cybersecurity

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring

BEC scams, cybersecurity, Don't miss, Email, Expert analysis, Expert corner, Fortra, News, opinion, phishing /

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring 2025-12-18 at 16:12 By Help Net Security Between June 2024 and December 2025, Fortra analysts tracked a persistent business email compromise (BEC) operation that we have now classified as Scripted Sparrow. The group carries out well-crafted highly targeted phishing campaigns that masquerade as professional services firms […]

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring Read More »

More than half of public vulnerabilities bypass leading WAFs

Application Security, cybersecurity, Don't miss, Hot stuff, Miggo Security, News, report, web application security, Whitepapers and webinars /

More than half of public vulnerabilities bypass leading WAFs 2025-12-18 at 13:42 By Help Net Security Miggo Security has released a new report that examines how web application firewalls are used across real-world security programs. The research outlines the role WAFs play as foundational infrastructure and evaluates their effectiveness against critical vulnerabilities, CVEs, and AI-driven

More than half of public vulnerabilities bypass leading WAFs Read More »

The soft underbelly of space isn’t in orbit, it’s on the ground

aerospace, CISO, cybersecurity, Don't miss, Features, Hot stuff, KSAT, News, security telemetry, strategy, supply chain, tips /

The soft underbelly of space isn’t in orbit, it’s on the ground 2025-12-18 at 09:08 By Mirko Zorz In this Help Net Security interview, Øystein Thorvaldsen, CISO at KSAT, discusses how adversaries view the ground segment as the practical way to reach space systems and why stations remain a focal point for security efforts. He

The soft underbelly of space isn’t in orbit, it’s on the ground Read More »

What cybersecurity leaders are reading to stay ahead

books, cybersecurity, Don't miss, News /

What cybersecurity leaders are reading to stay ahead 2025-12-18 at 07:33 By Anamarija Pogorelec If you’re looking for holiday gift ideas, books remain one of the simplest ways to spark curiosity and support someone’s growth. Whether the person on your list is exploring cybersecurity, AI, engineering, or career development, these titles offer something useful for

What cybersecurity leaders are reading to stay ahead Read More »

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders 

ANZ, cyber news, cybersecurity /

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders  2025-12-17 at 15:44 By Ashish Khaitan The Australian Cyber Security Centre (ACSC) has published a new guide, Quantum Technology Primer: Overview, aimed at helping organizations understand the field of quantum technologies for cybersecurity. The publication is part of a bigger effort to raise awareness and preparedness

Australia’s ACSC Releases Quantum Technology Primer for Cybersecurity Leaders  Read More »

Why vulnerability reports stall inside shared hosting companies

cybersecurity, Don't miss, Features, Hot stuff, News, research, strategy, tips, vulnerability disclosure, vulnerability management /

Why vulnerability reports stall inside shared hosting companies 2025-12-17 at 09:24 By Mirko Zorz Security teams keep sending vulnerability notifications, and the same pattern keeps repeating. Many alerts land, few lead to fixes. A new qualitative study digs into what happens after those reports arrive and explains why remediation so often stops short. The research

Why vulnerability reports stall inside shared hosting companies Read More »

How exposure management changes cyber defense

cybersecurity, Don't miss, endpoint management, Endpoint Security, News, SixMap, Video /

How exposure management changes cyber defense 2025-12-17 at 07:36 By Help Net Security In this Help Net Security video, Larry Slusser, VP of Strategy at SixMap, explains why endpoint detection and response is only part of the security story. Drawing on his work as an incident responder, engagement manager, and ransomware negotiator, he describes EDR

How exposure management changes cyber defense Read More »

AI breaks the old security playbook

Artificial Intelligence, CISO, CXO, cybersecurity, Deloitte, News, report /

AI breaks the old security playbook 2025-12-17 at 07:06 By Anamarija Pogorelec AI has moved into enterprise operations faster than many security programs expected. It is embedded in workflows, physical systems, and core infrastructure. Some AI tools reach hundreds of millions of users each week. Inference costs have fallen 280 fold, but overall spending is

AI breaks the old security playbook Read More »

The messy data trails of telehealth are becoming a security nightmare

CISO, Compliance, cybersecurity, Data Protection, Don't miss, Features, healthcare, Hot stuff, News, Ro, telehealth /

The messy data trails of telehealth are becoming a security nightmare 2025-12-16 at 09:24 By Mirko Zorz In this Help Net Security interview, Scott Bachand, CIO/CISO at Ro, discusses how telehealth reshapes the flow of patient data and what that means for security. He explains why organizations must strengthen data classification and visibility as systems

The messy data trails of telehealth are becoming a security nightmare Read More »

AI might be the answer for better phishing resilience

Artificial Intelligence, cybersecurity, LLMs, News, phishing, research /

AI might be the answer for better phishing resilience 2025-12-16 at 08:44 By Sinisa Markovic Phishing is still a go-to tactic for attackers, which is why even small gains in user training are worth noticing. A recent research project from the University of Bari looked at whether LLMs can produce training that helps people spot

AI might be the answer for better phishing resilience Read More »

