cybersecurity

Your security stack looks fine from the dashboard and that’s the problem

Absolute, CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, endpoint management, enterprise, generative AI, News, report, Risk Management, RSAC 2026 /

Your security stack looks fine from the dashboard and that’s the problem 2026-03-25 at 08:07 By Anamarija Pogorelec One in five enterprise endpoints is operating outside a protected and enforceable state on any given day, according to device telemetry collected across tens of millions of corporate PCs. That figure, drawn from Absolute Security’s 2026 Resilience […]

Your security stack looks fine from the dashboard and that’s the problem Read More »

The AI safety conversation is focused on the wrong layer

agentic AI, Artificial Intelligence, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, RSAC 2026, strategy, Teleport /

The AI safety conversation is focused on the wrong layer 2026-03-24 at 16:30 By Mirko Zorz Organizations have spent years accumulating fragmented identity systems: too many roles, too many credentials, too many disconnected tools. For a workforce of humans, that fragmentation was manageable. Humans log in, log out, and make decisions slowly enough that gaps […]

The AI safety conversation is focused on the wrong layer Read More »

Quantum threats are already active and the defense response remains fragmented

CISO, cybersecurity, Don't miss, Encryption, Features, Hot stuff, News, pQCee, quantum computing, RSAC 2026, strategy /

Quantum threats are already active and the defense response remains fragmented 2026-03-23 at 17:17 By Mirko Zorz Enterprises are moving toward post-quantum security at uneven speeds, and the gap between organizations that have built crypto-agility into their infrastructure and those that have adopted the label without the underlying capability is widening. Dr. Tan Teik Guan, […]

Quantum threats are already active and the defense response remains fragmented Read More »

The devices winning the race to get hacked in 2026

cyber risk, cybersecurity, Forescout, hardware, Internet of Things, News, report, survey /

The devices winning the race to get hacked in 2026 2026-03-23 at 17:17 By Sinisa Markovic Enterprise networks keep adding connected devices, expanding the attack surface as threat actors target a wider range of systems, many of which are difficult to inventory, secure, and patch consistently. (Source: Forescout) Forescout’s 2026 Riskiest Devices research maps that […]

The devices winning the race to get hacked in 2026 Read More »

Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps

Aurigo Software Technologies, cybersecurity, Don't miss, GitHub, GitLab, News, open source, scanner, software /

Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps 2026-03-23 at 09:18 By Anamarija Pogorelec GitLab CI/CD pipelines often accumulate configuration decisions that drift from security baselines over time. Container images get pinned to mutable tags, branches lose protection settings, and required templates go missing. An open-source tool called Plumber automates the detection of […]

Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps Read More »

Your AI agents are moving sensitive data. Do you know where?

agentic AI, Artificial Intelligence, Bonfy.AI, CISO, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, RSAC 2026, strategy, threat modeling /

Your AI agents are moving sensitive data. Do you know where? 2026-03-23 at 09:18 By Mirko Zorz In this Help Net Security interview, Gidi Cohen, CEO at Bonfy.AI, addresses what he sees as the most pressing gap in AI agent security: data-layer risk. While the industry focuses on prompt injection and model behavior, Cohen argues […]

Your AI agents are moving sensitive data. Do you know where? Read More »

NIST updates its DNS security guidance for the first time in over a decade

cybersecurity, DNS, DNSSEC, Don't miss, how-to, Infoblox, News, NIST, security standard /

NIST updates its DNS security guidance for the first time in over a decade 2026-03-23 at 09:18 By Mirko Zorz DNS infrastructure underpins nearly every network connection an organization makes, yet security configurations for it have gone largely unrevised at the federal guidance level for more than twelve years. NIST published SP 800-81r3, the Secure […]

NIST updates its DNS security guidance for the first time in over a decade Read More »

Secure endpoint management systems immediately, CISA urges

CISA, cybersecurity, endpoint management, Endpoint Security, Government, Microsoft, News, USA /

Secure endpoint management systems immediately, CISA urges 2026-03-19 at 14:59 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) warns that the cyberattack on Stryker Corporation serves as a signal to U.S. organizations that foreign cyber activity tied to Middle East conflicts may be spilling into their operations. Attackers breached Stryker’s internal Microsoft […]

Secure endpoint management systems immediately, CISA urges Read More »

Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026

cyber news, cybersecurity, Dark Web Monitoring, darkweb, EU, Ransomware, Ransomware Insights /

Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026 2026-03-19 at 13:32 By Ashish Khaitan Russia-linked hacktivist activity has entered a noticeably different phase. While earlier campaigns leaned heavily on disruption through denial-of-service and opportunistic scanning of exposed systems, the current trajectory shows a stronger dependence on credential-based intrusions and identity-based cyber attacks. For security leaders, […]

Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026 Read More »

Your APIs are under siege, and attackers are just getting warmed up

Akamai, API security, cybersecurity, Data Protection, News, report /

Your APIs are under siege, and attackers are just getting warmed up 2026-03-19 at 07:21 By Anamarija Pogorelec Internet-facing systems are handling sustained levels of malicious traffic across APIs, web applications, and DDoS channels. Akamai’s State of the Internet security report places these patterns within the same operating environment, with activity increasing across each area […]

