Fake AI trading agent steals crypto wallet passwords 2026-09-17 at 11:00 By Anamarija Pogorelec Attackers built a website for a fake AI crypto trading agent and used it to install Needle Stealer, malware that replaces a victim’s browser wallet with a copy that sends the wallet password to the attacker. HP caught the campaign between […]
Fake AI trading agent steals crypto wallet passwords Read More »
The AI security question leaders should be asking instead 2026-09-17 at 08:30 By Mirko Zorz In this Help Net Security interview, Frederic Bull, Security Officer at Gremlin, talks about what AI means for security teams. The conversation covers why asking what data a model was trained on is only part of the picture, and why […]
The AI security question leaders should be asking instead Read More »
A flat cybersecurity budget doesn’t have to mean weaker coverage 2026-09-17 at 08:00 By Help Net Security Cheri Hotman, Managing Partner of Hotman Group, works as a vCISO and vGRC leader. In this Help Net Security video, she talks about holding coverage steady when the CFO asks for a flat budget or a 12% cut. […]
A flat cybersecurity budget doesn’t have to mean weaker coverage Read More »
NIST and CISA finalize playbook to stop token theft and forgery 2026-09-16 at 10:40 By Anamarija Pogorelec NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR […]
NIST and CISA finalize playbook to stop token theft and forgery Read More »
What happens when AI agent governance is missing at scale 2026-09-16 at 09:00 By Mirko Zorz In this interview with Help Net Security, Gourab Basu, Global Head of Engineering at meshIQ, discusses governance in AI agent systems. He argues that instructions written into a prompt are not enough to control what an agent does, since […]
What happens when AI agent governance is missing at scale Read More »
The modern attack chain: Rethinking Google Workspace security in the age of AI 2026-09-16 at 08:00 By Help Net Security Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I keep coming back to the same […]
The modern attack chain: Rethinking Google Workspace security in the age of AI Read More »
MSPs say nearly half their customers rely on them for CISO services 2026-09-16 at 07:30 By Anamarija Pogorelec MSPs estimate that 46% of their customers, on average, look to them to act as CISOs, according to Sophos. Most of those providers do that job without the full set of compliance services, and many spread the […]
MSPs say nearly half their customers rely on them for CISO services Read More »
Microsoft sets security and safety rules for its AI models 2026-09-15 at 13:50 By Anamarija Pogorelec Microsoft AI has published the first draft of its Humanist AI Code of Conduct, a training manual outlining how it develops AI models and intends them to behave during deployment. The draft is open for public consultation for six […]
Microsoft sets security and safety rules for its AI models Read More »
Product showcase: mSecure makes one vault do more than remember passwords 2026-09-15 at 08:30 By Anamarija Pogorelec mSecure is a password manager and data vault for storing credentials and other sensitive information. It is available for iOS, Android, macOS, and Windows, with data synchronization across supported devices. The app uses AES-256 encryption and a zero-knowledge […]
Product showcase: mSecure makes one vault do more than remember passwords Read More »
Your employees are already using AI tools you never approved 2026-09-15 at 08:00 By Anamarija Pogorelec Seventy-four percent of respondents report departmental or scaled AI adoption at their organizations, including within individual teams or departments, across business functions, and as part of processes and operations, according to the latest OneTrust 2026 AI-Ready Governance Report. The […]
Your employees are already using AI tools you never approved Read More »
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities 2026-09-14 at 15:23 By Sinisa Markovic The EU Agency for Cybersecurity switched on the Cyber Resilience Act‘s Single Reporting Platform on 11 September 2026, the same day the law’s reporting obligations started binding manufacturers. ENISA built the tool and runs its day-to-day operations, a […]
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities Read More »
Turn it off and on again, but for critical infrastructure 2026-09-14 at 09:00 By Anamarija Pogorelec Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used the captured traffic to train a defense agent that decides on its […]
Turn it off and on again, but for critical infrastructure Read More »
Cybersecurity attention fades within months after a breach 2026-09-14 at 08:00 By Sinisa Markovic Cybersecurity attention often rises after an incident, then recedes as organizations return to their existing priorities and practices, according to a new ManageEngine survey of 700 IT and cybersecurity leaders in the US and Canada. (Source: ManageEngine) All of them had […]
Cybersecurity attention fades within months after a breach Read More »
Certificate failures can cost firms over $250,000 2026-09-14 at 07:30 By Anamarija Pogorelec The move toward 47-day public TLS certificates by 2029 will increase the certificate management workload for enterprises, according to DigiCert’s Certificate Management Outlook. Organizations will need to renew certificates more than eight times as often as under the previous certificate lifecycle and […]
Certificate failures can cost firms over $250,000 Read More »
AI is changing what Salesforce security needs to govern 2026-09-11 at 07:30 By Anamarija Pogorelec Existing security and governance practices have largely focused on identities, permissions, access, configurations and controls. WithSecure’s Navigating Trust in the Modern Salesforce Ecosystem paper says Salesforce environments also require organizations to understand what information they rely on, how trust extends […]
AI is changing what Salesforce security needs to govern Read More »
WordPress adds automated security checks to block risky plugin releases 2026-09-10 at 13:06 By Anamarija Pogorelec WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API. Releases considered a potential security risk will be blocked automatically. “A plugin can be secure today and introduce a vulnerability, […]
WordPress adds automated security checks to block risky plugin releases Read More »
Apple is building photo verification for the people who need it most 2026-09-10 at 11:18 By Anamarija Pogorelec Apple has introduced Apple Reference Image, an opt-in feature designed to verify the authenticity of photos taken with iPhone 18 Pro models. Apple Reference Image provides users with an unalterable reference photo, visually confirming what the sensor […]
Apple is building photo verification for the people who need it most Read More »
AI adoption brings new security headaches for already stretched CISOs 2026-09-10 at 07:30 By Anamarija Pogorelec CISOs are taking on AI governance without a matching increase in resources or expertise, adding to an already broad remit spanning data protection, identity, resilience and compliance, according to Proofpoint’s 2026 Voice of the CISO report. The Al mandate […]
AI adoption brings new security headaches for already stretched CISOs Read More »
Chinese AI firms are siphoning capabilities from American models, CISA warns 2026-09-09 at 12:55 By Anamarija Pogorelec China-based AI companies are using large-scale knowledge distillation campaigns to copy capabilities from leading U.S. AI models, according to a joint cybersecurity advisory from the CISA, NSA, and FBI. Knowledge distillation is a standard AI training technique that […]
Chinese AI firms are siphoning capabilities from American models, CISA warns Read More »
Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results 2026-09-09 at 08:00 By Help Net Security In the Gartner report Validate the Promises of AI SOC Agents With These Key Questions, analysts Craig Lawson and Andrew Davies posit that “By 2028, 70% of large SOCs will pilot AI agents to augment […]
Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results Read More »