cybersecurity

From AI to cyber risk, why IT leaders are anxious heading into 2026

Artificial Intelligence, cyber risk, cybersecurity, News, report, survey, Veeam Software /

From AI to cyber risk, why IT leaders are anxious heading into 2026 2025-12-26 at 07:35 By Sinisa Markovic Cybersecurity threats are shaping IT planning for 2026, with AI maturity and regulation emerging as another major source of disruption, according to a global survey from Veeam. Veeam surveyed 250 senior IT and business decision-makers worldwide […]

From AI to cyber risk, why IT leaders are anxious heading into 2026 Read More »

Five identity-driven shifts reshaping enterprise security in 2026

Artificial Intelligence, CISO, Compliance, cybersecurity, Delinea, Don't miss, Hot stuff, identity protection, News /

Five identity-driven shifts reshaping enterprise security in 2026 2025-12-24 at 11:18 By Help Net Security 2026 marks the tipping point when artificial intelligence begins to fundamentally reshape cyber risk. After several years of widespread adoption, AI moves beyond influencing how we work and starts transforming the enterprise itself. AI is now embedded at every layer

Five identity-driven shifts reshaping enterprise security in 2026 Read More »

Governance maturity defines enterprise AI confidence

agentic AI, Artificial Intelligence, Cloud Security Alliance, Compliance, cybersecurity, LLMs, News, report /

Governance maturity defines enterprise AI confidence 2025-12-24 at 08:17 By Anamarija Pogorelec AI security has reached a point where enthusiasm alone no longer carries organizations forward. New Cloud Security Alliance research shows that governance has become the main factor separating teams that feel prepared from those that do not. Governance separates confidence from uncertainty Governance

Governance maturity defines enterprise AI confidence Read More »

What happens to enterprise data when GenAI shows up everywhere

Cobalt, Concentric AI, Cyber Threat Alliance, cybersecurity, FS-ISAC, generative AI, Harmonic, Incogni, ISACA, Logility, Netskope, News, report, Thales, Trustmi /

What happens to enterprise data when GenAI shows up everywhere 2025-12-24 at 08:17 By Anamarija Pogorelec Generative AI is spreading across enterprise workflows, shaping how employees create, share, and move information between systems. Security teams are working to understand where data ends up, who can access it, and how its use reshapes security assumptions. This

What happens to enterprise data when GenAI shows up everywhere Read More »

Cloud security is stuck in slow motion

Artificial Intelligence, cloud security, cybersecurity, Incident Response, News, Palo Alto Networks, report /

Cloud security is stuck in slow motion 2025-12-23 at 08:23 By Anamarija Pogorelec Cloud environments are moving faster than the systems meant to protect them. A new Palo Alto Networks study shows security teams struggling to keep up with development cycles, growing cloud sprawl, and attacker tactics that now compress breaches into minutes instead of

Cloud security is stuck in slow motion Read More »

AI code looks fine until the review starts

Artificial Intelligence, code, code review, CodeRabbit, cybersecurity, News, open source, report, software development /

AI code looks fine until the review starts 2025-12-23 at 08:23 By Anamarija Pogorelec Software teams have spent the past year sorting through a rising volume of pull requests generated with help from AI coding tools. New research puts numbers behind what many reviewers have been seeing during work. The research comes from CodeRabbit and

AI code looks fine until the review starts Read More »

DIG AI: Uncensored darknet AI assistant at the service of criminals and terrorists

Artificial Intelligence, cybersecurity, dark web, law enforcement, LLMs, News, report, Resecurity /

DIG AI: Uncensored darknet AI assistant at the service of criminals and terrorists 2025-12-22 at 13:00 By Help Net Security Resecurity has identified the emergence of uncensored darknet AI assistants, enabling threat actors to leverage advanced data processing capabilities for malicious purposes. One of these – DIG AI – was identified on September 29 of

DIG AI: Uncensored darknet AI assistant at the service of criminals and terrorists Read More »

Building cyber talent through competition, residency, and real-world immersion

CISO, cybersecurity, cybersecurity talent, Don't miss, education, Features, Hot stuff, News, Sandia National Laboratories, skill development /

Building cyber talent through competition, residency, and real-world immersion 2025-12-22 at 09:01 By Mirko Zorz In this Help Net Security interview, Chrisma Jackson, Director of Cybersecurity & Mission Computing Center and CISO at Sandia National Laboratories, reflects on where the cyber talent pipeline breaks down and what it takes to fix it. She discusses skill

Building cyber talent through competition, residency, and real-world immersion Read More »

Anubis: Open-source web AI firewall to protect from scraper bots

automation, bot, cybersecurity, Don't miss, firewall, GitHub, monitoring, network monitoring, News, open source, software, traffic monitoring /

Anubis: Open-source web AI firewall to protect from scraper bots 2025-12-22 at 08:49 By Sinisa Markovic Anubis is an open-source tool designed to protect websites from automated scraping and abusive traffic by adding computational friction before a request is served. Maintained by TecharoHQ, the project targets a growing problem for site operators who want to

Anubis: Open-source web AI firewall to protect from scraper bots Read More »

Session tokens give attackers a shortcut around MFA

access control, authentication, Compliance, cside, cybersecurity, Don't miss, MFA, News, Video /

