cybersecurity

When Geopolitical Conflict Spills into Cyberspace — How US Organizations Should Respond 

cyber news, cyberattack, cybersecurity, Cyberwarfare /

When Geopolitical Conflict Spills into Cyberspace — How US Organizations Should Respond  2026-04-10 at 17:22 By Ashish Khaitan Modern conflict no longer begins with troops crossing borders; it often starts with packets crossing networks. For example, the escalation on February 28, 2026, involving Iran, the United States, and Israel gives insights on how quickly geopolitical cyber threats can evolve into […]

When Geopolitical Conflict Spills into Cyberspace — How US Organizations Should Respond  Read More »

Little Snitch for Linux shows what your apps are connecting to

cybersecurity, Linux, network, network monitoring, News, open source, software /

Little Snitch for Linux shows what your apps are connecting to 2026-04-10 at 11:48 By Mirko Zorz Network monitoring on Linux has long been a gap for users who want per-process visibility into outbound connections. Existing tools either operate at the command line or were designed for server security rather than desktop privacy. Objective Development, […]

Little Snitch for Linux shows what your apps are connecting to Read More »

April 2026 Patch Tuesday forecast: Spring-cleaning of a preview

Adobe, apple, cybersecurity, Expert analysis, Google, Ivanti, Mozilla, News, Patch Tuesday /

April 2026 Patch Tuesday forecast: Spring-cleaning of a preview 2026-04-10 at 10:37 By Help Net Security I just blinked and the first quarter of the year is GONE. Where does the time go? I looked back at my article from last month where I touched on the use of AI and some of the vulnerabilities […]

April 2026 Patch Tuesday forecast: Spring-cleaning of a preview Read More »

What vibe hunting gets right about AI threat hunting, and where it breaks down

Artificial Intelligence, cybersecurity, Don't miss, Exaforce, Features, Hot stuff, LLMs, News, opinion, threat hunting /

What vibe hunting gets right about AI threat hunting, and where it breaks down 2026-04-10 at 08:57 By Mirko Zorz In this Help Net Security interview, Aqsa Taylor, Chief Security Evangelist, Exaforce, explains vibe hunting, an AI-driven approach to threat detection that inverts traditional hypothesis-driven methods. Instead of analysts defining attack vectors upfront, the AI […]

What vibe hunting gets right about AI threat hunting, and where it breaks down Read More »

The Week in Vulnerabilities: OpenClaw, FreeBSD, F5 BIG-IP, and Critical ICS Bugs

cyber news, cybersecurity, vulnerability, vulnerability management /

The Week in Vulnerabilities: OpenClaw, FreeBSD, F5 BIG-IP, and Critical ICS Bugs 2026-04-09 at 14:24 By Mihir Bagwe Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report tracked 1,960 vulnerabilities last week, reflecting a continued surge in vulnerability disclosures across enterprise and cloud ecosystems. Of these, 248 vulnerabilities have publicly available Proof-of-Concept (PoC) exploits, significantly […]

The Week in Vulnerabilities: OpenClaw, FreeBSD, F5 BIG-IP, and Critical ICS Bugs Read More »

AI agent intent is a starting point, not a security strategy

agentic AI, Artificial Intelligence, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, report, Token Security /

AI agent intent is a starting point, not a security strategy 2026-04-09 at 08:53 By Mirko Zorz In this Help Net Security video, Itamar Apelblat, CEO of Token Security, walks through findings from the company’s research, which shows that 65% of agentic chatbots have never been used yet still hold live access credentials. He explains […]

AI agent intent is a starting point, not a security strategy Read More »

Asqav: Open-source SDK for AI agent governance

agentic AI, cybersecurity, Don't miss, GitHub, News, open source, software /

Asqav: Open-source SDK for AI agent governance 2026-04-09 at 08:27 By Mirko Zorz AI agents are executing consequential tasks autonomously, often across multiple systems and with little record of what they did or why. Asqav, a Python SDK released under the MIT license, addresses that gap by attaching a cryptographic signature to each agent action […]

Asqav: Open-source SDK for AI agent governance Read More »

Dual-Brain Architecture: The Cybersecurity AI Innovation That Changes Everything

AI in Cybersecurity, cyberattack, cybersecurity, Threat Intelligence /

Dual-Brain Architecture: The Cybersecurity AI Innovation That Changes Everything 2026-04-08 at 15:45 By Ashish Khaitan Cybersecurity has always been a race, but it is no longer a fair one. Attackers now operate at machine speed, orchestrating campaigns that evolve in seconds, while many defense teams still rely on workflows measured in hours or days. This widening gap […]

Dual-Brain Architecture: The Cybersecurity AI Innovation That Changes Everything Read More »

Iranian cyber activity hits US energy, water, and government networks

CISA, critical infrastructure, cybersecurity, energy sector, FBI, Government, News, NIST, NSA /

Iranian cyber activity hits US energy, water, and government networks 2026-04-08 at 15:06 By Anamarija Pogorelec U.S. government agencies on Tuesday warned American organizations about ongoing cyber activity targeting OT and PLC devices, including those manufactured by Rockwell Automation and Allen-Bradley, across multiple critical infrastructure sectors. The activity has been attributed to Iranian-affiliated APT actors […]

Iranian cyber activity hits US energy, water, and government networks Read More »

What managing partners should ask AI vendors before signing any contract

Artificial Intelligence, CISO, cyber risk, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, privileged identity, Risk Management, security controls, strategy, Threat Intelligence /

What managing partners should ask AI vendors before signing any contract 2026-04-08 at 09:28 By Mirko Zorz In this Help Net Security interview, Kumar Ravi is the Chief Security & Resilience Officer at TMF Group, argues that over-privileged access and weak workflow controls pose more danger than ransomware attacks, precisely because they accumulate quietly and […]

