cybersecurity

Microsoft’s new model helps AI agents judge their next move

agentic AI, AI, cybersecurity, Microsoft, News /

Microsoft’s new model helps AI agents judge their next move 2026-10-12 at 14:02 By Anamarija Pogorelec Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making […]

Microsoft’s new model helps AI agents judge their next move Read More »

Windows PCs missing key updates could lose security fixes in 2027

certificates, cybersecurity, Microsoft, News, security update, Windows /

Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]

Windows PCs missing key updates could lose security fixes in 2027 Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

AI vulnerability patching has a grading problem

agentic AI, AI, cybersecurity, Don't miss, News, patching, research, vulnerability assessment /

AI vulnerability patching has a grading problem 2026-10-12 at 07:45 By Anamarija Pogorelec Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that […]

AI vulnerability patching has a grading problem Read More »

What makes some open source updates so difficult?

cybersecurity, Google, News, open source, report, software development /

What makes some open source updates so difficult? 2026-10-12 at 07:00 By Anamarija Pogorelec Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open […]

What makes some open source updates so difficult? Read More »

Anthropic offers free AI security scans to open-source maintainers

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, open source, scanner /

Anthropic offers free AI security scans to open-source maintainers 2026-10-09 at 12:55 By Anamarija Pogorelec Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when […]

Anthropic offers free AI security scans to open-source maintainers Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

backdoor, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, Linux, Malware, News, opinion, Rapid7, Threat Intelligence /

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

CISO, critical infrastructure, cybersecurity, Don't miss, EU, Europe, Features, hardware, Hot stuff, ICS/SCADA, News, research, vulnerability assessment /

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

Companies want autonomous IT operations but hesitate to let AI act alone

agentic AI, AI, automation, cybersecurity, News, Riverbed, security operations /

Companies want autonomous IT operations but hesitate to let AI act alone 2026-10-09 at 07:30 By Anamarija Pogorelec Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say […]

Companies want autonomous IT operations but hesitate to let AI act alone Read More »

Anthropic’s new budget model gets much better at ignoring hidden commands

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Anthropic’s new budget model gets much better at ignoring hidden commands 2026-10-08 at 14:24 By Anamarija Pogorelec Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4.5, though lighter […]

Anthropic’s new budget model gets much better at ignoring hidden commands Read More »

GitHub adds AI to catch passwords before a code push

agentic AI, AI, code, credentials, cybersecurity, DevSecOps, GitHub, News /

GitHub adds AI to catch passwords before a code push 2026-10-08 at 12:02 By Anamarija Pogorelec GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can […]

GitHub adds AI to catch passwords before a code push Read More »

How AI can fix cybersecurity compliance: From dashboards to continuous execution

AI, Compliance, cybersecurity, Don't miss, Hot stuff, News, opinion /

How AI can fix cybersecurity compliance: From dashboards to continuous execution 2026-10-08 at 08:00 By Help Net Security Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative controls, monitor their […]

How AI can fix cybersecurity compliance: From dashboards to continuous execution Read More »

The people who know passkeys best are still typing passwords

authentication, cybersecurity, News, Okta, passwordless, passwords, report, Yubico /

The people who know passkeys best are still typing passwords 2026-10-08 at 07:30 By Anamarija Pogorelec Yubico and Okta asked 1,890 technology and security professionals across nine countries how they sign in to work accounts. The most common answer was a username and password, at 43%, from a group in which 87% said they were […]

The people who know passkeys best are still typing passwords Read More »

Anthropic loosens Claude’s cyber restrictions for verified defenders

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, security controls /

Anthropic loosens Claude’s cyber restrictions for verified defenders 2026-10-07 at 12:00 By Anamarija Pogorelec Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work The program now has three tiers based […]

Anthropic loosens Claude’s cyber restrictions for verified defenders Read More »

AI endpoint management: Visibility, compliance, and remediation

AI, automation, cybersecurity, Don't miss, endpoint management, Hot stuff, News, opinion, patching /

AI endpoint management: Visibility, compliance, and remediation 2026-10-07 at 08:00 By Help Net Security Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and rising compliance pressure mean security teams manage more devices, more software, and more exceptions than a […]

AI endpoint management: Visibility, compliance, and remediation Read More »

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment

automation, critical infrastructure, cybersecurity, hardware, legacy technology, News, Palo Alto Networks, report, survey /

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment 2026-10-07 at 07:50 By Anamarija Pogorelec Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That is the picture from a Palo Alto Networks survey of more than […]

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment Read More »

Automation, AI agents or people? Sorting out who handles each security finding

ArmorCode, automation, boardroom, cybersecurity, Don't miss, Features, Hot stuff, News, report, strategy, survey, tips, vulnerability management /

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

Banks, CISO, cyber risk, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, opinion, Risk Management, strategy, tips /

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks

cybersecurity, iOS, iPhone, mobile security, News, Product showcase, scams, Webroot /

Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks 2026-10-06 at 07:30 By Anamarija Pogorelec Webroot Mobile Security combines device security checks, Safari protection, text scam filtering, and data breach monitoring. It is available for iPhone, iPad, and Android devices. The app requires an active Webroot subscription and is […]

Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

Scroll to Top