Your APIs are under siege, and attackers are just getting warmed up Read More »

Apple starts issuing lightweight security updates between software releases

apple, cybersecurity, iOS, News, update /

Apple starts issuing lightweight security updates between software releases 2026-03-18 at 13:32 By Sinisa Markovic Apple is delivering small security updates, called Background Security Improvements, starting with iOS 26.1, iPadOS 26.1, and macOS 26.1. Apple describes Background Security Improvements as lightweight security releases for components such as Safari, the WebKit framework, and other system libraries, […]

Apple starts issuing lightweight security updates between software releases Read More »

Major tech companies invest $12.5 million in open source security

Anthropic, Artificial Intelligence, AWS, cybersecurity, GitHub, Google, Microsoft, News, open source, OpenAI, OpenSSF, The Linux Foundation /

Major tech companies invest $12.5 million in open source security 2026-03-18 at 11:31 By Sinisa Markovic The Linux Foundation announced $12.5 million in grant funding backed by Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI to strengthen open source security. The funding will be directed through the foundation’s Alpha-Omega Project and the Open Source […]

Major tech companies invest $12.5 million in open source security Read More »

Stop building security goals around controls

CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, security metrics, security ROI, strategy /

Stop building security goals around controls 2026-03-18 at 09:27 By Mirko Zorz In this Help Net Security interview, Devin Rudnicki, CISO at Fitch Group, argues that security strategy fails when it loses its connection to business outcomes. Rudnicki walks through how to align security goals with corporate priorities, why CISOs must present risk in terms […]

Stop building security goals around controls Read More »

EU sanctions Chinese company behind 65,000-device hack

China, cyberattacks, cybersecurity, EU, Government, Iran, News /

EU sanctions Chinese company behind 65,000-device hack 2026-03-17 at 14:26 By Sinisa Markovic The EU Council has sanctioned companies from China and Iran, along with two individuals, over cyberattacks targeting its member states and partners. “Those listed are subject to an asset freeze, while EU citizens and companies are prohibited from providing them with funds […]

EU sanctions Chinese company behind 65,000-device hack Read More »

Middle East Cyber Warfare Intensifies: Rising Attacks, Hacktivist Surge, and Global Risk Exposure 

cyber news, cybersecurity, Cyberwarfare, Dark Web Monitoring, data breach, DDoS /

Middle East Cyber Warfare Intensifies: Rising Attacks, Hacktivist Surge, and Global Risk Exposure  2026-03-17 at 12:22 By Ashish Khaitan The ongoing Middle East war has evolved into a cyber battlefield, with state-sponsored operations targeting critical infrastructure and essential services. Analysts warn that the region is witnessing an unprecedented escalation in Middle East cyber warfare, with attacks affecting governments, energy networks, finance, […]

Middle East Cyber Warfare Intensifies: Rising Attacks, Hacktivist Surge, and Global Risk Exposure  Read More »

Hidden instructions in README files can make AI agents leak data

agentic AI, Artificial Intelligence, cybersecurity, News, research /

Hidden instructions in README files can make AI agents leak data 2026-03-17 at 08:02 By Sinisa Markovic Developers rely on AI coding agents to set up projects, install dependencies, and run commands by following instructions in repository README files, which provide setup guidance for software projects. New research identifies a security risk when attackers hide […]

Hidden instructions in README files can make AI agents leak data Read More »

What to do in the first 24 hours of a breach

CISO, Compliance, cybersecurity, CYGNVS, data breach, Don't miss, Incident Response, News, strategy, tips, Video /

What to do in the first 24 hours of a breach 2026-03-17 at 07:59 By Help Net Security In this Help Net Security video, Arvind Parthasarathi, CEO of CYGNVS, walks through a 10-step process for handling a cybersecurity breach. The first five steps cover preparation: setting up an out-of-band communication platform, identifying internal stakeholders, selecting […]

What to do in the first 24 hours of a breach Read More »

Certificate lifespans are shrinking and most organizations aren’t ready

certificates, cybersecurity, Don't miss, Encryption, Features, GlobalSign, Hot stuff, News, PKI, quantum computing, strategy /

Certificate lifespans are shrinking and most organizations aren’t ready 2026-03-16 at 08:32 By Mirko Zorz The push for shorter TLS certificate lifespans has been building for years. It started with Google’s internal push toward 90-day certificates, which gained traction inside the industry before resistance from enterprise customers slowed things down. Then Apple proposed 47-day certificates, […]

Certificate lifespans are shrinking and most organizations aren’t ready Read More »

What smart factories keep getting wrong about cybersecurity

CISO, cybersecurity, digital transformation, Don't miss, Features, Hot stuff, IIoT, Internet of Things, News, opinion, strategy /

What smart factories keep getting wrong about cybersecurity 2026-03-16 at 08:24 By Mirko Zorz In this Help Net Security interview, Packsize CSO Troy Rydman breaks down the biggest vulnerabilities in smart factory environments today, from IoT devices and legacy systems to human error. He explains how unmanaged devices, from sensors to robotic components, often go […]

What smart factories keep getting wrong about cybersecurity Read More »

Scroll to Top