What managing partners should ask AI vendors before signing any contract Read More »

Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR

Compliance, cybersecurity, Data Protection, Don't miss, Drata, GDPR, HIPAA, ISO 27001, News, open source, regulation, Vanta /

Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR 2026-04-07 at 12:01 By Anamarija Pogorelec Getting a startup through a SOC 2 audit has long meant months of manual evidence collection, policy writing, and repeated back-and-forth with auditors. A growing number of compliance platforms have moved to automate […]

Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR Read More »

The case for fixing CWE weakness patterns instead of patching one bug at a time

CISO, CVE, cybersecurity, Don't miss, Features, Hot stuff, MITRE, News, opinion, vulnerability management /

The case for fixing CWE weakness patterns instead of patching one bug at a time 2026-04-07 at 09:24 By Mirko Zorz In this Help Net Security interview, Alec Summers, MITRE CVE/CWE Project Lead, discusses how CWE is moving from a background reference into active use in vulnerability disclosure. More CVE records now include CWE mappings […]

The case for fixing CWE weakness patterns instead of patching one bug at a time Read More »

UK Businesses Are Being Targeted Through Their Middle East Supply Chains — What to Do Now

cyber news, cybersecurity, Cyberwarfare, EU, Europe /

UK Businesses Are Being Targeted Through Their Middle East Supply Chains — What to Do Now 2026-04-06 at 15:32 By Ashish Khaitan The conversation around cyber risk in the UK has shifted. It is no longer confined to domestic networks, internal systems, or even direct attacks on British infrastructure. The weak link sits thousands of […]

UK Businesses Are Being Targeted Through Their Middle East Supply Chains — What to Do Now Read More »

Residential proxies make a mockery of IP-based defenses

cybersecurity, network, News, Proxy, report, survey /

Residential proxies make a mockery of IP-based defenses 2026-04-06 at 09:16 By Sinisa Markovic Attack traffic moved through ordinary home and mobile connections in ways that limited the usefulness of IP reputation on its own. GreyNoise observed 4 billion malicious sessions during a 90-day period and described activity that appeared indistinguishable from normal user traffic […]

Residential proxies make a mockery of IP-based defenses Read More »

IT talent looks the other way as wireless security incidents pile up

Artificial Intelligence, Cisco, cybersecurity, News, report, survey, wireless /

IT talent looks the other way as wireless security incidents pile up 2026-04-06 at 09:16 By Sinisa Markovic Enterprise wireless networks are supporting a growing mix of devices and applications, increasing operational demand and security exposure. The 2026 Cisco State of Wireless report reflects these conditions through rising incident rates, higher costs, and ongoing staffing […]

IT talent looks the other way as wireless security incidents pile up Read More »

CISOs grapple with AI demands within flat budgets

Artificial Intelligence, CISO, cybersecurity, News, report, RH-ISAC, skill development, supply chain /

CISOs grapple with AI demands within flat budgets 2026-04-06 at 09:16 By Anamarija Pogorelec Security spending continues to edge upward across large organizations, though the changes remain gradual and tightly managed. The 2026 RH-ISAC CISO Benchmark reflects a steady environment where budgets expand in small steps, even as AI becomes a routine part of security […]

CISOs grapple with AI demands within flat budgets Read More »

Microsoft releases open-source toolkit to govern autonomous AI agents

agentic AI, cybersecurity, Don't miss, GitHub, Microsoft, News, open source, software /

Microsoft releases open-source toolkit to govern autonomous AI agents 2026-04-03 at 08:39 By Anamarija Pogorelec AI agents can book travel, execute financial transactions, write and run code, and manage infrastructure without human intervention at each step. Frameworks like LangChain, AutoGen, CrewAI, and Azure AI Foundry Agent Service have made this kind of autonomy straightforward to […]

Microsoft releases open-source toolkit to govern autonomous AI agents Read More »

Click, wait, repeat: Digital trust erodes one login at a time

Artificial Intelligence, authentication, cybersecurity, News, report, Thales /

Click, wait, repeat: Digital trust erodes one login at a time 2026-04-03 at 07:58 By Anamarija Pogorelec Sign-up forms that drag on, login steps that repeat, and access requests that take longer than expected have become a normal part of using digital services. These moments rarely stand out on their own, and over time they […]

Click, wait, repeat: Digital trust erodes one login at a time Read More »

New infosec products of the month: March 2026

Beazley, Bonfy.AI, cybersecurity, Intel 471, Mend, Mimecast, News, NinjaOne, Novee, Singulr AI, Stellar Cyber, Teleport, Vicarius /

New infosec products of the month: March 2026 2026-04-03 at 07:02 By Anamarija Pogorelec Here’s a look at the most interesting products from the past month, featuring releases from Beazley, Bonfy.AI, Mend.io, Mimecast, NinjaOne, Novee, Intel 471, Singulr AI, Stellar Cyber, Teleport, and Vicarius. Beazley Exposure Management platform identifies external exposures and prioritizes cyber risk […]

New infosec products of the month: March 2026 Read More »

Trust, friction, and ROI: A CISO’s take on making security work for the business

CISO, Compliance, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, security ROI, strategy /

Trust, friction, and ROI: A CISO’s take on making security work for the business 2026-04-02 at 08:42 By Mirko Zorz In this Help Net Security interview, John O’Rourke, CISO at PPG, talks about what it means for security to drive business value. He explains how mature security programs reduce friction in sales cycles and M&A […]

Trust, friction, and ROI: A CISO’s take on making security work for the business Read More »

Scroll to Top