload generation. Researchers have investigated a UNC1069 intrusion targeting a cryptocurrency FinTech through AI-enabled social engineering and a fake Zoom ClickFix lure. The attack deployed seven malware families enabling TCC bypass, credential and browser data theft, keystroke logging, and C2 communications over RC4-encrypted configurations. Check Point Threat Emulation provides protection against this threat (Trojan.Wins.SugarLoader) Researchers have detailed the abuse of AI website builders to clone major brands for phishing and fraud. They analyzed a Malwarebytes lookalike site created using Vercel’s v0 tool, which replicated branding and integrated opaque PayPal payment flows. The domain leveraged SEO poisoning and spam links, with registration data indicating links to India. VULNERABILITIES AND PATCHES Microsoft has released its February 2026 Patch Tuesday updates. The release addresses 58 vulnerabilities, including six zero days under active exploitation, among them CVE-2026-21510, a Windows Shell Security Feature Bypass vulnerability that can be triggered by opening a specially crafted link or shortcut file. Successful exploitation requires convincing a user to open a malicious link or shortcut file. Google has patched 11 vulnerabilities in Chrome 145 for Windows, macOS, and Linux, including CVE-2026-2313, a use-after-free vulnerability in CSS. This high-severity flaw could allow remote code execution. Two additional high severity bugs in Codecs (CVE-2026-2314) and WebGPU (CVE-2026-2315) also enable code execution. BeyondTrust has addressed CVE-2026-1731, a CVSS 9.9 pre-authentication remote code execution flaw in Remote Support and older Privileged Remote Access versions. Shortly after a proof of concept was published, threat actors began exploiting exposed instances, prompting urgent upgrades for self-hosted deployments. Check Point IPS provides protection against this threat (BeyondTrust Multiple Products Command Injection (CVE-2026-1731)) THREAT INTELLIGENCE REPORTS Check Point Research analyzed global cyber-attacks in January averaging 2,090 per organization per week, up 3% from December and 17% year over year. Education remained the most targeted sector with 4,364 attacks per organization, ransomware recorded 678 incidents with 52% in North America, and 1 in 30 GenAI prompts posed high data leak risk. Check Point Research identified a sharp increase in Valentine-themed phishing websites, fraudulent stores, and fake dating platforms designed to steal personal data and payment information. Valentine-related domain registrations rose 44% in January 2026, with 97.5% unclassified, while 710 Tinder-impersonating domains were detected. A Phorpiex-driven phishing campaign has been observed delivering Global Group ransomware via ZIP attachments with double-extension LNK files, using CMD and PowerShell to execute the payload. The ransomware runs offline with locally generated ChaCha20-Poly1305 keys, deletes shadow copies and itself, and terminates analysis and database processes. Researchers have analyzed the latest GuLoader (aka CloudEye) downloader, which delivers Remcos, Vidar, and Raccoon, and now evades detection by leveraging encrypted payloads hosted on Google Drive and OneDrive. The malware uses polymorphic code to generate constants via XOR and ADD/SUB operations, along with anti-analysis techniques such as sandbox checks and exception handlers. Check Point Harmony Endpoint and Threat Emulation provide protection against this threat (Trojan.Wins.GuLoader; InfoStealer.Win.GuLoader; Dropper.Wins.GuLoader.ta.*; Dropper.Win.CloudEyE; RAT.Wins.Remcos; InfoStealer.Win.Vidar; InfoStealer.Win.Raccoon; InfoStealer.Wins.Raccoon)

Payment tech provider for Texas, Florida governments working with FBI to resolve ransomware attack A ransomware attack on a Florida technology company has taken down systems used by several local governments to process payments. BridgePay Network Solutions initially warned customers on Friday that it was dealing with system-wide outages and later said that it was working with the FBI and U.S. Secret Service forensic team to resolve a ransomware attack. The company does not have an estimated timeframe for when its systems will be restored. It does not believe that payment card data was stolen during the attack. BridgePay Network Solutions provides a transaction gateway for all types of point of sale solutions. It works with dozens of local governments and small businesses, processing 40 million transactions each month. The City of Palm Bay, Florida published its own statement warning residents that because BridgePay is its credit card processing vendor, the outages made their online billing payment portal unavailable. They urged residents to make payments in cash or through check or credit card payments in person. The Palm Bay online portal can still accept checks as well. The Texas city of Frisco released a similar statement that their utility water payments portal was also down because of the ransomware attack on BridgePay. Payments can be made in person at the Frisco city hall. Several other private businesses reported being impacted by the BridgePay incident. “We do not believe there is a threat or vulnerability for our integrators at this time,” BridgePay said in a statement on Friday evening. Statements on Saturday and Sunday reiterated that the investigation and restoration efforts are continuing. No ransomware gang has taken credit for the attack as of Monday and BridgePay did not respond to requests for comment about the incident. The ransomware attack resembles several others involving widely used payment software. In 2023, payment processing giant NCR disclosed a ransomware attack that caused an outage on its point of sale technology used widely by restaurants. Jonathan Greig is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic.