Passwordless is finally happening, and users barely notice

authentication, cybersecurity, identity management, MFA, News, Okta, passwordless, report /

Passwordless is finally happening, and users barely notice 2025-12-16 at 07:32 By Anamarija Pogorelec Security teams know the strain that comes from tightening authentication controls while keeping users productive. A new report from Okta suggests this strain is easing. Stronger authentication methods are gaining traction, and many of them let users move through sign in

Passwordless is finally happening, and users barely notice Read More »

How researchers are teaching AI agents to ask for permission the right way

Artificial Intelligence, cybersecurity, data security, Don't miss, Features, Hot stuff, Iterate.ai, machine learning, News, research, USA /

How researchers are teaching AI agents to ask for permission the right way 2025-12-15 at 09:06 By Mirko Zorz People are starting to hand more decisions to AI agents, from booking trips to sorting digital files. The idea sounds simple. Tell the agent what you want, then let it work through the steps. The hard

How researchers are teaching AI agents to ask for permission the right way Read More »

Prometheus: Open-source metrics and monitoring systems and services

Cloud Native Computing Foundation, cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, monitoring, News, open source, security metrics, software /

Prometheus: Open-source metrics and monitoring systems and services 2025-12-15 at 08:43 By Anamarija Pogorelec Prometheus is an open-source monitoring and alerting system built for environments where services change often and failures can spread fast. For security teams and DevOps engineers, it has become a common way to track system behavior, spot early warning signs, and

Prometheus: Open-source metrics and monitoring systems and services Read More »

Manufacturing is becoming a test bed for ransomware shifts

cybersecurity, Encryption, manufacturing sector, News, Ransomware, report, Sophos, threat detection /

Manufacturing is becoming a test bed for ransomware shifts 2025-12-15 at 07:12 By Anamarija Pogorelec Manufacturing leaders may feel that ransomware risk has settled, but new data shows the threat is shifting in ways that require attention, according to a Sophos report. A global survey of 332 IT and security leaders outlines how attackers are

Manufacturing is becoming a test bed for ransomware shifts Read More »

Ransomware keeps widening its reach

cyber risk, CyberCube, cybersecurity, News, Ransomware, report, threats /

Ransomware keeps widening its reach 2025-12-12 at 08:21 By Anamarija Pogorelec Ransomware keeps shifting into new territory, pulling in victims from sectors and regions that once saw fewer attacks. The latest Global Threat Briefing for H2 2025 from CyberCube shows incidents spreading in ways that make it harder for security leaders to predict where threats

Ransomware keeps widening its reach Read More »

Uneven regulatory demands expose gaps in mobile security

Compliance, cybersecurity, GSMA, mobile, mobile security, News, regulation, report, telecommunications /

Uneven regulatory demands expose gaps in mobile security 2025-12-12 at 07:36 By Anamarija Pogorelec Mobile networks carry a great deal of the world’s digital activity, which makes operators a frequent target for attacks. A study released by the GSMA shows that operators spend between $15 and $19 billion a year on core cybersecurity functions. Spending

Uneven regulatory demands expose gaps in mobile security Read More »

New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines 

cyber news, cybersecurity /

New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines  2025-12-11 at 16:26 By Ashish Khaitan Germany is taking decisive steps to strengthen its cybersecurity framework following the rise of digital threats. Last month, the Bundestag adopted the NIS-2 Implementation Act, translating the EU NIS-2 Directive (Directive (EU) 2022/2555) into national law. Published in

New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines  Read More »

40 open-source tools redefining how security teams secure the stack

Android, cybersecurity, Don't miss, GitHub, Hot stuff, Linux, macOS, News, open source, software, Windows /

40 open-source tools redefining how security teams secure the stack 2025-12-11 at 09:07 By Anamarija Pogorelec Open source security software has become a key way for teams to get flexibility, transparency, and capability without licensing costs. The free tools in this roundup address problems security teams deal with, from managing large environments to catching misconfigurations

40 open-source tools redefining how security teams secure the stack Read More »

Teamwork is failing in slow motion and security feels it

Artificial Intelligence, collaboration, cybersecurity, Forrester Consulting, News, report /

Teamwork is failing in slow motion and security feels it 2025-12-11 at 07:07 By Anamarija Pogorelec Security leaders often track threats in code, networks, and policies. But a quieter risk is taking shape in the everyday work of teams. Collaboration is getting harder even as AI use spreads across the enterprise. That tension creates openings

Teamwork is failing in slow motion and security feels it Read More »

Henkel CISO on the messy truth of monitoring factories built across decades

CISO, Cloud, cybersecurity, Don't miss, Features, firmware, Henkel, Hot stuff, Internet of Things, manufacturing sector, News, SaaS /

Henkel CISO on the messy truth of monitoring factories built across decades 2025-12-10 at 09:08 By Mirko Zorz In this Help Net Security interview, Stefan Braun, CISO at Henkel, discusses how smart manufacturing environments introduce new cybersecurity risks. He explains where single points of failure hide, how attackers exploit legacy systems, and why monitoring must

Henkel CISO on the messy truth of monitoring factories built across decades Read More »

Scroll to Top