Session tokens give attackers a shortcut around MFA 2025-12-22 at 07:45 By Help Net Security In this Help Net Security video, Simon Wijckmans, CEO at cside, discusses why session token theft is rising and why security teams miss it. He walks through how web applications rely on browsers to store session tokens after login often

Session tokens give attackers a shortcut around MFA Read More »

India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act 

cyber news, cybercrime, cybersecurity, telecommunications /

India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act  2025-12-19 at 10:38 By Ashish Khaitan The Indian government has introduced explicit legal provisions under subsection 42(3)(c) and subsection 42(3)(f) of the Telecommunications Act, 2023, formally classifying the tampering with telecommunication identifiers and the willful possession of radio equipment using unauthorized

India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act  Read More »

AI isn’t one system, and your threat model shouldn’t be either

Artificial Intelligence, Cerebras Systems, CISO, cybersecurity, Don't miss, Features, Hot stuff, LLMs, News, threat modeling /

AI isn’t one system, and your threat model shouldn’t be either 2025-12-19 at 09:02 By Mirko Zorz In this Help Net Security interview, Naor Penso, CISO at Cerebras Systems, explains how to threat model modern AI stacks without treating them as a single risk. He discusses why partitioning AI systems by function and impact matters,

AI isn’t one system, and your threat model shouldn’t be either Read More »

LLMs work better together in smart contract audits

blockchain, CISO, cybersecurity, Don't miss, Ethereum, framework, LLMs, News, research, strategy, tips /

LLMs work better together in smart contract audits 2025-12-19 at 08:42 By Sinisa Markovic Smart contract bugs continue to drain real money from blockchain systems, even after years of tooling and research. A new academic study suggests that large language models can spot more of those flaws when they work in coordinated groups instead of

LLMs work better together in smart contract audits Read More »

Identity risk is changing faster than most security teams expect

agentic AI, AU10TIX, automation, cybersecurity, fraud, identity protection, News, quantum computing, report /

Identity risk is changing faster than most security teams expect 2025-12-19 at 07:35 By Anamarija Pogorelec Security leaders are starting to see a shift in digital identity risk. Fraud activity is becoming coordinated, automated, and self-improving. Synthetic personas, credential replay, and high speed onboarding attempts now operate through shared infrastructures that behave less like scattered

Identity risk is changing faster than most security teams expect Read More »

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring

BEC scams, cybersecurity, Don't miss, Email, Expert analysis, Expert corner, Fortra, News, opinion, phishing /

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring 2025-12-18 at 16:12 By Help Net Security Between June 2024 and December 2025, Fortra analysts tracked a persistent business email compromise (BEC) operation that we have now classified as Scripted Sparrow. The group carries out well-crafted highly targeted phishing campaigns that masquerade as professional services firms

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring Read More »

More than half of public vulnerabilities bypass leading WAFs

Application Security, cybersecurity, Don't miss, Hot stuff, Miggo Security, News, report, web application security, Whitepapers and webinars /

More than half of public vulnerabilities bypass leading WAFs 2025-12-18 at 13:42 By Help Net Security Miggo Security has released a new report that examines how web application firewalls are used across real-world security programs. The research outlines the role WAFs play as foundational infrastructure and evaluates their effectiveness against critical vulnerabilities, CVEs, and AI-driven

More than half of public vulnerabilities bypass leading WAFs Read More »

The soft underbelly of space isn’t in orbit, it’s on the ground

aerospace, CISO, cybersecurity, Don't miss, Features, Hot stuff, KSAT, News, security telemetry, strategy, supply chain, tips /

The soft underbelly of space isn’t in orbit, it’s on the ground 2025-12-18 at 09:08 By Mirko Zorz In this Help Net Security interview, Øystein Thorvaldsen, CISO at KSAT, discusses how adversaries view the ground segment as the practical way to reach space systems and why stations remain a focal point for security efforts. He

The soft underbelly of space isn’t in orbit, it’s on the ground Read More »

What cybersecurity leaders are reading to stay ahead

books, cybersecurity, Don't miss, News /

What cybersecurity leaders are reading to stay ahead 2025-12-18 at 07:33 By Anamarija Pogorelec If you’re looking for holiday gift ideas, books remain one of the simplest ways to spark curiosity and support someone’s growth. Whether the person on your list is exploring cybersecurity, AI, engineering, or career development, these titles offer something useful for

What cybersecurity leaders are reading to stay ahead Read More »

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders 

ANZ, cyber news, cybersecurity /

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders  2025-12-17 at 15:44 By Ashish Khaitan The Australian Cyber Security Centre (ACSC) has published a new guide, Quantum Technology Primer: Overview, aimed at helping organizations understand the field of quantum technologies for cybersecurity. The publication is part of a bigger effort to raise awareness and preparedness

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders  Read More »

Why vulnerability reports stall inside shared hosting companies

cybersecurity, Don't miss, Features, Hot stuff, News, research, strategy, tips, vulnerability disclosure, vulnerability management /

Why vulnerability reports stall inside shared hosting companies 2025-12-17 at 09:24 By Mirko Zorz Security teams keep sending vulnerability notifications, and the same pattern keeps repeating. Many alerts land, few lead to fixes. A new qualitative study digs into what happens after those reports arrive and explains why remediation so often stops short. The research

Why vulnerability reports stall inside shared hosting companies Read More »

Scroll to Top