US payments platform provider BridgePay has confirmed it is experiencing an IT outage due to a ransomware attack. In a series of security alerts published on February 6, the Florida-based company said the attack caused “system-wide service disruption.” The firm is working with cybersecurity professionals and US authorities, including the FBI and the US Secret Service forensic team, to investigate the incident. BridgePay Network Solutions said an initial forensic investigation indicated that no payment card data has been compromised and that any data that may have been accessed by the attackers were encrypted. “At this time, there is no evidence of usable data exposure,” it said in a statement on February 6 The company stated that it cannot provide a definitive timeline for full recovery or when systems will be fully operational again but promised to provide regular updates to inform users of the restoration process status. “We recognize that recovery may be a lengthy process, and we are working with urgency and diligence to restore systems and services in a secure and responsible manner. Our priority remains protecting our customers, partners and operations,” the firm wrote. The incident is having ripple effects in the US, where several organizations, including restaurants and retailers have notified customers they can no longer accept card payments. The City of Palm Bay, Florida, issued a warning on February 6 saying its online billing payment portal is currently unavailable due to the BridgePay outage.

A major U.S. payment gateway and solutions provider says a ransomware attack has knocked key systems offline, triggering a widespread outage affecting multiple services. The incident began on Friday and quickly escalated into a nationwide disruption across BridgePay's platform. Ransomware confirmed within hours of outage BridgePay Network Solutions confirmed late Friday that the incident disrupting its payment gateway was caused by ransomware. In an update posted Feb. 6, the company said it has engaged federal law enforcement, including the FBI and U.S. Secret Service, along with external forensic and recovery teams. "Initial forensic findings indicate that no payment card data has been compromised," the company said, adding that any accessed files were encrypted and that there is currently "no evidence of usable data exposure." BleepingComputer has contacted BridgePay with questions about the ransomware group involved, which BridgePay has not yet named. Merchants report cash-only payments Around the same time BridgePay disclosed the incident, some U.S. merchants and organizations began telling customers they could only accept cash due to a nationwide card-processing outage. One restaurant said its "credit card processing company had a cyber security breach" and that card payments were unavailable nationwide. City of Palm Bay, Florida government announced: "BridgePay Network Solutions, our third-party credit card processing vendor, is experiencing a nationwide service disruption. As a result, the City's online billing payment portal is currently unavailable. We do not have an estimated restoration time." As such, the city government suggests that customers may make utility payments by cash, card, or check by appearing in person or, in limited cases, by calling the office. Other organizations, including Lightspeed Commerce, ThriftTrac, and City of Frisco, Texas have reported service impacts from the BridgePay incident. Payment gateway services hit hard BridgePay's status page showed major outages across core production systems, including: BridgePay Gateway API (BridgeComm) PayGuardian Cloud API MyBridgePay virtual terminal and reporting Hosted payment pages PathwayLink gateway and boarding portals Early warning signs appeared around 3:29 a.m., when monitoring detected degraded performance across multiple services, beginning with the "Gateway.Itstgate.com - virtual terminal, reporting, API" systems. The intermittent service degradation eventually cascaded into a full system outage. Within hours, the company disclosed the incident was cybersecurity-related and later confirmed it was ransomware. The breadth of affected systems suggests widespread disruption for merchants and payment integrators relying on the platform for card processing. As of the latest update, BridgePay said recovery could take time and is being handled "in a secure and responsible manner," while the company continues its forensic investigation. The incident adds to a growing wave of ransomware attacks targeting payment infrastructure, where outages can quickly ripple through real-world commerce when transaction pipelines go down. Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report